Add ACMEv2 endpoints

The ACMEv2 endpoints are easier to use for clients running the Golang
acme.autocert.Manager. They require no tracking of state and also handle
DNS propagation checking so the client can remain simple.

Once the legacy REST client for the v1 endpoints is gone those old
endpoints can be removed.

1 files changed, 16 insertions, 1 deletions

diff --git a/main.go b/main.go
index 351633b..8b6ba10 100644
--- a/main.go
+++ b/main.go
@@ -3,6 +3,7 @@ package main
 import (
         "encoding/json"
         "io/ioutil"
+        "time"
 
         "github.com/gin-gonic/gin"
 
@@ -21,7 +22,14 @@ func loadConfig(app *frame.WebApp, args []string) (interface{}, error) {
         view := app.GetStringArgument("view_name")
 
         scfg := &web.ServerConfig{
-                DNSClient:      &dns.DNSClient{Server: server},
+                DNSClient: &dns.DNSClient{
+                        Server: server,
+                        RecursiveResolvers: []string{
+                                "google-public-dns-a.google.com:53",
+                                "google-public-dns-b.google.com:53",
+                        },
+                        PollTimeout: 3 * time.Second,
+                },
                 AcmeView:       view,
                 DynamicDnsView: view,
         }
@@ -64,6 +72,13 @@ func prepareServer(c interface{}, router *gin.Engine) error {
                 acme.DELETE("/:id", controllers.DeleteAcmeChallenge)
         }
 
+        acme2 := router.Group("/acmev2")
+        acme2.Use(middleware.AcmeAuthMiddleware)
+        {
+                acme2.POST("/:domain/:challenge", controllers.CreateAcmeChallengeV2)
+                acme2.DELETE("/:domain/:challenge", controllers.DeleteAcmeChallengeV2)
+        }
+
         manage := router.Group("/manage")
         manage.Use(middleware.ApiAuthMiddleware)
         {