About domain-dns-ops
A routing skill for domain and DNS operations that treats the manager repository as the source of truth and directs work through its scripts and checklists. It covers Cloudflare setup, delegation, redirects, and verification.
Key features
- 01Domain and target reference lookup
- 02Cloudflare zone setup checks
- 03Nameserver delegation guidance
- 04Page Rule and Worker redirects
- 05DNS and HTTPS verification
Use cases
- 01Routing a new vanity domain to Cloudflare
- 02Setting up DNS records for HTTPS
- 03Configuring and checking domain redirects
Install
Copy the command and run it in a terminal.
$
npx skills add https:/ / github.com/ steipete/ agent-scripts --skill domain-dns-opsAfter installing, type/domain-dns-opsin Claude Code to confirm it loaded.
Bundled filesreferences/manager-repo.md
Details
From the project READMEDomain/DNS Ops (Peter)
This skill is a thin router: use ~/Projects/manager as truth, run the repo scripts, follow the checklists.
Source of truth (read first)
~/Projects/manager/DOMAINS.md(domain -> target map; registrar hints; exclusions)~/Projects/manager/DNS.md(Cloudflare onboarding + DNS/redirect checklist)~/Projects/manager/redirect-worker.ts+~/Projects/manager/redirect-worker-mapping.md(worker redirects)
Golden path (new vanity domain -> Cloudflare -> redirect)
- Decide routing model
- Page Rule redirect (small scale, per-zone).
- Rulesets / Bulk Redirects (account-level; needs token perms).
- Worker route (fallback; uses
redirect-worker).
- Cloudflare zone
- Create zone (UI), then confirm with
cli4:cli4 --get name=example.com /zones
- Create zone (UI), then confirm with
- Nameservers
- If registrar = Namecheap:
cd ~/Projects/manager && source profile && bin/namecheap-set-ns example.com emma.ns.cloudflare.com scott.ns.cloudflare.com - If registrar = DNSimple: see
~/Projects/manager/DNS.mdfor delegation API notes.
- If registrar = Namecheap:
- DNS placeholders (so CF can terminate HTTPS)
- Proxied apex
A+ wildcardA→192.0.2.1(see~/Projects/manager/DNS.mdfor exactcli4calls).
- Proxied apex
- Redirect
- If using Page Rules: use the
cli4 --post ... /pagerulestemplate from~/Projects/manager/DNS.md. - If using Worker: update mapping (
~/Projects/manager/redirect-worker-mapping.md), deploy/bind routes per~/Projects/manager/DNS.md.
- If using Page Rules: use the
- Verify
- DNS:
dig +short example.com @1.1.1.1(expect CF anycast). - HTTPS redirect:
curl -I https://example.com(expect301).
- DNS:
Common ops
- Cloudflare token sanity: follow the root secret rule; export only the needed Cloudflare token for one command.
- Disable “Block AI bots”:
cd ~/Projects/manager && source profile && bin/cloudflare-ai-bots status/bin/cloudflare-ai-bots disable.
After edits (commit/push)
If you changed anything in ~/Projects/manager (docs, worker, scripts, mappings): commit there too.
- Review:
cd ~/Projects/manager && git status && git diff - Stage:
git add <paths> - Commit (Conventional Commits):
git commit -m "feat: …"/fix:/docs:/chore: - Push only when explicitly asked:
git push origin main
Guardrails
- Don’t touch
.mdlore domains orsteipete.mdunless explicitly asked; check~/Projects/manager/DOMAINS.md. - Confirm registrar before debugging CF “invalid nameservers” (often “wrong registrar”).
- Prefer reversible steps; verify after each change (NS → DNS → redirect).
Comments
Markdown supported