20190602

letsencrypt wildcard
dehydrated dns-01 challenge+ duckdns txt record

dns.conf

CA="https://acme-v02.api.letsencrypt.org/directory"
CHALLENGETYPE="dns-01"
HOOK="/etc/dehydrated/hooks.d/duckdns.sh"
HOOK_CHAIN="yes"

duckdns.sh

...
    "deploy_cert")
        sleep 4
        ;;
...

/etc/dehydrated/dehydrated --config /etc/dehydrated/dns.conf -c  -d "yourdomain.com *.yourdomain.com" --alias wildcard.yourdomain.com