feat: add OpenAPI 3.1 spec and MCP server binary#225
Open
ZPascal wants to merge 21 commits into
Open
Conversation
- feature/dns-api-extended: admin API for full DNS record management - feature/ai-agent-support: OpenAPI 3.1 spec + MCP server binary - feature/security-ha: security hardening + active-active HA deployment guide
- dns-api-extended: 7 tasks, TDD, admin CRUD API + DNS integration - ai-agent-support: 7 tasks, OpenAPI spec + MCP binary - security-ha: 7 tasks, 5 security fixes + HA deployment guide
Implements adminBearerMiddleware, adminListRecords, adminCreateRecord, adminUpdateRecord, and adminDeleteRecord HTTP handlers behind Bearer token auth; adds corresponding tests with DB teardown via t.Cleanup.
ZPascal
force-pushed
the
feature/ai-agent-support
branch
from
6d4dca2 to
ef87060
Compare
…g, RR validation, DB index - CORS: restore X-Api-User and X-Api-Key to AllowedHeaders (required by /update endpoint) - api: normalize record names to FQDN (trailing dot) on create/update/list-filter so DNS lookups against q.Name (which always ends with dot) match stored records - api: normalize type filter to uppercase for case-insensitive GET /admin/records?type= - api: add probeRR helper — validates record value parses as a real DNS RR before storing, preventing values that are silently dropped at serve time - dns: guard answerManaged against unknown QTYPEs (empty TypeToString result) - dns: quote TXT and CAA values in RR string so values with spaces parse correctly - db: add index on dns_records(name, type) to avoid full table scans on every DNS request
ZPascal
force-pushed
the
feature/dns-api-extended
branch
from
e929f6d to
c941f89
Compare
ZPascal
force-pushed
the
feature/ai-agent-support
branch
from
ef87060 to
da3ae59
Compare
ZPascal
changed the title
ZPascal
force-pushed
the
feature/dns-api-extended
branch
3 times, most recently
from
c4045a1 to
360a8ae
Compare
ZPascal
force-pushed
the
feature/dns-api-extended
branch
2 times, most recently
from
a6be757 to
4d70ec0
Compare
ZPascal
force-pushed
the
feature/dns-api-extended
branch
from
4d70ec0 to
14501d8
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
GET /openapi.json(no auth required)POST /register,POST /update,GET /health, and the admin record CRUD endpointscmd/acme-dns-mcp/binary: stdio-based MCP server wrapping the acme-dns HTTP API as structured toolsregister_subdomain,update_txt_record,list_dns_records,create_dns_record,update_dns_record,delete_dns_record,health_check~/.acme-dns-mcp/config.tomlor env vars (ACMEDNS_BASE_URL,ACMEDNS_ADMIN_TOKEN, etc.).goreleaser.ymlupdated to build and publishacme-dns-mcpalongsideacme-dnsTest Plan
go test -race ./...passesgo build ./...builds cleanlyGET /openapi.jsonreturns valid OpenAPI 3.1 JSONhealth_checktool returns{"status":"ok"}against a running instancelist_dns_recordsreturns{"records":[...]}with admin token configured{"error":"admin_token not configured"}