Files
Charon/backend/pkg/dnsprovider/builtin/hetzner.go
GitHub Actions b86aa3921b feat(dns): add custom DNS provider plugin system
- Add plugin interface with lifecycle hooks (Init/Cleanup)
- Implement thread-safe provider registry
- Add plugin loader with SHA-256 signature verification
- Migrate 10 built-in providers to registry pattern
- Add multi-credential support to plugin interface
- Create plugin management UI with enable/disable controls
- Add dynamic credential fields based on provider metadata
- Include PowerDNS example plugin
- Add comprehensive user & developer documentation
- Fix frontend test hang (33min → 1.5min, 22x faster)

Platform: Linux/macOS only (Go plugin limitation)
Security: Signature verification, directory permission checks

Backend coverage: 85.1%
Frontend coverage: 85.31%

Closes: DNS Challenge Future Features - Phase 5
2026-01-07 02:54:01 +00:00

85 lines
2.0 KiB
Go

package builtin
import (
"fmt"
"time"
"github.com/Wikid82/charon/backend/pkg/dnsprovider"
)
// HetznerProvider implements the ProviderPlugin interface for Hetzner DNS.
type HetznerProvider struct{}
func (p *HetznerProvider) Type() string {
return "hetzner"
}
func (p *HetznerProvider) Metadata() dnsprovider.ProviderMetadata {
return dnsprovider.ProviderMetadata{
Type: "hetzner",
Name: "Hetzner",
Description: "Hetzner DNS with API token authentication",
DocumentationURL: "https://dns.hetzner.com/api-docs",
IsBuiltIn: true,
Version: "1.0.0",
}
}
func (p *HetznerProvider) Init() error {
return nil
}
func (p *HetznerProvider) Cleanup() error {
return nil
}
func (p *HetznerProvider) RequiredCredentialFields() []dnsprovider.CredentialFieldSpec {
return []dnsprovider.CredentialFieldSpec{
{
Name: "api_token",
Label: "API Token",
Type: "password",
Placeholder: "Enter your Hetzner DNS API token",
Hint: "Generate from Hetzner DNS Console",
},
}
}
func (p *HetznerProvider) OptionalCredentialFields() []dnsprovider.CredentialFieldSpec {
return []dnsprovider.CredentialFieldSpec{}
}
func (p *HetznerProvider) ValidateCredentials(creds map[string]string) error {
if creds["api_token"] == "" {
return fmt.Errorf("api_token is required")
}
return nil
}
func (p *HetznerProvider) TestCredentials(creds map[string]string) error {
return p.ValidateCredentials(creds)
}
func (p *HetznerProvider) SupportsMultiCredential() bool {
return false
}
func (p *HetznerProvider) BuildCaddyConfig(creds map[string]string) map[string]any {
return map[string]any{
"name": "hetzner",
"api_token": creds["api_token"],
}
}
func (p *HetznerProvider) BuildCaddyConfigForZone(baseDomain string, creds map[string]string) map[string]any {
return p.BuildCaddyConfig(creds)
}
func (p *HetznerProvider) PropagationTimeout() time.Duration {
return 120 * time.Second
}
func (p *HetznerProvider) PollingInterval() time.Duration {
return 5 * time.Second
}