fix: increase DNS-01 timeout and add DNSTimeout option

- Add dns01.AddDNSTimeout(15s) for more reliable DNS propagation check
- Improve error resilience for Cloudflare DNS-01 challenges
This commit is contained in:
2026-07-24 19:07:39 +08:00
parent bdb3ca856f
commit 3a2c494d64
+6
View File
@@ -81,8 +81,11 @@ func GetACMECertificate(cert *config.Certificate, cfg *config.Config) error {
if err != nil {
return fmt.Errorf("failed to create DNS provider: %v", err)
}
// Use custom DNS timeout for better reliability
if err := client.Challenge.SetDNS01Provider(provider,
dns01.AddRecursiveNameservers(dns01.ParseNameservers([]string{"8.8.8.8:53", "1.1.1.1:53"})),
dns01.AddDNSTimeout(15*time.Second),
); err != nil {
return fmt.Errorf("failed to set DNS-01 provider: %v", err)
}
@@ -149,8 +152,11 @@ func RenewCertificate(cert *config.Certificate, cfg *config.Config) error {
if err != nil {
return fmt.Errorf("failed to create DNS provider: %v", err)
}
// Use custom DNS timeout for better reliability
if err := client.Challenge.SetDNS01Provider(provider,
dns01.AddRecursiveNameservers(dns01.ParseNameservers([]string{"8.8.8.8:53", "1.1.1.1:53"})),
dns01.AddDNSTimeout(15*time.Second),
); err != nil {
return fmt.Errorf("failed to set DNS-01 provider: %v", err)
}