Traefik DNS-01 challenge UI #7949

Where NS8 is deployed behind a reverse-proxy that blocks HTTP-based ACME challenges, the DNS-based challenge is desirable. This scenario often occurs with on-premise NethVoice installations.

It is already possible to switch HTTP-based ACME challenge type from API with set-acme-server action. It is also possible to configure the DNS-01 challenge.

Proposed solution

Implement ACME challenge type selection and full configuration in the cluster-admin TLS certificates page.

Alternative solutions

Continue to rely on CLI-based configurations.

Additional context

The UI already provides a table for ACME server URL configuration, often used to switch to LE Staging environment for testing/development purposes.

See also

• https://community.nethserver.org/t/ns8-dns-validation-for-lets-encrypt/22389
• https://community.nethserver.org/t/ns8-and-dns-01-wildcard-certificates/24817