letsencrypt: Add Namecheap DNS challenge support

letsencrypt/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 5.0.4
+
+- Add Namecheap DNS challenge support
+
 ## 5.0.3
 
 - Add deSEC DNS challenge support

letsencrypt/DOCS.md

@@ -84,6 +84,8 @@ aws_access_key_id: ''
 aws_secret_access_key: ''
 sakuracloud_api_token: ''
 sakuracloud_api_secret: ''
+namecheap_username: ''
+namecheap_api_key: ''
 netcup_customer_id: ''
 netcup_api_key: ''
 netcup_api_password: ''
@@ -358,6 +360,28 @@ on the DNS zone to be used for authentication.
 
 </details>
 
+<details>
+  <summary>Namecheap</summary>
+
+  To use this addon with Namecheap, you must first enable API access on your account. See "Enabling API Access" and "Whitelisting IP" [here](https://www.namecheap.com/support/api/intro/) for details and requirements.
+
+  Example configuration:
+
+  ```yaml
+  email: [email protected]
+  domains:
+    - ha.yourdomain.com
+  certfile: fullchain.pem
+  keyfile: privkey.pem
+  challenge: dns
+  dns:
+    provider: dns-namecheap
+    namecheap_username: your-namecheap-username
+    namecheap_api_key: 0123456789abcdef0123456789abcdef01234567
+  ```
+
+</details>
+
 <details>
   <summary>Njalla</summary>
 
@@ -542,6 +566,7 @@ dns-ovh
 dns-rfc2136
 dns-route53
 dns-sakuracloud
+dns-namecheap
 dns-netcup
 dns-gandi
 dns-transip

letsencrypt/Dockerfile

@@ -13,6 +13,7 @@ ARG \
     CERTBOT_DNS_GOOGLE_DOMAINS_VERSION \
     CERTBOT_DNS_HETZNER_VERSION \
     CERTBOT_DNS_INWX_VERSION \
+    CERTBOT_DNS_NAMECHEAP_VERSION \
     CERTBOT_DNS_TRANSIP_VERSION \
     CERTBOT_NETCUP_VERSION \
     CERTBOT_NJALLA_VERSION \
@@ -55,6 +56,7 @@ RUN \
         certbot-dns-rfc2136==${CERTBOT_VERSION} \
         certbot-dns-route53==${CERTBOT_VERSION} \
         certbot-dns-sakuracloud==${CERTBOT_VERSION} \
+        certbot-dns-namecheap==${CERTBOT_DNS_NAMECHEAP_VERSION} \
         certbot-dns-netcup==${CERTBOT_NETCUP_VERSION} \
         certbot-plugin-gandi==${CERTBOT_GANDI_VERSION} \
         certbot-dns-transip==${CERTBOT_DNS_TRANSIP_VERSION} \

letsencrypt/build.yaml

@@ -16,6 +16,7 @@ args:
   CERTBOT_DNS_DUCKDNS_VERSION: 1.3
   CERTBOT_DNS_HETZNER_VERSION: 2.0.0
   CERTBOT_DNS_INWX_VERSION: 2.2.0
+  CERTBOT_DNS_NAMECHEAP_VERSION: 1.0.0
   CERTBOT_DNS_GOOGLE_DOMAINS_VERSION: 0.1.11
   CERTBOT_DNS_TRANSIP_VERSION: 0.5.2
   CERTBOT_GANDI_VERSION: 1.5.0

letsencrypt/config.yaml

@@ -1,5 +1,5 @@
 ---
-version: 5.0.3
+version: 5.0.4
 slug: letsencrypt
 name: Let's Encrypt
 description: Manage certificate from Let's Encrypt
@@ -63,6 +63,8 @@ schema:
     linode_version: str?
     luadns_email: email?
     luadns_token: str?
+    namecheap_username: str?
+    namecheap_api_key: str?
     netcup_api_key: str?
     netcup_api_password: str?
     netcup_customer_id: str?
@@ -77,8 +79,8 @@ schema:
       dns-directadmin|dns-dnsimple|dns-dnsmadeeasy|dns-duckdns|\
       dns-gehirn|dns-google|dns-google-domains|\
       dns-hetzner|dns-linode|dns-luadns|dns-njalla|dns-nsone|dns-ovh|\
-      dns-rfc2136|dns-route53|dns-sakuracloud|dns-netcup|dns-gandi|\
-      dns-transip|dns-inwx)?"
+      dns-rfc2136|dns-route53|dns-sakuracloud|dns-namecheap|dns-netcup|\
+      dns-gandi|dns-transip|dns-inwx)?"
     rfc2136_algorithm: str?
     rfc2136_name: str?
     rfc2136_port: str?

letsencrypt/rootfs/etc/cont-init.d/file-structure.sh

@@ -22,6 +22,8 @@ echo -e "dns_desec_token = $(bashio::config 'dns.desec_token')\n" \
       "dns_linode_version = $(bashio::config 'dns.linode_version')\n" \
       "dns_luadns_email = $(bashio::config 'dns.luadns_email')\n" \
       "dns_luadns_token = $(bashio::config 'dns.luadns_token')\n" \
+      "dns_namecheap_username = $(bashio::config 'dns.namecheap_username')\n" \
+      "dns_namecheap_api_key = $(bashio::config 'dns.namecheap_api_key')\n" \
       "dns_netcup_customer_id = $(bashio::config 'dns.netcup_customer_id')\n" \
       "dns_netcup_api_key = $(bashio::config 'dns.netcup_api_key')\n" \
       "dns_netcup_api_password = $(bashio::config 'dns.netcup_api_password')\n" \

letsencrypt/rootfs/etc/services.d/lets-encrypt/run

@@ -56,6 +56,11 @@ elif [ "${CHALLENGE}" == "dns" ] && [ "${DNS_PROVIDER}" == "dns-google" ]; then
 elif [ "${CHALLENGE}" == "dns" ] && [ "${DNS_PROVIDER}" == "dns-google-domains" ]; then
     bashio::config.require 'dns.google_domains_access_token'
     PROVIDER_ARGUMENTS+=("--authenticator" "${DNS_PROVIDER}" "--${DNS_PROVIDER}-credentials" "/data/dnsapikey" "--${DNS_PROVIDER}-propagation-seconds" "${PROPAGATION_SECONDS}")
+#Namecheap
+elif [ "${CHALLENGE}" == "dns" ] && [ "${DNS_PROVIDER}" == "dns-namecheap" ]; then
+    bashio::config.require 'dns.namecheap_username'
+    bashio::config.require 'dns.namecheap_api_key'
+    PROVIDER_ARGUMENTS+=("--authenticator" "${DNS_PROVIDER}" "--${DNS_PROVIDER}-credentials" "/data/dnsapikey" "--${DNS_PROVIDER}-propagation-seconds" "${PROPAGATION_SECONDS}")
 #Netcup
 elif [ "${CHALLENGE}" == "dns" ] && [ "${DNS_PROVIDER}" == "dns-netcup" ]; then
     bashio::config.require 'dns.netcup_customer_id'