Tools implementing deSEC

peter · April 1, 2020, 10:00pm

In this post, we keep a list of deSEC-aware software that we have knowledge of.

Note: This does not imply any endorsement by deSEC. We also do not evaluate whether the tools listed here implement sensible security measures, nor do we know whether these programs hold what they promise. The list is merely meant as an inspiration for digging deeper into the deSEC ecosystem.

dynDNS clients

Nesos-ita/DynamicDnsUpdater

Integrations

DNS orchestration

DNSControl (DNS as code)
Terraform (DNS as code)

ACME clients

Webserver in-built

deSEC module for Caddy

Other

Proxmox Virtual Environment, e.g. pvenode
Traefik supports deSEC through lego (see ablove). Previously, there was this extra module: Traefik dedyn-dns01 (now superseded)

General purpose API clients

Libraries

desec (Go)
desec (PyPI) (Python)
desec (npm) (JavaScript)
desec-php (PHP)

Command-line Interface (CLI)

desec-dns-api-cli (Python CLI)
desec-dns (Python CLI with TLSA support)
My1/MugenDNS (PHP GUI)

To extend this list, please reply to this post, and after short inspection we may include your suggestion in the list.

d3luxee · April 25, 2020, 8:03pm

dnscontrol will also get support for desec: https://github.com/StackExchange/dnscontrol/issues/724

peter · April 25, 2020, 9:59pm

Hi d3luxee,

Support was just merged into DNSControl, so I added it to the above list. Thanks for the contribution!

Stay secure,
Peter

vika · May 12, 2020, 10:37pm

Lego (an ACME client) has deSEC support too now! I filed the issue asking them to implement it, and the next day it was done: https://github.com/go-acme/lego/issues/1140

ldez · May 15, 2020, 1:54pm

Hello,

I created a Go client: https://github.com/nrdcg/desec/

You can also remove Traefik dedyn-dns01 as Traefik support deSEC natively (through lego)

https://docs.traefik.io/v2.2/https/acme/#providers

peter · May 15, 2020, 2:28pm

Hi vika, ldez,

Thanks for your contributions! This is really great to see <3 I’m making the corresponding changes to the list.

Stay secure,
Peter

xengi · June 1, 2020, 11:51am

Thx for adding my stuff.

I’m currently finishing up the python API wrapper. I’ll release the first 1.0 beta in a couple of days.

After that I’ll continue working on the ansible modules. So feel free to test the desec-dns-api library and give feedback.

Taras · July 17, 2023, 11:11pm

Hi,
I just uploaded my PHP library to connect to deSEC API.

peter · July 17, 2023, 11:43pm

Hi Taras,

Thanks for your contribution! I’ve added it to the top post of this thread.

Stay secure,
Peter

strawberry · November 5, 2023, 5:10pm

Hi! I found a Caddy module that supports DNS ACME challenge using a deSEC API token: GitHub - caddy-dns/desec: deSEC module for Caddy

peter · November 6, 2023, 6:46pm

Hi strawberry,

Thanks, I added it to the list!

Stay secure,
Peter

RonObvious · November 12, 2023, 4:04pm

desec-dns-api does not exist anymore on pypi. A relatively new project appeared at desec.

peter · November 13, 2023, 2:20pm

Thanks, RonObvious, I made these changes!

Stay secure,
Peter

WhyNotHugo · November 20, 2023, 1:08am

The repository is marked as archived and the project is in readonly mode. Looks like PyPI releases have all been yanked too. This should be marked as unmaintained or abandoned.

peter · November 20, 2023, 9:16am

Hi WhyNotHugo,

Thanks for your message, and welcome to deSEC!

I verified your report, and removed the unmaintained link from the collection.

Stay secure,
Peter