Hosted DNS service: reserve, records, lease and release

.env.example

@@ -0,0 +1,24 @@
+# Postgres (PlanetScale in production). Include sslmode=require for hosted databases.
+DATABASE_URL=postgres://user:password@localhost:5432/hosted_dns
+# Route 53 hosted zone for the apex, and the apex itself.
+HOSTED_ZONE_ID=Z0000000000000000000
+APEX_DOMAIN=example.com
+# Standard AWS credentials for an IAM user limited to that zone.
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_REGION=us-east-1
+# Optional.
+PORT=8080
+MINTS_PER_HOUR=30
+# Set when behind a proxy that overwrites this header with the client IP.
+CLIENT_IP_HEADER=x-real-ip
+RUST_LOG=info
+# ACME account for wildcard certificates (Google Trust Services, bound with EAB).
+# Production directory: https://dv.acme-v02.api.pki.goog/directory
+# Staging directory:    https://dv.acme-v02.test-api.pki.goog/directory
+ACME_DIRECTORY_URL=https://dv.acme-v02.test-api.pki.goog/directory
+ACME_EAB_KID=
+# base64url, as `gcloud publicca external-account-keys create` prints it.
+ACME_EAB_HMAC_KEY=
+# Optional comma-separated bearer keys that let POST /domains skip the per-IP limit.
+MINT_KEYS=replace-with-a-long-random-key

.github/workflows/ci.yml

@@ -0,0 +1,20 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy, rustfmt
+      - uses: Swatinem/rust-cache@v2
+      - run: cargo fmt --check
+      - run: cargo clippy --all-targets -- -D warnings
+      # Tests start Postgres through Docker (testcontainers); ubuntu-latest has it.
+      - run: cargo test