DNS in Git

[reesericci]

I think it would be really cool if the jb.com DNS was managed transparently in a github repo.

[elreydetoda]

So, are you thinking something like Infrastructure as Code (IaC)? i.e. terraform, ansible, or pulumi?

[reesericci]

Yes but for specifically dns

[elreydetoda]

Ya, my only hesitation for that, with how JB currently does things, is it'd reveal the external IP address of the server that's hosting things.

If they'd be using things more IaC natively then there might not be any leaking of the IP address (through sanitization or authorization (someone how to be auth'ed to the CI)), then it'd be more feasible to not compromise on security for the convenience (IMO).

To clarify, this could be achievable because if they'd already used something like terraform to deploy servers and then they'd be able to reference a deployed server's external IP address (or reference with cloudflare provider (since that's their DNS )) through the terraform code instead of explicitly plugging in the IP address.

Although, I'd love to have this feature as well 😁 I love me some automation 😁

[reesericci]

Isn't the server supposed to be public facing though?

[elreydetoda]

Ya, it's public facing (and currently they don't have the IP address masked), but when/if they inline cloudflare for DNS + extra features then the IP address should be "masked" and no one should be able to find it after that (with some caveats).

[gerbrent]

Conversation on this idea/issue moved to #258
Locking this discussion to avoid duplication/divergence...