i use VALIDATION=dns and DNSPLUGIN=cloudflare. My swag is running great for now. But i worry if it would need the token when it needs to renew certs. Currently i set the API token to expire in a day, just for safety.
you should set it to whatever you’re comfortable with. if you want to manually edit every quarter to allow swag to renew the cert, do that, if you dont want to bother, dont expire the token