A proof of concept to generate wildcard certs using the Terraform ACME provider and bind them to an Azure app service site. DNS challenge is via Cloudflare.

This is still a WIP.

Tasks

• setup CF API token
• setup ACME cert
• use pfx cert
• import into key vault?
• setup custom domain to app service
• bind cert to domain

• create custom api token
  • perms
    • zone > zone settings > read (may not be needed)
    • zone > zone > read
    • zone > dns > edit
  • zone restrictions
    • include > all zones

• cf dns challenge
• worked example of tf provider
• correct api perms
  • official provider docs