enix/tsigoat repository overview

⁠tsigoat

The RFC 2136 to anything proxy. tsigoat receives DNS UPDATE messages (RFC 2136), authenticates them with TSIG (RFC 8945) and applies the changes through the API of a DNS provider: PowerDNS, Cloudflare, OVHcloud or Scaleway. It can also relay them to a name server that implements RFC 2136, or post them to a webhook. ACME DNS-01 clients such as cert-manager, lego or certbot solve their challenges without holding the provider credentials.

⁠Tags

Platforms: linux/amd64, linux/arm64, linux/riscv64. The same images are on ghcr.io/enix/tsigoat and quay.io/enix/tsigoat; each is signed with cosign and carries a CycloneDX SBOM.

⁠Documentation

• Source, configuration and clients: https://github.com/enix/tsigoat⁠
• Helm chart: oci://quay.io/enix/charts/tsigoat, or helm repo add enix https://charts.enix.io
• Verifying a release: https://github.com/enix/tsigoat/blob/main/SECURITY.md#verifying-releases⁠