Correct entry for CAA record in DNS Panel?

[chrischtili]

I have a fresh install of cloudron. Everything works so far. But cloudron did not make a CAA record for letsencypt.
What is the correct entry for this CAA record in my DNS Panel?

[girish]

@chrischtili Cloudron cannot add a CAA because it doesn't have the complete information of who all can issue certs for your domain . Cloudron allows you to use your domain in places outside Cloudron as well.

You can add a CAA as you see fit. https://letsencrypt.org/docs/caa/ has good information if you want only LE to issue certs for your domain.

[chrischtili]

Would this standard entry be sufficient?
example.org CAA 0 issue "letsencrypt.org"

Or must the entry look like this:
my.example.org CAA 0 issue "letsencrypt.org"

[girish]

@chrischtili mm, the answer depends on what you are trying to achieve. both those records are valid. Maybe you can explain what you are trying to achieve and maybe even why you are trying to add CAA records ?

[chrischtili]

good question...I had yunohost before...they did recommend to install the CAA record. I think, that is the reason.