lego

lego has a built-in dnsmint provider from v5.5.0. One variable, the key carrying dns01:write for the hostname, and nothing to pre-seed.

$ export DNSMINT_API_KEY=$DNSMINT_KEY

lego run --email you@example.com --dns dnsmint \
    --accept-tos -d q7k4m2.a3f9c1-d4e7b8.dev -d '*.q7k4m2.a3f9c1-d4e7b8.dev'

On a lego older than v5.5.0, and inside anything that embeds one - Traefik, Coolify, Dokploy, Dokku - use the httpreq provider instead, as those recipes do. The acme-dns route also still works; it needs the registration file written to lego's storage before the first run, as described in the API reference.