domain-dns-ops
DNS/domain ops: registrars, zones, redirects, DNS/HTTP verify, manager truth.
How do I install this agent skill?
npx skills add https://github.com/steipete/agent-scripts --skill domain-dns-opsIs this agent skill safe to install?
- Gen Agent Trust Hubpass
This skill facilitates DNS and domain management by interacting with a local management repository and Cloudflare APIs. It follows standard practices for infrastructure-as-code and environment variable management. It is rated as low risk due to its reliance on internal configuration files to drive high-privilege infrastructure commands.
- Socketwarn
1 alert: gptSecurity
- Snykpass
Risk: LOW · No issues
- Runlayerwarn
2/2 files flagged
What does this agent skill do?
Domain/DNS Ops (Peter)
This skill is a thin router: use ~/Projects/manager as truth, run the repo scripts, follow the checklists.
Source of truth (read first)
~/Projects/manager/DOMAINS.md(domain -> target map; registrar hints; exclusions)~/Projects/manager/DNS.md(Cloudflare onboarding + DNS/redirect checklist)~/Projects/manager/redirect-worker.ts+~/Projects/manager/redirect-worker-mapping.md(worker redirects)
Golden path (new vanity domain -> Cloudflare -> redirect)
- Decide routing model
- Page Rule redirect (small scale, per-zone).
- Rulesets / Bulk Redirects (account-level; needs token perms).
- Worker route (fallback; uses
redirect-worker).
- Cloudflare zone
- Create zone (UI), then confirm with
cli4:cli4 --get name=example.com /zones
- Create zone (UI), then confirm with
- Nameservers
- If registrar = Namecheap:
cd ~/Projects/manager && source profile && bin/namecheap-set-ns example.com emma.ns.cloudflare.com scott.ns.cloudflare.com - If registrar = DNSimple: see
~/Projects/manager/DNS.mdfor delegation API notes.
- If registrar = Namecheap:
- DNS placeholders (so CF can terminate HTTPS)
- Proxied apex
A+ wildcardA→192.0.2.1(see~/Projects/manager/DNS.mdfor exactcli4calls).
- Proxied apex
- Redirect
- If using Page Rules: use the
cli4 --post ... /pagerulestemplate from~/Projects/manager/DNS.md. - If using Worker: update mapping (
~/Projects/manager/redirect-worker-mapping.md), deploy/bind routes per~/Projects/manager/DNS.md.
- If using Page Rules: use the
- Verify
- DNS:
dig +short example.com @1.1.1.1(expect CF anycast). - HTTPS redirect:
curl -I https://example.com(expect301).
- DNS:
Common ops
- Cloudflare token sanity: follow the root secret rule; export only the needed Cloudflare token for one command.
- Disable “Block AI bots”:
cd ~/Projects/manager && source profile && bin/cloudflare-ai-bots status/bin/cloudflare-ai-bots disable.
After edits (commit/push)
If you changed anything in ~/Projects/manager (docs, worker, scripts, mappings): commit there too.
- Review:
cd ~/Projects/manager && git status && git diff - Stage:
git add <paths> - Commit (Conventional Commits):
git commit -m "feat: …"/fix:/docs:/chore: - Push only when explicitly asked:
git push origin main
Guardrails
- Don’t touch
.mdlore domains orsteipete.mdunless explicitly asked; check~/Projects/manager/DOMAINS.md. - Confirm registrar before debugging CF “invalid nameservers” (often “wrong registrar”).
- Prefer reversible steps; verify after each change (NS → DNS → redirect).
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/steipete/agent-scripts/domain-dns-ops">View domain-dns-ops on skillZs</a>