Operations Quest
DomainOps
DomainOps brings multi-account DNS and certificate operations into one local-first terminal workspace. It combines an interactive TUI with a machine-readable JSON CLI while keeping credentials encrypted and risky mutations deliberate.
- 2 Interfaces An interactive terminal UI for operators and a JSON CLI for headless automation.
- Local Control plane SQLite state and an encrypted credential vault remain on the operator's machine.
- Solo Ownership Designed and implemented independently from product concept through release packaging.
Mission Brief
Routine DNS and certificate work becomes risky when operators switch between accounts, environments, provider dashboards, and partially completed ACME challenges.
The goal was a focused operations console that makes current state visible, records mutations, and provides recovery context without becoming another hosted control plane.
System Map
Architecture
-
TUI & JSON CLI
Human operators and automation share the same validated application services and predictable results.
-
Operations Core
Cloudflare DNS, TLS policy, certificate, conflict, confirmation, and recovery workflows live in one Go domain layer.
-
Local State
SQLite caches operational context and audit history while secrets remain protected in an encrypted vault.
-
External Providers
Cloudflare and isolated ACME staging or production environments are accessed through explicit adapters.
Strategy Route
Battle Plan
The implementation path, checkpoint by checkpoint.
-
Checkpoint 01
Re-fetch remote state before mutations and fail closed when the live record no longer matches the operator's view.
-
Checkpoint 02
Separate staging and production ACME directories so certificate tests cannot accidentally consume production limits.
-
Checkpoint 03
Journal DNS-01 challenge work, keep immutable certificate versions, and require confirmations for destructive operations.
-
Checkpoint 04
Bound concurrent provider calls and expose structured JSON results for reliable scripting.
Critical Encounter
Boss Fight
-
The central challenge was balancing speed with safety. DNS and certificate tools must support automation, but stale state, hidden defaults, or an interrupted challenge can create an outage far faster than a manual dashboard.
Achievements Unlocked
Quest Rewards
What the quest delivered.
-
Reward 01 unlocked
One consistent workflow now covers multiple Cloudflare accounts, zones, DNS records, TLS settings, and ACME certificates.
-
Reward 02 unlocked
Operators retain local custody of credentials plus an audit and recovery trail for consequential changes.
-
Reward 03 unlocked
The same core supports comfortable interactive use and deterministic headless automation.
Special Items
Technical Loadout
- Go
- Terminal UI
- JSON CLI
- SQLite
- Cloudflare API
- ACME
- Encrypted Vault
Proof of Work
Explore the Quest
Capabilities are documented from the public repository. DomainOps is presented as a pre-release tool, not as a production-proven service.