# DNS01 Challenge Fields - sing-box
The universal proxy platform.
Author: nekohasekai

Skip to content

# DNS01 Challenge Fields

Changes in sing-box 1.14.0

ttl
propagation_delay
propagation_timeout
resolvers
override_domain

Changes in sing-box 1.13.0

alidns.security_token
cloudflare.zone_token
acmedns

### Structure

    {
      "ttl": "",
      "propagation_delay": "",
      "propagation_timeout": "",
      "resolvers": [],
      "override_domain": "",
      "provider": "",

      ... // Provider Fields
    }

### Fields

#### ttl

Since sing-box 1.14.0

The TTL of the temporary TXT record used for the DNS challenge.

#### propagation_delay

Since sing-box 1.14.0

How long to wait after creating the challenge record before starting propagation checks.

#### propagation_timeout

Since sing-box 1.14.0

The maximum time to wait for the challenge record to propagate.

Set to `-1` to disable propagation checks.

#### resolvers

Since sing-box 1.14.0

Preferred DNS resolvers to use for DNS propagation checks.

#### override_domain

Since sing-box 1.14.0

Override the domain name used for the DNS challenge record.

Useful when `_acme-challenge` is delegated to a different zone.

#### provider

The DNS provider. See below for provider-specific fields.

### Provider Fields

#### Alibaba Cloud DNS

    {
      "provider": "alidns",
      "access_key_id": "",
      "access_key_secret": "",
      "region_id": "",
      "security_token": ""
    }

##### security_token

Since sing-box 1.13.0

The Security Token for STS temporary credentials.

#### Cloudflare

    {
      "provider": "cloudflare",
      "api_token": "",
      "zone_token": ""
    }

##### zone_token

Since sing-box 1.13.0

Optional API token with `Zone:Read` permission.

When provided, allows `api_token` to be scoped to a single zone.

#### ACME-DNS

Since sing-box 1.13.0

    {
      "provider": "acmedns",
      "username": "",
      "password": "",
      "subdomain": "",
      "server_url": ""
    }

See ACME-DNS for details.