{"slug": "lego", "name": "lego", "category": "other", "category_name": "Other software", "description": "", "recommenders": 5, "commenters": 7, "warners": 0, "score": 4.824, "rising": -1.64, "first": "2026-01-16", "latest": "2026-05-25", "why": "Lego is solid. I use it with Route53 to do automatic renewal of LE certs", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 6, "neutral": 2, "compare": 0, "warn": 0}, "spark": [0, 0, 3, 0, 2, 0, 1, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Lego is solid. I use it with Route53 to do automatic renewal of LE certs", "kind": "", "icon": true, "domain": null, "github_repo": "github.com/go-acme/lego", "official_url": "https://go-acme.github.io/lego/", "pricing": "", "aliases": ["lego"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 772330897, "item_id": 48270681, "url": "https://news.ycombinator.com/item?id=48270681", "by": "mnahkies", "date": "2026-05-25", "version": null, "stance": "recommend", "quote": "There's a Lego resolver that works fine", "excerpt": "It's not European, rather a New Zealand company but I find https://zonomi.com/ pretty good. There's a Lego resolver that works fine https://github.com/go-acme/lego - although my only complaint is the DNS propagation takes a while though I suspect that's a my config problem (dig will show the txt record long before Lego sees it)", "context": "", "use_case": "", "switched_from": "", "story": "The bootstrapper's EU stack for under \u20ac10 per month"}, {"id": 760739585, "item_id": 47546224, "url": "https://news.ycombinator.com/item?id=47546224", "by": "justin_oaks", "date": "2026-03-27", "version": null, "stance": "recommend", "quote": "The list of API integrations provided by the lego project looks quite impressive.", "excerpt": "The list of API integrations provided by the lego project looks quite impressive. https://go-acme.github.io/lego/dns/index.html", "context": "", "use_case": "ACME DNS integrations", "switched_from": "", "story": "Installing a Let's Encrypt TLS Certificate on a Brother Printer with Certbot"}, {"id": 760718464, "item_id": 47544904, "url": "https://news.ycombinator.com/item?id=47544904", "by": "justin_oaks", "date": "2026-03-27", "version": null, "stance": "recommend", "quote": "the lego project has an example of this in their documentation", "excerpt": "Moving subdomains to separate zones can make sense for a small set of subdomains and all your certificates would be for names under those subdomains. It gets unwieldy if you have to create a separate zone for each certificate because the certificates don't share a subdomain. But this can be a solution in some circumstances. Thanks. I see that AWS permissions can be set to limit the risk of compromised credentials. Th", "context": "", "use_case": "", "switched_from": "", "story": "Installing a Let's Encrypt TLS Certificate on a Brother Printer with Certbot"}, {"id": 760263200, "item_id": 47516450, "url": "https://news.ycombinator.com/item?id=47516450", "by": "catlifeonmars", "date": "2026-03-25", "version": null, "stance": "recommend", "quote": "Lego is solid. I use it with Route53 to do automatic renewal of LE certs", "excerpt": "Lego is solid. I use it with Route53 to do automatic renewal of LE certs for various endpoints before the certs expire.", "context": "", "use_case": "Automatic certificate renewal", "switched_from": "", "story": "You Can Run a DNS Server"}, {"id": 746435904, "item_id": 46652244, "url": "https://news.ycombinator.com/item?id=46652244", "by": "mnahkies", "date": "2026-01-16", "version": null, "stance": "recommend", "quote": "I use a fairly niche provider (https://go-acme.github.io/lego/dns/zonomi/index.html) and it's supported - I'd go further and say they support most providers", "excerpt": "I use a fairly niche provider (https://go-acme.github.io/lego/dns/zonomi/index.html) and it's supported - I'd go further and say they support most providers", "context": "", "use_case": "ACME DNS certificates", "switched_from": "", "story": "6-Day and IP Address Certificates Are Generally Available"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["acme dns integrations", "automatic certificate renewal", "getting ip tls certificates", "acme dns certificates", "acme certificate client", "acme certificate issuance"], "compared": [{"slug": "certbot", "name": "Certbot", "co": 3, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=46647491", "title": "6-Day and IP Address Certificates Are Generally Available", "mentions": 4}, {"url": "https://news.ycombinator.com/item?id=47542644", "title": "Installing a Let's Encrypt TLS Certificate on a Brother Printer with Certbot", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=47453738", "title": "You Can Run a DNS Server", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48270111", "title": "The bootstrapper's EU stack for under \u20ac10 per month", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {"recommend": 3, "neutral": 1}, "2026-02": {}, "2026-03": {"neutral": 1, "recommend": 2}, "2026-04": {}, "2026-05": {"recommend": 1}, "2026-06": {}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "quotes": [{"id": 772330897, "item_id": 48270681, "url": "https://news.ycombinator.com/item?id=48270681", "by": "mnahkies", "date": "2026-05-25", "version": null, "stance": "recommend", "quote": "There's a Lego resolver that works fine", "excerpt": "It's not European, rather a New Zealand company but I find https://zonomi.com/ pretty good. There's a Lego resolver that works fine https://github.com/go-acme/lego - although my only complaint is the DNS propagation takes a while though I suspect that's a my config problem (dig will show the txt record long before Lego sees it)", "context": "", "use_case": "", "switched_from": "", "story": "The bootstrapper's EU stack for under \u20ac10 per month"}, {"id": 760739585, "item_id": 47546224, "url": "https://news.ycombinator.com/item?id=47546224", "by": "justin_oaks", "date": "2026-03-27", "version": null, "stance": "recommend", "quote": "The list of API integrations provided by the lego project looks quite impressive.", "excerpt": "The list of API integrations provided by the lego project looks quite impressive. https://go-acme.github.io/lego/dns/index.html", "context": "", "use_case": "ACME DNS integrations", "switched_from": "", "story": "Installing a Let's Encrypt TLS Certificate on a Brother Printer with Certbot"}, {"id": 760718464, "item_id": 47544904, "url": "https://news.ycombinator.com/item?id=47544904", "by": "justin_oaks", "date": "2026-03-27", "version": null, "stance": "recommend", "quote": "the lego project has an example of this in their documentation", "excerpt": "Moving subdomains to separate zones can make sense for a small set of subdomains and all your certificates would be for names under those subdomains. It gets unwieldy if you have to create a separate zone for each certificate because the certificates don't share a subdomain. But this can be a solution in some circumstances. Thanks. I see that AWS permissions can be set to limit the risk of compromised credentials. Th", "context": "", "use_case": "", "switched_from": "", "story": "Installing a Let's Encrypt TLS Certificate on a Brother Printer with Certbot"}, {"id": 760263200, "item_id": 47516450, "url": "https://news.ycombinator.com/item?id=47516450", "by": "catlifeonmars", "date": "2026-03-25", "version": null, "stance": "recommend", "quote": "Lego is solid. I use it with Route53 to do automatic renewal of LE certs", "excerpt": "Lego is solid. I use it with Route53 to do automatic renewal of LE certs for various endpoints before the certs expire.", "context": "", "use_case": "Automatic certificate renewal", "switched_from": "", "story": "You Can Run a DNS Server"}, {"id": 760212560, "item_id": 47513285, "url": "https://news.ycombinator.com/item?id=47513285", "by": "DaSHacka", "date": "2026-03-24", "version": null, "stance": "neutral", "quote": "I've used lego", "excerpt": "Neat, I've used lego (https://github.com/go-acme/lego) but will certainly have to give uacme a look, love me a simple ACME client. acme.sh was too garish for my liking, even as a guy that likes his fair share of shell scripts. And obviously certbot is a non-starter because of snap.", "context": "", "use_case": "", "switched_from": "", "story": "You Can Run a DNS Server"}, {"id": 746570832, "item_id": 46660677, "url": "https://news.ycombinator.com/item?id=46660677", "by": "certchecksh", "date": "2026-01-17", "version": null, "stance": "recommend", "quote": "", "excerpt": "Thank you for posting the lego command! It allowed me to quickly obtain a couple of IP certificates to test with. I updated my simple TLS certificate checker (https://certcheck.sh) to support checking IP certificates (IPv4 only for now).", "context": "", "use_case": "Getting IP TLS certificates", "switched_from": "", "story": "6-Day and IP Address Certificates Are Generally Available"}, {"id": 746435904, "item_id": 46652244, "url": "https://news.ycombinator.com/item?id=46652244", "by": "mnahkies", "date": "2026-01-16", "version": null, "stance": "recommend", "quote": "I use a fairly niche provider (https://go-acme.github.io/lego/dns/zonomi/index.html) and it's supported - I'd go further and say they support most providers", "excerpt": "I use a fairly niche provider (https://go-acme.github.io/lego/dns/zonomi/index.html) and it's supported - I'd go further and say they support most providers", "context": "", "use_case": "ACME DNS certificates", "switched_from": "", "story": "6-Day and IP Address Certificates Are Generally Available"}, {"id": 746419872, "item_id": 46651242, "url": "https://news.ycombinator.com/item?id=46651242", "by": "johannes1234321", "date": "2026-01-16", "version": null, "stance": "neutral", "quote": "lego supports a few DNS providers out of the box", "excerpt": "I recently migrated to a wildcard (*.home.example.com) certificate for all my home network. Works okay for many parts. However requires a public DNS server where TXT records can be set via API (lego supports a few DNS providers out of the box, see https://go-acme.github.io/lego/dns/ )", "context": "", "use_case": "ACME certificate client", "switched_from": "", "story": "6-Day and IP Address Certificates Are Generally Available"}, {"id": 746368336, "item_id": 46648021, "url": "https://news.ycombinator.com/item?id=46648021", "by": "ivanr", "date": "2026-01-16", "version": null, "stance": "recommend", "quote": "You can use lego [1]", "excerpt": "As already noted on this thread, you can't use certbot today to get an IP address certificate. You can use lego [1], but figuring out the exact command line took me some effort yesterday. Here's what worked for me: lego --domains 206.189.27.68 --accept-tos --http --disable-cn run --profile shortlived [1] https://go-acme.github.io/lego/", "context": "", "use_case": "ACME certificate issuance", "switched_from": "", "story": "6-Day and IP Address Certificates Are Generally Available"}]}