secubox-openwrt/package/secubox/secubox-app-dns-provider/TODO.md
CyberMind-FR 57db9cfb40 feat: Add device-intel and dns-provider packages
Add 4 new packages implementing unified device intelligence and
DNS provider API management:

- secubox-app-dns-provider: dnsctl CLI with OVH, Gandi, Cloudflare
  adapters for DNS record CRUD, HAProxy vhost sync, propagation
  verification, and ACME DNS-01 wildcard certificate issuance
- luci-app-dns-provider: RPCD handler + LuCI views for provider
  settings and DNS record management
- secubox-app-device-intel: Aggregation layer merging mac-guardian,
  client-guardian, DHCP, P2P mesh, and exposure data with heuristic
  classification engine and USB/MQTT/Zigbee emulator modules
- luci-app-device-intel: RPCD handler + 5 LuCI views (dashboard,
  devices, emulators, mesh, settings) with shared API and CSS

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-04 15:47:20 +01:00

25 lines
1.1 KiB
Markdown

# secubox-app-dns-provider — TODO
## Pending
- [ ] Add GoDaddy provider adapter (`godaddy.sh`)
- [ ] Add Namecheap provider adapter (`namecheap.sh`)
- [ ] Implement `dnsctl update` for modifying existing records (currently must rm+add)
- [ ] Add batch record import/export (JSON or zone file format)
- [ ] Implement record caching to reduce API calls on list
- [ ] Add TTL validation per record type
- [ ] Wire ACME DNS-01 into haproxyctl `cert add --dns` flag
- [ ] Add DNS-01 challenge cleanup (remove _acme-challenge TXT records after issuance)
- [ ] Support OVH consumer key creation flow (`dnsctl ovh-auth`)
- [ ] Add rate limiting awareness per provider
- [ ] Integration test suite with mock API responses
## Multi-Node DNS Vision
- [ ] Mesh-aware dynamic DNS: each node announces its public IP to peers
- [ ] Local DNS relay: secubox-hosted DNS server that proxies to provider APIs
- [ ] Reverse DNS configuration via provider APIs
- [ ] Blockchain-backed DNS record anchoring (IPFS/ENS)
- [ ] Multi-provider failover: primary + secondary zone management
- [ ] Uncensored DNS mesh: peer-to-peer DNS resolution fallback