init

Author: jaspermayone

.gitattributes

@@ -0,0 +1,2 @@
+*.yaml linguist-detectable
+*.yml linguist-detectable

.github/CODEOWNERS

@@ -0,0 +1,3 @@
+* @jaspermayone
+
+.github/** @jaspermayone

.github/workflows/deploy.yaml

@@ -0,0 +1,22 @@
+name: deploy
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+
+jobs:
+  octodns:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3'
+      - name: Install OctoDNS
+        run: pip install 'octodns>=1.5.0' octodns-dnsimple octodns-cloudflare
+      - name: Sync w/ production DNS providers
+        run: ./bin/sync
+        env:
+          CLOUDFLARE_TOKEN: ${{ secrets.CLOUDFLARE_TOKEN }}

.github/workflows/test.yml

@@ -0,0 +1,32 @@
+name: test
+
+on: ['push', 'pull_request_target']
+
+jobs:
+  octodns:
+    runs-on: ubuntu-latest
+    steps:
+      # For forked PRs: checkout the PR head (fork + SHA)
+      - name: Checkout PR head
+        if: github.event_name == 'pull_request_target'
+        uses: actions/checkout@v4
+        with:
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      # For normal pushes: default checkout
+      - name: Checkout (push)
+        if: github.event_name != 'pull_request_target'
+        uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3'
+
+      - name: Install OctoDNS
+        run: pip install 'octodns>=1.5.0' octodns-cloudflare octodns-dnsimple
+
+      - name: Do a dry run
+        run: ./bin/dry-run
+        env:
+          CLOUDFLARE_TOKEN: ${{ secrets.CLOUDFLARE_TOKEN_READ_ONLY }}

.github/workflows/validate.yml

@@ -0,0 +1,23 @@
+name: json-yaml-validate
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  json-yaml-validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: json-yaml-validate
+        id: json-yaml-validate
+        uses: GrantBirki/json-yaml-validate@v2.7.1
+        with:
+          comment: "true"

.gitignore

@@ -0,0 +1 @@
+.env

bin/dry-run

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+octodns-sync --config-file=./config/config.yaml

bin/sync

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+octodns-sync --config-file=./config/config.yaml --doit

config/config.yaml

@@ -0,0 +1,29 @@
+---
+providers:
+  config:
+    class: octodns.provider.yaml.YamlProvider
+    directory: ./
+    enforce_order: False
+  cloudflare:
+    class: octodns_cloudflare.CloudflareProvider
+    token: env/CLOUDFLARE_TOKEN
+    # Production best practices
+    plan_type: free       # Cloudflare plan type
+    min_ttl: 120                 # Cloudflare minimum
+    # Enhanced reliability settings
+    retry_count: 5               # More retries for production
+    retry_period: 600            # 10 minute wait on rate limits
+    zones_per_page: 50           # API pagination
+    records_per_page: 100        # API pagination
+
+zones:
+  witcc.dev.:
+    sources:
+      - config
+    targets:
+      - cloudflare
+  hackwit.org.:
+    sources:
+      - config
+    targets:
+      - cloudflare

hackwit.org.yaml

@@ -0,0 +1,2 @@
+# ---
+# "":