<!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>Hi folks<br></div><div><br></div><div>I've been working on providing the ability to sync from our local DNS config with appropriate changes up to Cloudflare.<br></div><div><br></div><div>To date this has involved the following:<br></div><ul><li>hacking zonemake.py to output a YAML file for each zone, adding tags, and config to reflect proxying scenarios<br></li><li>writing a quick audit script to work out what changes would be needed to ucc.machines in advance of the sync<br></li><li>hacking zonemake.py to output a YAML file in the form OctoDNS requires<br></li><li>making OctoDNS work under Python 3.9 ( <a href="https://github.com/github/octodns/pull/632">https://github.com/github/octodns/pull/632</a> )<br></li><li>making OctoDNS support LOC records ( <a href="https://github.com/github/octodns/pull/635">https://github.com/github/octodns/pull/635</a> )<br></li><li>writing a quick script on mooneye - /usr/local/octodns/update-ucc-cloudflare.sh - to run the necessary octoDNS commands to do the sync<br></li></ul><div>Currently only ucc.guild.uwa.edu.au is being synced. /usr/local/octodns/update-ucc-cloudflare.sh currently points at my local development installation of octoDNS</div><div><br></div><div>Next steps are:<br></div><ul><li>Audit ucc.gu.uwa.edu.au and ucc.asn.au for the necessary changes needed in ucc.machines for syncing to Cloudflare<br></li><li>Make liberal backups before syncing<br></li><li>Add config under /usr/local/octodns (in the script and config directory) for ucc.gu.uwa.edu.au and ucc.asn.au<br></li><li>Sync these up to Cloudflare<br></li><li>Review changes with audit script afterwards</li><li>Ensure octoDNS patches get merged upstream and use upstream version installed under /usr/local/octodns<br></li><li>Migrate this into some form of CI arrangement based off git<br></li><li>Work out solution for LE certs with DNS challenges</li><li>Rebuild UCC internal DNS server infrastructure (mooneye) - both authoritative and resolver</li></ul><div><br></div><div>Happy to explain in more detail over a video chat, or IRC, or over pizza when I'm in Perth<br></div><div><br></div><div>Cheers,<br></div><div>Mark</div><div id="sig26513633"><div class="signature">--</div>
<div class="signature">Mark Tearle <<a href="mailto:mtearle@ucc.asn.au">mtearle@ucc.asn.au</a>></div></div><div><br></div></body></html>