skills.rest
Sir-chawakorn
Sir-chawakornCOMMUNITY
Explore all skills by this author →
GitHub

configure-dns-tls

Configure DNS records and automate ACME certificate renewal with TLS policy enforcement.

9|3|Updated Jun 13, 2026
Search Tags:#automation#security#dns#tls#https#acme
One-click install
npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill configure-dns-tls
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: configure-dns-tls
Source: https://github.com/Sir-chawakorn/sanook-cli/tree/main/skills/configure-dns-tls
Command: npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill configure-dns-tls

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill eliminates manual DNS management and certificate expiration outages by automating record configuration, ACME-based certificate issuance, and modern TLS policy enforcement.

Core Features & Use Cases

  • Zero-Downtime Cutover: Orchestrates DNS record updates with pre-lowered TTLs to ensure seamless service migration.
  • Automated Certificate Lifecycle: Manages ACME/cert-manager issuance and auto-renewal for Let's Encrypt certificates.
  • Security Hardening: Enforces modern TLS 1.2/1.3 policies, HSTS, and OCSP stapling to ensure A+ grade security.

Quick Start

Use the configure-dns-tls skill to automate the issuance of a wildcard certificate for example.com using the DNS-01 challenge.

Frequently Asked Questions about configure-dns-tls

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Let's Encrypt certificate renewal using ACME?▼

Automate Let's Encrypt certificate renewal by configuring ACME-based certificate issuance and lifecycle management. This approach handles automated renewals to prevent certificate expiration outages and maintain continuous HTTPS availability.

What's the best way to migrate DNS records with zero downtime?▼

Migrate DNS records with zero downtime by orchestrating record updates alongside pre-lowered TTLs. This cutover choreography ensures seamless service migration and maintains high-availability endpoints throughout the transition.

How do I enforce modern TLS policies and HSTS for HTTPS endpoints?▼

Enforce modern TLS policies and HSTS by applying TLS 1.2/1.3 policy enforcement alongside OCSP stapling. This security hardening configuration ensures compliant HTTPS endpoints and achieves A+ grade security ratings.

Do I need a DNS provider integration to automate DNS-01 challenges for wildcard certificates?▼

Yes, resolving DNS-01 challenges for wildcard certificates requires integration with your DNS provider. The automation leverages this DNS provider integration to automatically configure the necessary validation records.

Can I use TLS termination proxies to manage HTTPS configurations without downtime?▼

Yes, integrate TLS termination proxies to manage HTTPS configurations without downtime. Combined with automated ACME certificate lifecycle management, this maintains compliant, zero-downtime HTTPS service endpoints.

Related Skills

Explore More Software Engineering Skills→
bughqbughq
2

stacks-dns

Manage AWS Route53 hosted zones and DNS records for Stacks applications.

Official
Intermediate
cdman28cdman28

enterprise

Initialize enterprise monorepo projects with microservices, Kubernetes, and Terraform.

Community
Advanced
ichuanichuan
1

deploy-caddy-reverse-proxy

Deploy Caddy reverse proxy with Let's Encrypt SSL and systemd integration.

Community
Advanced
cwinvestmentscwinvestments
412

memstack-deployment-domain-ssl

Configure DNS records, SSL certificates, and HTTPS for custom domains.

Community
Intermediate