XvX Skill

Hosting Hetzner DNS workflows

A local infrastructure skill for Hetzner DNS: make zones visible, export RRSets and replace individual DNS records with inspectable artifacts.

Hetzner DNS Zone export RRSet

Capabilities

Built for traceable DNS operations.

Zone visibility

Lists the Hetzner DNS zones visible to the configured token.

Zone export

Exports RRSets as JSON and as BIND-style zone files for review and backup.

RRSet changes

Replaces exactly one RRSet at a time and writes before, after and response artifacts.

TXT handling

Handles Hetzner TXT quoting and long DKIM values with controlled chunking.

Quickstart

Read-only first, changes only after target review.

The safe default commands list zones, show zone details or export a zone. DNS write commands should run only after an export and an exact RRSet target review.

        python3 skills/hosting_hetzner/agent.py list-zones
        python3 skills/hosting_hetzner/agent.py zone-detail htki.de
        python3 skills/hosting_hetzner/agent.py export-zone htki.de
        python3 skills/hosting_hetzner/agent.py set-rrset <zone> <name> <type> <value>
      

Runtime

Tokens stay out of documentation.

The skill reads Hetzner credentials from the environment or from a local configuration file. Tokens must not be printed, committed or copied into documentation.

Path: skills/hosting_hetzner/
Configuration: HCLOUD_TOKEN, HETZNER_TOKEN or settings/hetzner.json
Output: Zone list, JSON RRSets, BIND-style zone files and change artifacts
Boundary: No bulk changes; one RRSet per write operation

Safety

Live DNS is a production infrastructure surface.

Before every DNS change, export the zone and verify the exact RRSet target. The skill limits changes to single RRSets and produces artifacts, but it does not replace operational approval.