CyberMind-FR
57db9cfb40
Add 4 new packages implementing unified device intelligence and DNS provider API management: - secubox-app-dns-provider: dnsctl CLI with OVH, Gandi, Cloudflare adapters for DNS record CRUD, HAProxy vhost sync, propagation verification, and ACME DNS-01 wildcard certificate issuance - luci-app-dns-provider: RPCD handler + LuCI views for provider settings and DNS record management - secubox-app-device-intel: Aggregation layer merging mac-guardian, client-guardian, DHCP, P2P mesh, and exposure data with heuristic classification engine and USB/MQTT/Zigbee emulator modules - luci-app-device-intel: RPCD handler + 5 LuCI views (dashboard, devices, emulators, mesh, settings) with shared API and CSS Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
27 lines
1.5 KiB
Markdown
27 lines
1.5 KiB
Markdown
# secubox-app-dns-provider — History
|
|
|
|
## v1.0.0 — 2026-02-04
|
|
|
|
### Initial Release
|
|
|
|
- Created `secubox-app-dns-provider` package
|
|
- UCI config: main settings, OVH, Gandi, Cloudflare provider sections
|
|
- `dnsctl` CLI: list, add, rm, sync, verify, test, status, acme-dns01
|
|
- OVH adapter: HMAC-SHA1 signed API v1 (ovh-eu, ovh-ca, ovh-us endpoints)
|
|
- Gandi adapter: LiveDNS v5 Bearer token API
|
|
- Cloudflare adapter: API v4 with zone_id
|
|
|
|
- Created `luci-app-dns-provider` package
|
|
- RPCD handler: get_config, list_records, add_record, remove_record, sync_records, verify_record, test_credentials, acme_dns01
|
|
- Settings view: provider selection, credential forms (OVH/Gandi/Cloudflare), test button
|
|
- Records view: status bar, add record modal, HAProxy sync, ACME DNS-01 modal, propagation checker
|
|
- Menu under admin/secubox/network/dns-provider (Records + Settings tabs)
|
|
- ACL with read/write permissions
|
|
|
|
### Design Decisions
|
|
|
|
- **Adapter pattern**: Each provider is a standalone shell script implementing 5 functions (dns_list, dns_add, dns_rm, dns_verify, dns_test_credentials), dynamically loaded via `source`
|
|
- **eval curl**: Used for building curl command with headers; shell limitations prevent array-based argument passing in BusyBox
|
|
- **HAProxy sync**: cmd_sync iterates UCI vhosts matching the configured zone and creates A records with the public IP from ipv4.icanhazip.com
|
|
- **ACME integration**: Exports provider-specific environment variables and delegates to acme.sh's built-in DNS plugins
|