Loreji DNS

Authoritative DNS server + DDNS, written in C for the Loreji webhosting platform. See docs/architecture.md for the full design context and rationale.

Quick start

make build
export LOREJI_DNS_PEPPER=$(head -c32 /dev/urandom | base64)  # persist this in real deployments!
export LOREJI_DNS_DB_PATH=/tmp/loreji-dns.db
export LOREJI_DNS_PORT=15353       # unprivileged port for local testing
export LOREJI_DNS_API_PORT=18053

./build/loreji-dns admin-key create --name local-test   # save the printed token
./build/loreji-dns serve &

curl -H "Authorization: Bearer <token>" -X POST http://127.0.0.1:18053/api/v1/zones \
  -d '{"name":"example.test","owner_ref":"me","primary_ns":"ns1.example.test","admin_email":"admin.example.test"}'

dig @127.0.0.1 -p 15353 example.test SOA

Development

Command	Does
make build	Compile build/loreji-dns.
make test	Run all unit test suites.
make test-asan	Same, under ASan+UBSan.
make fuzz-smoke	60s libFuzzer run against the wire parser.
make integration	Build + run the real binary through dig/curl end to end.
make fmt / make lint	clang-format / clang-tidy, if installed.
make docker-build	Build the deployment image.
make docker-run	Build + run the image locally (unprivileged ports, throwaway pepper) for a quick smoke test.

Full docs: docs/api.md, docs/ddns.md, docs/panel.md, docs/backups.md, docs/data-model.md, docs/security.md.

License

MIT -- see LICENSE. Vendored third-party sources under third_party/ keep their own original licenses (all permissive -- public domain or MIT); see third_party/README.md for the exact list.