From 89214a2fccb8e7316bfecf036d12ea8b7a2cc174 Mon Sep 17 00:00:00 2001
From: Viktor <statkashaman@mail.ru>
Date: Wed, 24 Aug 2022 17:03:43 +0700
Subject: [PATCH] Add Yandex Cloud DNS API instructions

---
 dnsapi.md | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/dnsapi.md b/dnsapi.md
index a1a9583..6ac4188 100644
--- a/dnsapi.md
+++ b/dnsapi.md
@@ -2967,6 +2967,33 @@ To issue a wildcard certificate, run command:
 
     ./acme.sh --issue --dns dns_la -d example.com -d *.example.com
 
+## 149. Use Yandex Cloud DNS API
+
+Create a new service account with role `dns.editor` and [create authorized key](https://cloud.yandex.com/en-ru/docs/iam/operations/authorized-key/create) for him.
+
+Required parameters:
+```sh
+export YC_Folder_ID="YC Folder ID"
+export YC_SA_ID="Service Account ID"
+export YC_SA_Key_ID="Service Account IAM Key ID"
+# You need use YC_SA_Key_File_PEM_b64 or YC_SA_Key_File_Path
+export YC_SA_Key_File_PEM_b64="Base64 content of private.key"
+export YC_SA_Key_File_Path="/path/to/private.key"
+```
+
+Optional parameters:
+```sh
+export YC_Zone_ID="DNS Zone ID"
+```
+
+Now you cann issue a cert:
+
+```sh
+./acme.sh --issue --dns dns_yc -d example.com -d www.example.com
+```
+
+Both, `YC_Folder_ID`, `YC_SA_ID`, `YC_SA_Key_ID`, `YC_SA_Key_File_PEM_b64` or `YC_SA_Key_File_Path` and `YC_Zone_ID` will be saved in `~/.acme.sh/account.conf` and will be reused when needed.
+
 
 # ##################
 # Use custom API