Add clearnet DNS reachability planning

This commit is contained in:
jwinterm
2026-07-06 18:16:33 -04:00
parent f4a1355212
commit a7500dacbc
10 changed files with 632 additions and 19 deletions
+7
View File
@@ -113,6 +113,13 @@ render-only environment while making daemon ownership decisions explicit.
approvals, address capture, and apply dry-run. It emits stage rows with `ready`, `todo`,
`review`, `blocked`, or `skipped` status and short next-step commands. It is read-only.
## Clearnet reachability
`ampg dns plan` handles the public web edge for clearnet deployments. Static hosts use
A/AAAA records. Dynamic or behind-router hosts can use Dynamic DNS, provider-specific
apex aliases, API-updated records, port forwarding, IPv6, reverse tunnels, or DNS-01
certificate validation. Provider and router automation should remain opt-in.
## Activation plan
`ampg apply --dry-run` turns daemon status and generated config artifacts into an ordered
+6
View File
@@ -41,6 +41,12 @@ Then run `deploy plan` for a concise checklist:
python3 -m ampg --config gateway.toml deploy plan --profile vps-full
```
For clearnet on a changing home/laptop address, use Dynamic DNS planning:
```sh
python3 -m ampg --config gateway.toml dns plan --mode dynamic --behind-router
```
## Minimal Wownero pilot config
```toml
+9
View File
@@ -38,6 +38,9 @@ config artifacts.
```sh
python3 -m ampg --config gateway.toml deploy plan --profile mobile-i2p
python3 -m ampg --config gateway.toml dns plan --profile vps-full
python3 -m ampg --config gateway.toml dns plan --profile vps-full --mode dynamic --behind-router
python3 -m ampg --config gateway.toml dns check --profile vps-full
python3 -m ampg --config gateway.toml status
python3 -m ampg --config gateway.toml doctor
python3 -m ampg --config gateway.toml install-plan --profile mobile-i2p
@@ -59,6 +62,12 @@ python3 -m ampg --config gateway.toml doctor --platform android-termux
doctor, daemons, artifacts, addresses, and apply preflight. It prints the next commands
to run and does not change files or services.
`dns plan` prints clearnet DNS records and reachability hints. Static mode plans A/AAAA
and `www` records. Dynamic mode supports a Dynamic DNS hostname and warns when apex
records require provider-specific ALIAS/ANAME or API-updated A/AAAA support. With
`--behind-router`, it also lists port forwarding, IPv6, explicit router mapping,
reverse-tunnel, and DNS-01 certificate options.
`status` prints one row per enabled protocol with the selected platform provider,
adapter, installed/running daemon probe, action, and policy result.
+1
View File
@@ -151,6 +151,7 @@ daemon_policy = "auto"
```sh
python3 -m ampg --config gateway.toml init site wownero --domain wownero.org --source ../wownero.org-website --preset full
python3 -m ampg --config gateway.toml deploy plan --profile vps-full
python3 -m ampg --config gateway.toml dns plan --profile vps-full
python3 -m ampg --config examples/wownero.gateway.toml plan
python3 -m ampg --config examples/wownero.gateway.toml build
python3 -m ampg --config examples/wownero.gateway.toml manifest