如何关闭CNAME跟随？SSL证书申请泛域名证书申请失败

1Panel
, ,
1

申请免费泛域名证书的日志提示解析了 *.domain.com 的CNAME记录，在此之前配置了泛域名CDN的。

2024/02/06 09:41:53 开始申请证书,域名 [*.domain.com] 申请方式 [DNS 自动] DNS 账号 [DNSPod] 厂商 [DnsPod]
2024/02/06 09:41:53 [INFO] [*.domain.com] acme: Obtaining bundled SAN certificate
2024/02/06 09:41:54 [INFO] [*.domain.com] acme: use dns-01 solver
2024/02/06 09:41:54 [INFO] [*.domain.com] acme: Preparing to solve DNS-01
2024/02/06 09:41:54 [INFO] Found CNAME entry for "_acme-challenge.domain.com.": "xxxxx.domain.com.cdn.dnsv1.com.cn."
2024/02/06 09:41:55 [INFO] Found CNAME entry for "xxxxx.domain.com.cdn.dnsv1.com.cn.": "xxxxx.slt-dk.sched.tdnsv8.com."
2024/02/06 09:41:56 [WARN] [*.domain.com] acme: cleaning up failed: zone tdnsv8.com. not found in dnspod for domain xxxxx.slt-dk.sched.tdnsv8.com. 
2024/02/06 09:41:58 申请  [*.domain.com] 证书失败, error: one or more domains had a problem:
[*.domain.com] [*.domain.com] acme: error presenting token: zone tdnsv8.com. not found in dnspod for domain xxxxx.slt-dk.sched.tdnsv8.com.

本人学艺不精，只能查到1Panel引用的lego代码里有 LEGO_DISABLE_CNAME_SUPPORT 配置项
但是不知道如何配置

2

草率了……发完帖子就弄好了……

修改了 /etc/systemd/system/1panel.service
加了一行 Environment="LEGO_DISABLE_CNAME_SUPPORT=true"
另外在 /etc/profile 也添加了LEGO_DISABLE_CNAME_SUPPORT=true，不知道是哪个起了作用

[Unit]
Description=1Panel, a modern open source linux panel
After=syslog.target network.target

[Service]
ExecStart=/usr/bin/1panel
ExecReload=/bin/kill -s HUP $MAINPID
Restart=always
RestartSec=5
LimitNOFILE=1048576
LimitNPROC=1048576
LimitCORE=1048576
Delegate=yes
KillMode=process
Environment="LEGO_DISABLE_CNAME_SUPPORT=true"

[Install]
WantedBy=multi-user.target
3

为什么申请泛域名证书总是失败，之前用其他的反向代理工具申请域名证书一下子就成功，这工具总是失败，而且半个小时一次，哎，很失望啊