xTag

概要

フル名
docker.io/certbot/dns-cloudflare
Registry
docker.io
名前空間
certbot
リポジトリ
dns-cloudflare
キャッシュ Tag 数
328
最終同期
07/06/2026, 02:39 PM

概要

Certbot 官方镜像（含 Cloudflare DNS 插件），通过 DNS-01 挑战自动签发 Let's Encrypt 证书，适合无 80 端口或 wildcard 域名场景。

詳細

certbot/dns-cloudflare 在 certbot 基础上预装 dns-cloudflare 插件，通过 Cloudflare API 创建 _acme-challenge TXT 记录完成域名验证。典型用于内网服务、wildcard *.example.com 或 CDN 后源站无法 HTTP-01 的场景。镜像定位为 周期性一次性任务，非常驻 HTTP 服务；Kubernetes 中应以 CronJob 运行并将证书写入 Secret，而非长期 Deployment。

快速启动

docker run --rm \
  -v $(pwd)/letsencrypt:/etc/letsencrypt \
  -v $(pwd)/cloudflare.ini:/cloudflare.ini \
  docker.io/certbot/dns-cloudflare:latest \
  certonly --dns-cloudflare \
    --dns-cloudflare-credentials /cloudflare.ini \
    -d example.com --agree-tos -m admin@example.com

推荐实践

docker run --rm \
  -v /data/letsencrypt:/etc/letsencrypt \
  -v /data/cloudflare.ini:/cloudflare.ini:ro \
  docker.io/certbot/dns-cloudflare:v2.8.0 \
  certonly --dns-cloudflare \
    --dns-cloudflare-credentials /cloudflare.ini \
    --dns-cloudflare-propagation-seconds 60 \
    -d example.com -d '*.example.com' \
    --agree-tos -m admin@example.com --non-interactive

核心参数说明

  • -v .../letsencrypt:... — 证书与 account 持久化目录
  • -v .../cloudflare.ini:... — Cloudflare API Token 凭据
  • --dns-cloudflare-propagation-seconds — DNS 传播等待时间
  • -d '*.example.com' — wildcard 证书需 DNS-01
  • --non-interactive — 自动化脚本/Cron 模式
  • --rm — 签发完成即退出

Kubernetes

apiVersion: batch/v1
kind: CronJob
metadata:
  name: certbot-dns-cloudflare
spec:
  schedule: "0 3 * * 1"
  jobTemplate:
    spec:
      template:
        spec:
          restartPolicy: OnFailure
          containers:
            - name: certbot
              image: docker.io/certbot/dns-cloudflare:v2.8.0
              args:
                - certonly
                - --dns-cloudflare
                - --dns-cloudflare-credentials
                - /secrets/cloudflare.ini
                - -d
                - example.com
                - --agree-tos
                - -m
                - admin@example.com
                - --non-interactive
              volumeMounts:
                - name: le
                  mountPath: /etc/letsencrypt
                - name: cf
                  mountPath: /secrets
          volumes:
            - name: le
              persistentVolumeClaim:
                claimName: certbot-certs
            - name: cf
              secret:
                secretName: cloudflare-api-token

CronJob 定期续期；证书 PVC 或 cert-manager 同步至 Ingress TLS Secret，Cloudflare Token 最小权限 DNS:Edit。

最新 Tag（20 件）

すべての 328 件の Tag を見る →
Tagアーキテクチャプッシュ日時サイズDigest同期期望操作
docker.io/certbot/dns-cloudflare
:nightly
linux/amd64linux/arm/v6linux/arm64
2026/06/30 14:2589.4 MBsha256:351a62f85200…
docker.io/certbot/dns-cloudflare
:arm32v6-nightly
linux/arm/v6
2026/06/30 14:2382.4 MBsha256:fc0c54726c21…
docker.io/certbot/dns-cloudflare
:arm64v8-nightly
linux/arm64
2026/06/30 14:2386.8 MBsha256:d94f91906d90…
docker.io/certbot/dns-cloudflare
:amd64-nightly
linux/amd64
2026/06/30 14:2389.4 MBsha256:351a62f85200…
docker.io/certbot/dns-cloudflare
:latest
linux/amd64linux/arm/v6linux/arm64
2026/05/12 00:4892.1 MBsha256:c2ef55b62c8d…
docker.io/certbot/dns-cloudflare
:v5.6.0
linux/amd64linux/arm/v6linux/arm64
2026/05/12 00:4892.1 MBsha256:c2ef55b62c8d…
docker.io/certbot/dns-cloudflare
:arm32v6-latest
linux/arm/v6
2026/05/12 00:4685.4 MBsha256:843e34749ccb…
docker.io/certbot/dns-cloudflare
:arm32v6-v5.6.0
linux/arm/v6
2026/05/12 00:4685.4 MBsha256:843e34749ccb…
docker.io/certbot/dns-cloudflare
:arm64v8-latest
linux/arm64
2026/05/12 00:4589.5 MBsha256:2d76601b2bce…
docker.io/certbot/dns-cloudflare
:amd64-latest
linux/amd64
2026/05/12 00:4592.1 MBsha256:c2ef55b62c8d…
docker.io/certbot/dns-cloudflare
:arm64v8-v5.6.0
linux/arm64
2026/05/12 00:4589.5 MBsha256:2d76601b2bce…
docker.io/certbot/dns-cloudflare
:amd64-v5.6.0
linux/amd64
2026/05/12 00:4592.1 MBsha256:c2ef55b62c8d…
docker.io/certbot/dns-cloudflare
:v5.5.0
linux/amd64linux/arm/v6linux/arm64
2026/04/08 02:4489.6 MBsha256:1ef4a0bb70d3…
docker.io/certbot/dns-cloudflare
:amd64-v5.5.0
linux/amd64
2026/04/08 02:4189.6 MBsha256:1ef4a0bb70d3…
docker.io/certbot/dns-cloudflare
:arm32v6-v5.5.0
linux/arm/v6
2026/04/08 02:4182.5 MBsha256:2b90e2a11bb4…
docker.io/certbot/dns-cloudflare
:arm64v8-v5.5.0
linux/arm64
2026/04/08 02:4187.6 MBsha256:f32d4370faeb…
docker.io/certbot/dns-cloudflare
:v5.4.0
linux/amd64linux/arm/v6linux/arm64
2026/03/11 02:3785.9 MBsha256:1baafe67934a…
docker.io/certbot/dns-cloudflare
:amd64-v5.4.0
linux/amd64
2026/03/11 02:3485.9 MBsha256:1baafe67934a…
docker.io/certbot/dns-cloudflare
:arm32v6-v5.4.0
linux/arm/v6
2026/03/11 02:3479.8 MBsha256:288729598373…
docker.io/certbot/dns-cloudflare
:arm64v8-v5.4.0
linux/arm64
2026/03/11 02:3484.5 MBsha256:6452f7af0d89…