Automate DNS-01 with Hetzner

Connecting Hetzner DNS lets aethercert create and remove the DNS TXT records ACME uses for DNS-01 validation automatically.

1. Create an API token

1. Sign in to the Hetzner DNS Console.
2. Open API Tokens and create a new token.
3. Copy the token - it's only shown once.

2. Connect it in aethercert

1. Make sure the domain is already added and verified under Build > Domains - the zone must already exist in your Hetzner DNS Console.
2. On that domain's setup step 2 ("DNS provider"), choose Hetzner DNS from the provider dropdown.
3. Paste the token into API token.
4. Click Test & save - aethercert verifies the token before saving it.

3. Use it

Any certificate you create for this domain (or its subdomains) can now use DNS-01, including wildcards. The token is stored write-only and never displayed back in the dashboard once saved.