Hello.

I'm trying to automate letsencrypt cert creation via dns

This is what I'm sending to nsupdate:
server api.dynu.com
zone example.com
update add _acme-challenge.example.com 30 IN TXT "blahblahblah"
key hmac-md5:example.com ==SomeRandomTokenValue==
send
quit

it is returning success. My TSIG token is recent and valid.

rc=0

My problem is that when I query dns via dig/nslookup/web-site the record is not there. I also don't see any updates in any of the logs that I've found at dynu.com.

Does anybody have any experience with this? Is something missing from somewhere?