API-first automation for domains, DNS, and TLS.
From DNS record changes to certificate issuance and unattended renewals.
Developer Hub | DNS API | TLS API | Recipes
regfish has been building domain, DNS, and TLS infrastructure since 2002. On GitHub we publish the open-source building blocks around our APIs: clients, integrations, and utilities that turn DNS changes and certificate workflows into something you can actually automate.
|
Developer Hub The central entry point for the regfish API platform, including authentication, API references, schemas, and next steps. |
Recipes Step-by-step workflows for common DNS and TLS tasks, from safe DNS updates to explicit renewal and reissue cycles. |
|
DNS API Read, create, update, and delete DNS records for automated zone and validation management. |
TLS API Order, manage, revoke, and download TLS certificates programmatically. |
- certbro is our open-source Linux CLI built on top of the regfish DNS API and TLS API. It provisions
dns-cname-tokenvalidation records, downloads issued certificates, rotates keys, deploys stable PEM paths, and keeps unattended renewals manageable on real servers. - regfish-dnsapi-go is the official Go client for the regfish DNS API.
- libdns/regfish brings regfish DNS into the
libdnsecosystem. - caddy-dns/regfish adds regfish as a DNS provider for Caddy's ACME DNS challenge flow.
- We also maintain integrations for tools such as lego and Lexicon, so regfish fits into existing DNS and TLS stacks.
- Want end-to-end Linux certificate automation? Start with certbro and the recipe TLS automation with DNS API.
- Need safer record changes? Pair the DNS API with DNS record update with rollback.
- Optimizing certificate lifecycles? See Maximize TLS lifetime with reissue cycle and TLS explicit renewal.
If you want the raw building blocks, start in the Developer Hub. If you want copyable workflows, go straight to Recipes. If you want a ready-to-run server tool, use certbro.