Cloudflare/secondary Dns

@swamp/cloudflare/secondary-dnsv2026.10.23.1· AGPL-3.0-or-later· 3d agoBEHAVIORS

01README

Cloudflare secondary-dns infrastructure models

02Release Notes

Updated: acls
Updated: peers
Updated: tsigs

03Behaviors3

@swamp/cloudflare/secondary-dns/aclsv2026.10.23.1acls.ts

Global Arguments

Argument	Type	Required	Description
account_id	string	yes	Cloudflare account ID
id?	string	no
ip_range?	string	no	Allowed IPv4/IPv6 address range of primary or secondary nameservers. This will be applied for the entire account. The IP range is used to allow additional NOTIFY IPs for secondary zones and IPs Cloudflare allows AXFR/IXFR requests from for primary zones. CIDRs are limited to a maximum of /24 for IPv4 and /64 for IPv6 respectively.
name?	string	no	The name of the acl.
apiToken?	string	no	Cloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?	string	no	Cloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?	string	no	Cloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.

fn create()

Create a Acls

fn get(id: string)

Get a Acls

Argument	Type	Required	Description
id	string	yes	The ID of the Acls

fn lookup(allowMissing?: boolean)

Look up an existing Acls by matching global argument values and import it into state

Argument	Type	Required	Description
allowMissing?	boolean	no	Succeed and record found: false in lookupResult when nothing matches, instead of failing

fn adopt(id: string)

Import an existing Acls by ID into state for management

Argument	Type	Required	Description
id	string	yes	The ID of the Acls to import

fn update(identifier?: string)

Update Acls attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific Acls by id (e.g. one discovered by list)

fn delete(id: string)

Delete the Acls

Argument	Type	Required	Description
id	string	yes	The ID of the Acls

fn sync(identifier?: string)

Sync Acls state from Cloudflare

Argument	Type	Required	Description
identifier?	string	no	Target a specific Acls by id (e.g. one discovered by list)

Resources

state(infinite)— Acls resource state

lookupResult(infinite)— Outcome of the most recent lookup

@swamp/cloudflare/secondary-dns/peersv2026.10.23.1peers.ts

Global Arguments

Argument	Type	Required	Description
account_id	string	yes	Cloudflare account ID
id?	string	no
ip?	string	no	IPv4/IPv6 address of primary or secondary nameserver, depending on what zone this peer is linked to. For primary zones this IP defines the IP of the secondary nameserver Cloudflare will NOTIFY upon zone changes. For secondary zones this IP defines the IP of the primary nameserver Cloudflare will send AXFR/IXFR requests to.
ixfr_enable?	boolean	no	Enable IXFR transfer protocol, default is AXFR. Only applicable to secondary zones.
name?	string	no	The name of the peer.
port?	number	no	DNS port of primary or secondary nameserver, depending on what zone this peer is linked to.
tsig_id?	string	no	TSIG authentication will be used for zone transfer if configured.
apiToken?	string	no	Cloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?	string	no	Cloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?	string	no	Cloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.

fn create()

Create a Peers

fn get(id: string)

Get a Peers

Argument	Type	Required	Description
id	string	yes	The ID of the Peers

fn lookup(allowMissing?: boolean)

Look up an existing Peers by matching global argument values and import it into state

Argument	Type	Required	Description
allowMissing?	boolean	no	Succeed and record found: false in lookupResult when nothing matches, instead of failing

fn adopt(id: string)

Import an existing Peers by ID into state for management

Argument	Type	Required	Description
id	string	yes	The ID of the Peers to import

fn update(identifier?: string)

Update Peers attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific Peers by id (e.g. one discovered by list)

fn delete(id: string)

Delete the Peers

Argument	Type	Required	Description
id	string	yes	The ID of the Peers

fn sync(identifier?: string)

Sync Peers state from Cloudflare

Argument	Type	Required	Description
identifier?	string	no	Target a specific Peers by id (e.g. one discovered by list)

Resources

state(infinite)— Peers resource state

lookupResult(infinite)— Outcome of the most recent lookup

@swamp/cloudflare/secondary-dns/tsigsv2026.10.23.1tsigs.ts

Global Arguments

Argument	Type	Required	Description
account_id	string	yes	Cloudflare account ID
algo?	string	no	TSIG algorithm.
id?	string	no
name?	string	no	TSIG key name.
secret?	string	no	TSIG secret.
apiToken?	string	no	Cloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?	string	no	Cloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?	string	no	Cloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.

fn create()

Create a Tsigs

fn get(id: string)

Get a Tsigs

Argument	Type	Required	Description
id	string	yes	The ID of the Tsigs

fn lookup(allowMissing?: boolean)

Look up an existing Tsigs by matching global argument values and import it into state

Argument	Type	Required	Description
allowMissing?	boolean	no	Succeed and record found: false in lookupResult when nothing matches, instead of failing

fn adopt(id: string)

Import an existing Tsigs by ID into state for management

Argument	Type	Required	Description
id	string	yes	The ID of the Tsigs to import

fn update(identifier?: string)

Update Tsigs attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific Tsigs by id (e.g. one discovered by list)

fn delete(id: string)

Delete the Tsigs

Argument	Type	Required	Description
id	string	yes	The ID of the Tsigs

fn sync(identifier?: string)

Sync Tsigs state from Cloudflare

Argument	Type	Required	Description
identifier?	string	no	Target a specific Tsigs by id (e.g. one discovered by list)

Resources

state(infinite)— Tsigs resource state

lookupResult(infinite)— Outcome of the most recent lookup

04Previous Versions10

2026.10.20.1AGPL-3.0-or-laterOct 20, 2026

Updated: acls
Updated: peers
Updated: tsigs

Modified 3 behaviors

2026.10.16.1AGPL-3.0-or-later(was none)Oct 16, 2026

2026.10.13.1Oct 13, 2026

Updated: acls
Updated: peers
Updated: tsigs

2026.09.29.2Sep 29, 2026

Updated: acls
Updated: peers
Updated: tsigs

2026.09.29.1Sep 28, 2026

Updated: acls
Updated: peers
Updated: tsigs

2026.07.21.1Jul 21, 2026

Updated: acls
Updated: peers
Updated: tsigs

2026.07.18.2Jul 18, 2026

Modified 3 behaviors

2026.06.08.2Jun 8, 2026

Updated: acls
Updated: peers
Updated: tsigs

2026.05.29.1May 29, 2026

Updated: acls
Updated: peers
Updated: tsigs

2026.05.22.1May 22, 2026

Added: acls
Added: peers
Added: tsigs

05Stats

100 / 100

Downloads

Archive size

15.2 KB

Verified by Swamp

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit2/2earned
Docs keep secrets in a vault1/1earned
Has description1/1earned
Platform support declared (or universal)2/2earned
License2/2earned
Verified public repository2/2earned

Repository

https://github.com/swamp-club/swamp-extensions

06Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64 windows · x86_64

07Labels

#cloudflare #secondary-dns #cloud #infrastructure