ddns-proxy

I'm using ddns-updater on multiple hosts to update my dynamic DNS (DDNS) records. Each host needs to update a single DNS record, but to do so they need to have an API key with full access to the entire DNS zone (a limitation of the Cloudflare API). This is not ideal for security reasons, so I created this proxy to allow each host to update only a single record.

flowchart LR
    host-a[Host A] --> ddns
    host-b[Host B] --> ddns
    host-c[Host C] --> ddns
    host-d[Host D] --> ddns
    ddns[ddns-proxy] --> cloudflare[Cloudflare API]

Loading

Note: this is a hobby project, mainly to play around with .NET Native AOT. I'm using it internally only, so security is not a primary concern. Use at your own risk!

Usage

1. Create an API token in Cloudflare that has read & write permissions for the DNS zone(s) you want to update
2. Create the DNS record(s) you want to update
3. Start the ddns-proxy container with the API token, for example using Docker Compose:

   services:
     ddns-proxy:
       image: ghcr.io/louismt/ddns-proxy:latest
       environment:
         - CLOUDFLARE__APITOKEN=your_api_token
         - DDNS__RECORDS__0__KEY=some_unique_key
         - DDNS__RECORDS__0__ZONEID=your_zone_id
         - DDNS__RECORDS__0__DNSRECORDID=your_dns_record_id
       ports:
         - 8080

4. To get the DNS record ID(s), you can call http://docker-ip:8080/list?zoneId=your_zone_id
5. Add as many records to the configuration as you need, using unique keys for each record
6. Configure ddns-updater on each host to use the ddns-proxy as the endpoint, for example:

   {
     "provider": "custom",
     "domain": "example.com",
     "url": "http://docker-ip:8080/update?key=some_unique_key",
     "ipv4key": "ipv4",
     "ipv6key": "ipv6",
     "success_regex": "\"success\":true",
   }