Should LEGO_DISABLE_CNAME_SUPPORT be an option instead of an envvar?

[fudiwei]

I am using Lego to renew SSL certificates for several domain names. For some reasons (similar to #1816), I have to disable CNAME for some of these domains, but need to enable CNAME for others.

However, LEGO_DISABLE_CNAME_SUPPORT must be set through envvar now. I cannot set it in some way in programming.

My current solution is to trigger different domain name renewals at different times, and reset LEGO_DISABLE_CNAME_SUPPORT before each renewal. But this is not elegant, and sometimes conflicts arise.

Is it possible to implement LEGO_DISABLE_CNAME_SUPPORT's functionality like other configurations, rather than using envvar?

---

pseudo code:

config := lego.NewConfig(user)
config.DisableCNAMESupport = true
client, err := lego.NewClient(config)

[ldez]

I cannot set it in some way in programming.

You can set the env var programmatically:

os.Setenv("LEGO_DISABLE_CNAME_SUPPORT", "false")

Is it possible to implement LEGO_DISABLE_CNAME_SUPPORT's functionality like other configurations, rather than using envvar?

It is not possible.

[fudiwei]

Thanks for responding.

os.Setenv("LEGO_DISABLE_CNAME_SUPPORT", "false")

In fact, this is exactly what I am doing now. However, envvar is global system-wide, and I cannot set this individually for each certificate renewal. Moreover, the time required for a single renewal job is uncertain (mainly because the DNS propagation time is unpredictable), which occasionally leads to some confusion. For example, a new renewal job might start before the previous one has finished, and the new LEGO_DISABLE_CNAME_SUPPORT value gets overwritten.

Currently, I use a queue to run renewal jobs sequentially to avoid concurrency conflicts, but this makes the entire renewal process very time-consuming (I have hundreds of certificates to issue).

To clarify, I am not asking whether this can be done right now, but rather whether Lego might consider providing such a feature in the future.

Thank you again for your efforts. Best regards.

[ldez]

Avoid using bold.

To clarify, I am not asking whether this can be done right now, but rather whether Lego might consider providing such a feature in the future.

And I answered:

It is not possible.

[fudiwei]

I understand that. Thank you for your reply.