[Idea] Managing DNS records in code?

[domdomegg]

🧩 Summary

Occasionally people will need to update DNS records. Currently this requires a BlueDot core team staff member to do this manually (as they need the 1Password credentials for Porkbun). This is time consuming, error prone and we don't get a good audit trail.

At Raise we set up our domain configuration as code, so that open-source contributors or contractors can edit it directly (with an approving PR review). This also gives us peer/AI-review and an audit trail.

Example: https://github.com/raisenational/domains

Maybe we could do this at BlueDot? Probably with Pulumi rather than Terraform, given we use it elsewhere already.

We can use one of the Porkbun terraform providers + the terraform provider support in Pulumi:

• https://registry.terraform.io/providers/cullenmcdermott/porkbun/latest/docs
• https://registry.terraform.io/providers/kyswtn/porkbun/latest/docs
• https://registry.terraform.io/providers/jianyuan/porkbun/latest/docs

✅ Definition of done

DNS management is done through code in the repo, that open-source contributors can contribute to.

📌 Notes / Designs

No response

How urgent is this?

🧊 Non-urgent / backlog