A pure Unix shell script that implements automatic updating of DNS TLSA records using the Cloudflare v4 API from acme.sh generated keys, including the rollover (next) key.

Automatically create TLSA records in Cloudflare based off of a local certificate chain

Mailcow-TLSA-Record-Updater is a Bash script that automatically generates and updates TLSA records for Mailcow mail servers. It supports SHA-256 and SHA-512 hashes, updating records upon certificate changes. The script uses DNSControl to push updates to your DNS provider.