mirror of
https://github.com/blackboxprogramming/BlackRoad-Operating-System.git
synced 2026-03-17 07:57:19 -05:00
2a8f12d5cb
Implement Phase 1 infrastructure from master orchestration plan. This commit delivers production-ready deployment infrastructure, comprehensive documentation, and workflow automation. **Cloudflare DNS Infrastructure:** - Add records.yaml with complete DNS config for all domains - Add migrate_to_cloudflare.md with step-by-step migration guide - Add cloudflare_dns_sync.py for automated DNS synchronization - Update CLOUDFLARE_DNS_BLUEPRINT.md with implementation references **Environment Variable Documentation:** - Add ENV_VARS.md with comprehensive variable reference - Document all services: Railway, GitHub Actions, Cloudflare, local - Include security best practices and validation scripts - Add troubleshooting guides and quick-start templates **GitHub Actions Workflows:** - Add railway-deploy-template.yml for Railway deployments - Add frontend-deploy-template.yml for static site deployments - Add codeql-analysis-template.yml for security scanning - Add comprehensive-ci-template.yml for complete CI pipeline - Add .github/dependabot.yml for automated dependency updates **Frontend Infrastructure:** - Add infra/frontend/LANDING_PAGE_PLAN.md with detailed implementation plan - Include page structure, design system, content guidelines - Document deployment options (GitHub Pages, Railway, Cloudflare Pages) **Master Orchestration Updates:** - Update MASTER_ORCHESTRATION_PLAN.md with implementation file references - Add Phase 1 implementation checklist - Document immediate, short-term, and medium-term next steps **Impact:** This implementation enables: - Automated DNS management across 10+ domains - Secure, documented deployment workflows - Consistent environment configuration - Automated security scanning and dependency updates - Clear path to production for landing page **Next Steps for Operator:** 1. Migrate DNS to Cloudflare using migrate_to_cloudflare.md 2. Configure GitHub and Railway secrets 3. Deploy backend with custom domains 4. Implement landing page using LANDING_PAGE_PLAN.md Refs: #55 (Master Orchestration Prompt)
427 lines
11 KiB
YAML
427 lines
11 KiB
YAML
# Cloudflare DNS Records Configuration
|
|
# Version: 1.0
|
|
# Purpose: Structured DNS configuration for all BlackRoad domains
|
|
#
|
|
# This file is the single source of truth for DNS records.
|
|
# Use cloudflare_dns_sync.py to apply these records to Cloudflare.
|
|
#
|
|
# Format:
|
|
# domain: Domain name being managed
|
|
# zone_id: Cloudflare zone ID (get from Cloudflare dashboard)
|
|
# records: List of DNS records for this domain
|
|
# - type: Record type (A, AAAA, CNAME, TXT, MX, etc.)
|
|
# name: Record name (@ for root, subdomain for others)
|
|
# content: Target value
|
|
# ttl: Time to live (1 = Auto)
|
|
# proxied: Whether to proxy through Cloudflare (true/false)
|
|
# priority: MX priority (for MX records only)
|
|
# comment: Human-readable description
|
|
|
|
---
|
|
|
|
# ============================================================================
|
|
# PHASE 1 DOMAINS (Active Now)
|
|
# ============================================================================
|
|
|
|
- domain: blackroad.systems
|
|
zone_id: REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE
|
|
primary: true
|
|
phase: 1
|
|
records:
|
|
# Root domain → Railway backend
|
|
- type: CNAME
|
|
name: '@'
|
|
content: blackroad-os-production.up.railway.app
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Root domain points to Railway production (CNAME flattening)
|
|
|
|
# WWW redirect
|
|
- type: CNAME
|
|
name: www
|
|
content: blackroad.systems
|
|
ttl: 1
|
|
proxied: true
|
|
comment: WWW subdomain redirects to apex
|
|
|
|
# OS subdomain (explicit alias)
|
|
- type: CNAME
|
|
name: os
|
|
content: blackroad.systems
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Explicit OS subdomain (alternative entry point)
|
|
|
|
# API subdomain
|
|
- type: CNAME
|
|
name: api
|
|
content: blackroad-os-production.up.railway.app
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Explicit API subdomain for developers
|
|
|
|
# Prism Console subdomain
|
|
- type: CNAME
|
|
name: prism
|
|
content: blackroad-os-production.up.railway.app
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Prism Console admin interface
|
|
|
|
# Documentation subdomain → GitHub Pages
|
|
- type: CNAME
|
|
name: docs
|
|
content: blackboxprogramming.github.io
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Documentation hosted on GitHub Pages
|
|
|
|
# CDN subdomain (for future asset delivery)
|
|
- type: CNAME
|
|
name: cdn
|
|
content: blackroad.systems
|
|
ttl: 1
|
|
proxied: true
|
|
comment: CDN alias for static assets
|
|
|
|
# Email records (Google Workspace configuration)
|
|
- type: TXT
|
|
name: '@'
|
|
content: v=spf1 include:_spf.google.com ~all
|
|
ttl: 1
|
|
proxied: false
|
|
comment: SPF record for Google Workspace email
|
|
|
|
- type: MX
|
|
name: '@'
|
|
content: aspmx.l.google.com
|
|
ttl: 1
|
|
proxied: false
|
|
priority: 1
|
|
comment: Google Workspace MX record (priority 1)
|
|
|
|
- type: MX
|
|
name: '@'
|
|
content: alt1.aspmx.l.google.com
|
|
ttl: 1
|
|
proxied: false
|
|
priority: 5
|
|
comment: Google Workspace MX record (priority 5)
|
|
|
|
- type: MX
|
|
name: '@'
|
|
content: alt2.aspmx.l.google.com
|
|
ttl: 1
|
|
proxied: false
|
|
priority: 5
|
|
comment: Google Workspace MX record (priority 5)
|
|
|
|
# Verification records (add as needed)
|
|
# - type: TXT
|
|
# name: '@'
|
|
# content: google-site-verification=YOUR_CODE_HERE
|
|
# ttl: 1
|
|
# proxied: false
|
|
# comment: Google Search Console verification
|
|
|
|
- domain: blackroad.ai
|
|
zone_id: REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE
|
|
primary: false
|
|
phase: 1
|
|
records:
|
|
# Root → Alias to main OS
|
|
- type: CNAME
|
|
name: '@'
|
|
content: os.blackroad.systems
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Product console entry point
|
|
|
|
# WWW redirect
|
|
- type: CNAME
|
|
name: www
|
|
content: blackroad.ai
|
|
ttl: 1
|
|
proxied: true
|
|
comment: WWW subdomain redirects to apex
|
|
|
|
# Console subdomain (explicit)
|
|
- type: CNAME
|
|
name: console
|
|
content: os.blackroad.systems
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Explicit console subdomain
|
|
|
|
- domain: blackroad.network
|
|
zone_id: REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE
|
|
primary: false
|
|
phase: 1
|
|
records:
|
|
# Root → GitHub Pages (developer docs)
|
|
- type: CNAME
|
|
name: '@'
|
|
content: blackboxprogramming.github.io
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Developer hub and documentation
|
|
|
|
# WWW redirect
|
|
- type: CNAME
|
|
name: www
|
|
content: blackroad.network
|
|
ttl: 1
|
|
proxied: true
|
|
comment: WWW subdomain redirects to apex
|
|
|
|
# API subdomain (for developer API access)
|
|
- type: CNAME
|
|
name: api
|
|
content: blackroad-os-production.up.railway.app
|
|
ttl: 1
|
|
proxied: true
|
|
comment: API access for developers
|
|
|
|
# Sandbox subdomain → Railway staging
|
|
- type: CNAME
|
|
name: sandbox
|
|
content: blackroad-os-staging.up.railway.app
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Staging/sandbox environment for testing
|
|
|
|
- domain: blackroad.me
|
|
zone_id: REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE
|
|
primary: false
|
|
phase: 1
|
|
records:
|
|
# Root → Identity portal (via main OS)
|
|
- type: CNAME
|
|
name: '@'
|
|
content: os.blackroad.systems
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Personal identity portal
|
|
|
|
# WWW redirect
|
|
- type: CNAME
|
|
name: www
|
|
content: blackroad.me
|
|
ttl: 1
|
|
proxied: true
|
|
comment: WWW subdomain redirects to apex
|
|
|
|
# ID subdomain (explicit identity)
|
|
- type: CNAME
|
|
name: id
|
|
content: os.blackroad.systems
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Explicit identity subdomain
|
|
|
|
# ============================================================================
|
|
# PHASE 2 DOMAINS (Launch Later)
|
|
# ============================================================================
|
|
|
|
- domain: lucidia.earth
|
|
zone_id: REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE
|
|
primary: false
|
|
phase: 2
|
|
records:
|
|
# Root → GitHub Pages (narrative site)
|
|
- type: CNAME
|
|
name: '@'
|
|
content: blackboxprogramming.github.io
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Narrative experiences and interactive storytelling
|
|
|
|
# WWW redirect
|
|
- type: CNAME
|
|
name: www
|
|
content: lucidia.earth
|
|
ttl: 1
|
|
proxied: true
|
|
comment: WWW subdomain redirects to apex
|
|
|
|
# Studio subdomain (Phase 3 - creative tools)
|
|
- type: CNAME
|
|
name: studio
|
|
content: lucidia-studio.vercel.app
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Lucidia Studio creative production platform
|
|
|
|
- domain: aliceqi.com
|
|
zone_id: REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE
|
|
primary: false
|
|
phase: 2
|
|
records:
|
|
# Root → GitHub Pages (research showcase)
|
|
- type: CNAME
|
|
name: '@'
|
|
content: blackboxprogramming.github.io
|
|
ttl: 1
|
|
proxied: true
|
|
comment: ALICE QI research showcase
|
|
|
|
# WWW redirect
|
|
- type: CNAME
|
|
name: www
|
|
content: aliceqi.com
|
|
ttl: 1
|
|
proxied: true
|
|
comment: WWW subdomain redirects to apex
|
|
|
|
# Research subdomain
|
|
- type: CNAME
|
|
name: research
|
|
content: aliceqi.com
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Research portal
|
|
|
|
# Docs subdomain
|
|
- type: CNAME
|
|
name: docs
|
|
content: aliceqi.com
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Technical documentation
|
|
|
|
- domain: blackroadqi.com
|
|
zone_id: REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE
|
|
primary: false
|
|
phase: 2
|
|
records:
|
|
# Root → Dedicated QI app on Railway
|
|
- type: CNAME
|
|
name: '@'
|
|
content: blackroadqi-app.up.railway.app
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Financial/quantitative intelligence product
|
|
|
|
# WWW redirect
|
|
- type: CNAME
|
|
name: www
|
|
content: blackroadqi.com
|
|
ttl: 1
|
|
proxied: true
|
|
comment: WWW subdomain redirects to apex
|
|
|
|
# API subdomain
|
|
- type: CNAME
|
|
name: api
|
|
content: blackroadqi-api.up.railway.app
|
|
ttl: 1
|
|
proxied: true
|
|
comment: QI API endpoint
|
|
|
|
- domain: roadwallet.com
|
|
zone_id: REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE
|
|
primary: false
|
|
phase: 2
|
|
records:
|
|
# Root → Alias to main OS wallet interface
|
|
- type: CNAME
|
|
name: '@'
|
|
content: os.blackroad.systems
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Wallet interface via main OS
|
|
|
|
# WWW redirect
|
|
- type: CNAME
|
|
name: www
|
|
content: roadwallet.com
|
|
ttl: 1
|
|
proxied: true
|
|
comment: WWW subdomain redirects to apex
|
|
|
|
- domain: aliceos.io
|
|
zone_id: REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE
|
|
primary: false
|
|
phase: 2
|
|
records:
|
|
# Root → Legacy alias to main OS
|
|
- type: CNAME
|
|
name: '@'
|
|
content: os.blackroad.systems
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Legacy domain alias
|
|
|
|
# WWW redirect
|
|
- type: CNAME
|
|
name: www
|
|
content: aliceos.io
|
|
ttl: 1
|
|
proxied: true
|
|
comment: WWW subdomain redirects to apex
|
|
|
|
- domain: blackroadquantum.com
|
|
zone_id: REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE
|
|
primary: false
|
|
phase: 2
|
|
records:
|
|
# Root → GitHub Pages (research hub)
|
|
- type: CNAME
|
|
name: '@'
|
|
content: blackboxprogramming.github.io
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Quantum research hub
|
|
|
|
# WWW redirect
|
|
- type: CNAME
|
|
name: www
|
|
content: blackroadquantum.com
|
|
ttl: 1
|
|
proxied: true
|
|
comment: WWW subdomain redirects to apex
|
|
|
|
# Lab subdomain → Dedicated Quantum Lab app
|
|
- type: CNAME
|
|
name: lab
|
|
content: quantum-lab.up.railway.app
|
|
ttl: 1
|
|
proxied: true
|
|
comment: Quantum Lab application
|
|
|
|
# ============================================================================
|
|
# NOTES
|
|
# ============================================================================
|
|
#
|
|
# CNAME Flattening:
|
|
# Cloudflare allows CNAME records at the root (@) level via CNAME flattening.
|
|
# This is not standard DNS but works with Cloudflare proxy enabled.
|
|
#
|
|
# Railway Targets:
|
|
# Replace 'blackroad-os-production.up.railway.app' with your actual Railway
|
|
# app URL from Railway dashboard → Service → Settings → Domains.
|
|
#
|
|
# Zone IDs:
|
|
# Get zone IDs from Cloudflare dashboard → Domain → Overview (right sidebar).
|
|
# Replace all 'REPLACE_WITH_ZONE_ID_FROM_CLOUDFLARE' with actual zone IDs.
|
|
#
|
|
# GitHub Pages CNAME:
|
|
# For GitHub Pages domains, you must also create a CNAME file in your
|
|
# GitHub Pages repo root containing the custom domain:
|
|
# echo "blackroad.network" > CNAME
|
|
#
|
|
# Email Configuration:
|
|
# The MX/SPF records are examples for Google Workspace. Update or remove
|
|
# if using a different email provider.
|
|
#
|
|
# SSL/TLS:
|
|
# Set Cloudflare SSL/TLS mode to "Full (strict)" for all domains.
|
|
# Railway automatically provides SSL certificates.
|
|
#
|
|
# Proxied vs DNS-only:
|
|
# - proxied: true → Traffic goes through Cloudflare (CDN, DDoS protection)
|
|
# - proxied: false → Direct DNS resolution (required for MX, some TXT records)
|
|
#
|
|
# Automation:
|
|
# Use cloudflare_dns_sync.py to apply these records automatically via API.
|