Issue using os-caddy to generate wildcard cert with Route53 (AWS)

I'm getting errors that seem to suggest route53 is not being used, but can't see anything that's wrong with my configuration. Advice appreciated.

This is my caddyfile:

# DO NOT EDIT THIS FILE -- OPNsense auto-generated file # Global Options { log { output net unixgram//var/caddy/var/run/log { } format json { time_format rfc3339 } level DEBUG }

email [email protected] grace_period 10s import /usr/local/etc/caddy/caddy.d/*.global }

# Reverse Proxy Configuration

# Reverse Proxy Domain: "ecac55dc-599e-42ea-8bfb-37f01a42132b" *.shymoose.com { tls { dns route53 { access_key_id removedforreddit secret_access_key removedforreddit } } }

import /usr/local/etc/caddy/caddy.d/*.conf

And these are the errors from the log:

"error","ts":"2024-07-05T23:32:21Z","logger":"tls.obtain","msg":"will retry","error":"[*.shymoose.com] Obtain: [*.shymoose.com] solving challenges: presenting for challenge: adding temporary record for zone \"shymoose.com.\": not found, ResolveEndpointV2 (order=https://acme-staging-v02.api.letsencrypt.org/acme/order/153868293/17618179733) (ca=https://acme-staging-v02.api.letsencrypt.org/directory)","attempt":4,"retrying_in":300,"elapsed":301.845865153,"max_duration":2592000} "debug","ts":"2024-07-05T23:32:21Z","logger":"events","msg":"event","name":"cert_failed","id":"f4533a20-b5c5-48b7-9cd7-0717896d4a73","origin":"tls","data":{"error":{},"identifier":"*.shymoose.com","issuers":["acme-v02.api.letsencrypt.org-directory"],"renewal":false}} "error","ts":"2024-07-05T23:32:21Z","logger":"tls.obtain","msg":"could not get certificate from issuer","identifier":"*.shymoose.com","issuer":"acme-v02.api.letsencrypt.org-directory","error":"[*.shymoose.com] solving challenges: presenting for challenge: adding temporary record for zone \"shymoose.com.\": not found, ResolveEndpointV2 (order=https://acme-staging-v02.api.letsencrypt.org/acme/order/153868293/17618179733) (ca=https://acme-staging-v02.api.letsencrypt.org/directory)"} "error","ts":"2024-07-05T23:32:21Z","logger":"tls.issuance.acme.acme_client","msg":"cleaning up solver","identifier":"*.shymoose.com","challenge_type":"dns-01","error":"no memory of presenting a DNS record for \"_acme-challenge.shymoose.com\" (usually OK if presenting also failed)"} "error","ts":"2024-07-05T23:30:21Z","logger":"tls.obtain","msg":"will retry","error":"[*.shymoose.com] Obtain: [*.shymoose.com] solving challenges: presenting for challenge: adding temporary record for zone \"shymoose.com.\": not found, ResolveEndpointV2 (order=https://acme-staging-v02.api.letsencrypt.org/acme/order/153868293/17618154653) (ca=https://acme-staging-v02.api.letsencrypt.org/directory)","attempt":3,"retrying_in":120,"elapsed":181.503039812,"max_duration":2592000} "debug","ts":"2024-07-05T23:30:21Z","logger":"events","msg":"event","name":"cert_failed","id":"04910e69-e1dd-4669-97be-d5838177372d","origin":"tls","data":{"error":{},"identifier":"*.shymoose.com","issuers":["acme-v02.api.letsencrypt.org-directory"],"renewal":false}} "error","ts":"2024-07-05T23:30:21Z","logger":"tls.obtain","msg":"could not get certificate from issuer","identifier":"*.shymoose.com","issuer":"acme-v02.api.letsencrypt.org-directory","error":"[*.shymoose.com] solving challenges: presenting for challenge: adding temporary record for zone \"shymoose.com.\": not found, ResolveEndpointV2 (order=https://acme-staging-v02.api.letsencrypt.org/acme/order/153868293/17618154653) (ca=https://acme-staging-v02.api.letsencrypt.org/directory)"} "error","ts":"2024-07-05T23:30:21Z","logger":"tls.issuance.acme.acme_client","msg":"cleaning up solver","identifier":"*.shymoose.com","challenge_type":"dns-01","error":"no memory of presenting a DNS record for \"_acme-challenge.shymoose.com\" (usually OK if presenting also failed)"} "error","ts":"2024-07-05T23:28:20Z","logger":"tls.obtain","msg":"will retry","error":"[*.shymoose.com] Obtain: [*.shymoose.com] solving challenges: presenting for challenge: adding temporary record for zone \"shymoose.com.\": not found, ResolveEndpointV2 (order=https://acme-staging-v02.api.letsencrypt.org/acme/order/153868293/17618128793) (ca=https://acme-staging-v02.api.letsencrypt.org/directory)","attempt":2,"retrying_in":120,"elapsed":61.178094531,"max_duration":2592000} "debug","ts":"2024-07-05T23:28:20Z","logger":"events","msg":"event","name":"cert_failed","id":"d4c2a1e5-3756-42f1-a98e-b89fdb817c98","origin":"tls","data":{"error":{},"identifier":"*.shymoose.com","issuers":["acme-v02.api.letsencrypt.org-directory"],"renewal":false}} "error","ts":"2024-07-05T23:28:20Z","logger":"tls.obtain","msg":"could not get certificate from issuer","identifier":"*.shymoose.com","issuer":"acme-v02.api.letsencrypt.org-directory","error":"[*.shymoose.com] solving challenges: presenting for challenge: adding temporary record for zone \"shymoose.com.\": not found, ResolveEndpointV2 (order=https://acme-staging-v02.api.letsencrypt.org/acme/order/153868293/17618128793) (ca=https://acme-staging-v02.api.letsencrypt.org/directory)"} "error","ts":"2024-07-05T23:28:20Z","logger":"tls.issuance.acme.acme_client","msg":"cleaning up solver","identifier":"*.shymoose.com","challenge_type":"dns-01","error":"no memory of presenting a DNS record for \"_acme-challenge.shymoose.com\" (usually OK if presenting also failed)"} "error","ts":"2024-07-05T23:27:20Z","logger":"tls.obtain","msg":"will retry","error":"[*.shymoose.com] Obtain: [*.shymoose.com] solving challenges: presenting for challenge: adding temporary record for zone \"shymoose.com.\": not found, ResolveEndpointV2 (order=https://acme-v02.api.letsencrypt.org/acme/order/1807923077/284696562297) (ca=https://acme-v02.api.letsencrypt.org/directory)","attempt":1,"retrying_in":60,"elapsed":0.626925018,"max_duration":2592000} "debug","ts":"2024-07-05T23:27:20Z","logger":"events","msg":"event","name":"cert_failed","id":"6547d250-ed3f-4d95-ae9f-1543f7bd1624","origin":"tls","data":{"error":{},"identifier":"*.shymoose.com","issuers":["acme-v02.api.letsencrypt.org-directory"],"renewal":false}} "error","ts":"2024-07-05T23:27:20Z","logger":"tls.obtain","msg":"could not get certificate from issuer","identifier":"*.shymoose.com","issuer":"acme-v02.api.letsencrypt.org-directory","error":"[*.shymoose.com] solving challenges: presenting for challenge: adding temporary record for zone \"shymoose.com.\": not found, ResolveEndpointV2 (order=https://acme-v02.api.letsencrypt.org/acme/order/1807923077/284696562297) (ca=https://acme-v02.api.letsencrypt.org/directory)"} "error","ts":"2024-07-05T23:27:20Z","logger":"tls.issuance.acme.acme_client","msg":"cleaning up solver","identifier":"*.shymoose.com","challenge_type":"dns-01","error":"no memory of presenting a DNS record for \"_acme-challenge.shymoose.com\" (usually OK if presenting also failed)"}