thanks for maintaining dehydrated-hook-ddns-tsig in debian.
unfortunately, since dehydrated 0.6 changed the way hooks are handled,
it doesn't work and needs the following patch (tested, works for me):
It would be nice if you could cherry-pick that into the debian package.
Letsencrypt-devel mailing list