DDNS Updater

# values.yaml — Single Cloudflare record
# Tokens are stored in a chart-managed Secret — consider existingSecret for production.
config:
  settings:
    - provider: cloudflare
      zone_identifier: 'your-zone-id'
      domain: 'example.com'
      host: '@' # '@' for root domain, or subdomain like 'home'
      ttl: 300
      token: 'your-cloudflare-api-token'
      proxied: false
      ip_version: ipv4

ddns:
  period: 5m

persistence:
  enabled: true
  size: 256Mi

# values.yaml — Multiple records across different providers
config:
  settings:
    - provider: cloudflare
      zone_identifier: 'cf-zone-id'
      domain: 'example.com'
      host: '@'
      token: 'cf-api-token'
      proxied: true

    - provider: duckdns
      domain: 'myhost.duckdns.org'
      token: 'duckdns-token'

    - provider: namecheap
      domain: 'example.org'
      host: 'home'
      password: 'namecheap-ddns-password'

ddns:
  period: 5m
  updateCooldownPeriod: 5m # prevents flapping when IP changes rapidly

persistence:
  enabled: true
  size: 256Mi

# values.yaml — GitOps-safe: load config.json from a pre-existing Secret
# Create the secret manually:
#   kubectl create secret generic ddns-config \
#     --from-file=config.json=./config.json
#
# config.json format:
# {
#   "settings": [
#     {
#       "provider": "cloudflare",
#       "zone_identifier": "zone-id",
#       "domain": "example.com",
#       "host": "@",
#       "token": "api-token",
#       "proxied": false,
#       "ip_version": "ipv4"
#     }
#   ]
# }

config:
  existingSecret: ddns-config
  existingSecretKey: config.json

ddns:
  period: 5m

persistence:
  enabled: true
  size: 256Mi

# values.yaml — Web UI exposed via Ingress with TLS
# The web UI runs on port 8000 in the container (mapped to 80 on the Service).
config:
  existingSecret: ddns-config
  existingSecretKey: config.json

ddns:
  period: 5m
  rootUrl: / # set to '/ddns' if behind a reverse proxy on a subpath

persistence:
  enabled: true
  size: 256Mi

ingress:
  enabled: true
  ingressClassName: traefik
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
  hosts:
    - host: ddns.example.com
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: ddns-tls
      hosts:
        - ddns.example.com