secubox-openwrt/package/secubox/secubox-app-dns-provider/TODO.md
CyberMind-FR 57db9cfb40 feat: Add device-intel and dns-provider packages
Add 4 new packages implementing unified device intelligence and
DNS provider API management:

- secubox-app-dns-provider: dnsctl CLI with OVH, Gandi, Cloudflare
  adapters for DNS record CRUD, HAProxy vhost sync, propagation
  verification, and ACME DNS-01 wildcard certificate issuance
- luci-app-dns-provider: RPCD handler + LuCI views for provider
  settings and DNS record management
- secubox-app-device-intel: Aggregation layer merging mac-guardian,
  client-guardian, DHCP, P2P mesh, and exposure data with heuristic
  classification engine and USB/MQTT/Zigbee emulator modules
- luci-app-device-intel: RPCD handler + 5 LuCI views (dashboard,
  devices, emulators, mesh, settings) with shared API and CSS

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-04 15:47:20 +01:00

1.1 KiB

secubox-app-dns-provider — TODO

Pending

  • Add GoDaddy provider adapter (godaddy.sh)
  • Add Namecheap provider adapter (namecheap.sh)
  • Implement dnsctl update for modifying existing records (currently must rm+add)
  • Add batch record import/export (JSON or zone file format)
  • Implement record caching to reduce API calls on list
  • Add TTL validation per record type
  • Wire ACME DNS-01 into haproxyctl cert add --dns flag
  • Add DNS-01 challenge cleanup (remove _acme-challenge TXT records after issuance)
  • Support OVH consumer key creation flow (dnsctl ovh-auth)
  • Add rate limiting awareness per provider
  • Integration test suite with mock API responses

Multi-Node DNS Vision

  • Mesh-aware dynamic DNS: each node announces its public IP to peers
  • Local DNS relay: secubox-hosted DNS server that proxies to provider APIs
  • Reverse DNS configuration via provider APIs
  • Blockchain-backed DNS record anchoring (IPFS/ENS)
  • Multi-provider failover: primary + secondary zone management
  • Uncensored DNS mesh: peer-to-peer DNS resolution fallback