Create wildcard letsencrypt certificate with rfc2136 - Custom nameservers

certbot-rfc2136.sh

#!/bin/bash

# ------------------------------------------------------
#     Functions - Common
# ------------------------------------------------------

DOMAIN="$1"
shift

# See https://certbot-dns-rfc2136.readthedocs.io/en/stable/ for certbot.ini
COMMAND="certbot certonly --dns-rfc2136 --dns-rfc2136-propagation-seconds 10 --dns-rfc2136-credentials /root/.secrets/certbot.ini -v"

# Request an SSL certificate for DOMAIN and all subdomains
function request_ssl_certificate() {
    # Base domains
    DOMAINS="-d *.${DOMAIN} -d ${DOMAIN}"

    # Additional subdomains (wildcards)
    for SUB in "$@"; do
        DOMAINS="$DOMAINS -d *.${SUB}.${DOMAIN}"
    done

    # Run certbot
    eval $COMMAND $DOMAINS
}

# Checks if DOMAIN is empty
function check_var_empty() {
    if [ -z "$DOMAIN" ]; then
        echo "Usage: bash $(basename $0) <Domain> <Subdomain1> <Subdomain2> ..."
        exit 0
    fi
}

# ------------------------------------------------------
#     Script - Start
# ------------------------------------------------------

check_var_empty
request_ssl_certificate "$@"

# ------------------------------------------------------
#     Script - End
# ------------------------------------------------------

exit 0