Endless ACME DNS record created

[orzklv]

I'm trying to setup dns challenge for TLS with personal NS server. I've done bind side settings, but have been running into issues like this:

While checking the dns record, it does actually set acme challenge TXT record:

Meaning that RFC2136 configurations are correct, but TLS lego is endlessly updating the record and authenticating without proceeding with next steps of TLS generation.

I'm really sorry to say that, but I've been trying to configure server via NixOS configuration and thus my config looks like this:

settings = {
        server = {
          hostname = "mx.${cfg.domain}";
          tls = {
            enable = true;
            implicit = true;
          };
          listener = {
            smtp = {
              protocol = "smtp";
              bind = "[::]:25";
            };
            submissions = {
              bind = "[::]:465";
              protocol = "smtp";
            };
            imaps = {
              bind = "[::]:993";
              protocol = "imap";
            };
            management = {
              bind = ["127.0.0.1:8081"];
              protocol = "http";
            };
          };
        };

        lookup.default = {
          inherit (cfg) domain;
          hostname = "mx.${cfg.domain}";
        };

        acme."letsencrypt" = {
          directory = "https://acme-v02.api.letsencrypt.org/directory";
          challenge = "dns-01";
          contact = "[email protected]";
          host = "...";
          tsig-algorithm = "hmac-sha256";
          domains = [cfg.domain "mx.${cfg.domain}"];
          provider = "rfc2136-tsig";
          key = "...";
          secret = "...=";
        };

        session.auth = {
          mechanisms = "[plain]";
          directory = "'in-memory'";
        };

        storage.directory = "in-memory";
        session.rcpt.directory = "'in-memory'";

        directory = {
          "imap".lookup.domains = [cfg.domain];
          "in-memory" = {
            type = "memory";
            principals = [
              {
                class = "individual";
                name = "postmaster";
                secret = "%{file:/run/credentials/stalwart-mail.service/password}%";
                email = [
                  "abuse@${cfg.domain}"
                  "security@${cfg.domain}"
                  "alerts@${cfg.domain}"
                  "postmaster@${cfg.domain}"
                  "admin@${cfg.domain}"
                ];
              }
            ];
          };
          "keycloak" = {
            type = "oidc";
            timeout = "15s";
            endpoint.url = "https://auth.floss.uz/realms/floss.uz/protocol/openid-connect/userinfo";
            endpoint.method = "userinfo";
            fields.email = "email";
            fields.username = "preferred_username";
            fields.full-name = "name";
          };
        };
        authentication.fallback-admin = {
          user = "orzklv";
          secret = "%{file:/run/credentials/stalwart-mail.service/password}%";
        };
      };

[orzklv]

I think, I hit the rate-limit....