DNS01 challenge

[AntonAleksandrov13]

HI,
I was experimenting with Mastodon playbook and came across letsencrypt section where HTTP01 challenge is performed. I was wondering if there any limitation for DNS01 challenge implementation in this playbook? The reason why I am asking due to the following requirement of HTTP01:

The HTTP-01 challenge can only be done on port 80. Allowing clients to specify arbitrary ports would make the challenge less secure, and so it is not allowed by the ACME standard

I am willing to contribute, if that's something you would be interested in.

[thunderysteak]

Implementing DNS01 challenge with Certbot might be a bit challenging due to each DNS provider having their own API calls and unique variables for the specific DNS provider

One feasible way that I see of doing it is by creating a var that overrides the certbot command with a custom one to perform DNS01 challenge instead of HTTP01