DuckDNS Challenge validation has failed

Whats my version? Core
2024.1.5
Supervisor
2023.12.1
Operating System
11.4
Frontend
20240104.0

Whats the problem? Duckdns add on

Error console in the add on:

OK + Challenge validation has failed 😦
ERROR: Challenge is invalid! (returned: invalid) (result: ["type"]    "dns-01"
["status"]    "invalid"
["error","type"]    "urn:ietf:params:acme:error:dns"
["error","detail"]    "DNS problem: SERVFAIL looking up CAA for mydomain.duckdns.org - the domain's nameservers may be malfunctioning"
["error","status"]    400
["error"]    {"type":"urn:ietf:params:acme:error:dns","detail":"DNS problem: SERVFAIL looking up CAA for mydomain.duckdns.org - the domain's nameservers may be malfunctioning","status":400}
["url"]    "https://acme-v02.api.letsencrypt.org/acme/chall-v3/308769832916/BiaI0w"
["token"]    "my token"
["validationRecord",0,"hostname"]    "mydomain.duckdns.org"
["validationRecord",0]    {"hostname":"mydomain.duckdns.org"}
["validationRecord"]    [{"hostname":"mydomain.duckdns.org"}]
["validated"]    "2024-01-27T19:41:17Z")
[19:46:30] INFO: OK

(Hostname and token are redacted)

Help would be amazing thanks!

That’s your problem, and not your problem but one at DuckDNS.

This happens with DuckDNS from time to time, you just have to wait it out - or use a different dynamic DNS provider.

Okay thanks!

which one are you suggesting?
DuckDNS is absolutely unreliable for me atm with several outages.
Currently I’m absolutely not able to restore my setup…

Personally… Cloudflare and buy your own domain.

If you really want free then look at this list of supported DNS-01 supporting providers.

If I got it right there will be an established tunnel connection to Cloudflare and HA server right?

Currently I’m on a Deutsche Glasfaser connection which got shared ipv6 and not supporting ipv4, therefore I’m using a ipv4 tunnel on a VPS.

Will this be needed with Cloudflare?

Only if you set up a Cloudflare tunnel. Using CF for DNS doesn’t require that.

Setting up a tunnel is pretty easy though, and free if you’ve got a domain there.

1 Like

That means i dont need Nginx Proxy Manager anymore though?

Correct 

Running into the same issue :frowning:
Unfortunately other dns providers are not easy to setup. I cannot go the cloudflare tunnel route as I have many other services to expose.

Sure you can. I use one CF tunnel to expose many services - that’s what they’re designed for.

I did not know that. But switched to a cloudflare registered domain and dns challange works like a charm again. Dropping duckdns.