<![CDATA[Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT]]>Since I installed 9.1, I noticed 2 apps I used based on domains from Gandi were not restarting due to letsencrypt provisioning issues. Basically Cloudron can't connect to Gandi either using the legacy API token or the new PAT.

Here's the error:

Gandi DNS error [403] {"object": "HTTPForbidden", "cause": "Forbidden", "code": 403, "message": "Access was denied to this resource."} BoxError: Gandi DNS error [403] {"object": "HTTPForbidden", "cause": "Forbidden", "code": 403, "message": "Access was denied to this resource."}

This also happens when I manually try to change those values directly in the Domains interface. (I tried the Gandi CURL example with the same token, so this is clearly not an error with the token)

What can I do to fix this. I already have a customer complaining their website is down, and I seemingly can't do anything to fix this, since it's letsencrypt related.

]]>https://forum.cloudron.io/topic/15181/letsencrypt-renewal-error-due-to-gandi-dns-failing-to-be-set-using-either-api-token-or-patRSS for NodeSat, 12 Sep 2026 07:43:44 GMTWed, 04 Mar 2026 22:02:49 GMT60<![CDATA[Reply to Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT on Fri, 03 Apr 2026 10:40:07 GMT]]>Got it, yes it was the token, i made a New one (PAT) and it seems that it works
Thanks

]]>https://forum.cloudron.io/post/122883https://forum.cloudron.io/post/122883Fri, 03 Apr 2026 10:40:07 GMT<![CDATA[Reply to Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT on Fri, 03 Apr 2026 09:37:16 GMT]]>Have you tested if the token works? Check with curl and one of the API calls at https://api.gandi.net/docs/authentication/

]]>https://forum.cloudron.io/post/122877https://forum.cloudron.io/post/122877Fri, 03 Apr 2026 09:37:16 GMT<![CDATA[Reply to Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT on Fri, 03 Apr 2026 09:31:11 GMT]]>Hi, today i had the same issue. Cloudron 9.1.5

What was the solution?

Benachrichtigungen
Domain ...... is not configured properly
vor 4 Stunden

Access denied: Gandi DNS error [403] {"object": "HTTPForbidden", "cause": "Forbidden", "code": 403, "message": "Access was denied to this resource."}

]]>https://forum.cloudron.io/post/122876https://forum.cloudron.io/post/122876Fri, 03 Apr 2026 09:31:11 GMT<![CDATA[Reply to Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT on Fri, 06 Mar 2026 18:24:47 GMT]]>I'm interested to know what you discover because I use Gandi too...

]]>https://forum.cloudron.io/post/121356https://forum.cloudron.io/post/121356Fri, 06 Mar 2026 18:24:47 GMT<![CDATA[Reply to Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT on Fri, 06 Mar 2026 18:17:49 GMT]]>@nebulon I can.

But now I have created a token which can theoretically update all domains.

But I'm starting to think it's Gandi who changed their permission model and actually, while maybe I can access through the UI to many domain where I've been added as a technical contact, it's possible that somehow that permissions still need to be added manually elsewhere.

I'll contact Gandi support next week.

]]>https://forum.cloudron.io/post/121355https://forum.cloudron.io/post/121355Fri, 06 Mar 2026 18:17:49 GMT<![CDATA[Reply to Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT on Thu, 05 Mar 2026 09:11:18 GMT]]>Does the token have read/write access to the domain? How did you create the token in Gandi?

]]>https://forum.cloudron.io/post/121280https://forum.cloudron.io/post/121280Thu, 05 Mar 2026 09:11:18 GMT<![CDATA[Reply to Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT on Thu, 05 Mar 2026 09:05:52 GMT]]>Since the token works in your CURL example, can you run that from the server itself to see if there might be some IP block/allowlist issue?

]]>https://forum.cloudron.io/post/121278https://forum.cloudron.io/post/121278Thu, 05 Mar 2026 09:05:52 GMT<![CDATA[Reply to Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT on Thu, 05 Mar 2026 01:03:19 GMT]]>@nebulon Ah right, since the domain was already pointing to the server, it immediately worked after retrying ththe failing task.

]]>https://forum.cloudron.io/post/121257https://forum.cloudron.io/post/121257Thu, 05 Mar 2026 01:03:19 GMT<![CDATA[Reply to Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT on Wed, 04 Mar 2026 23:23:06 GMT]]>We have to debug this, for a start you can switch that domain over to manual and fixup the A record manually to point to the server's ip

]]>https://forum.cloudron.io/post/121255https://forum.cloudron.io/post/121255Wed, 04 Mar 2026 23:23:06 GMT<![CDATA[Reply to Letsencrypt renewal error due to Gandi DNS failing to be set using either API Token or PAT on Wed, 04 Mar 2026 22:17:59 GMT]]>Now I'm starting to wonder when these other gandi domains are going to rotate their letsencrypt certificates and error out as well. 🥶

]]>https://forum.cloudron.io/post/121251https://forum.cloudron.io/post/121251Wed, 04 Mar 2026 22:17:59 GMT