Skip to main content

JavaScript

📄️ Cloudflare worker for DNS01 validation

This script allows to prove ownership of a domain for the purposes of getting a wildcard TLS certificate through ACME. While Traefik can connect to many DNS providers automatically, there is a risk that if Traefik is compromised by an attacker, the attacker will gain full access to the DNS provider account. By using this script instead, Traefik only has credentials with a very limited blast radius. The script is hosted on Cloudflare workers instead of on the application servers, so that a compromise of the application server does not lead to a disclosure of the Cloudflare credentials.