Openprovider DNS

API base: https://api.openprovider.eu/v1beta. Nameservers: ns1.openprovider.nl, ns2.openprovider.be, ns3.openprovider.eu.

Rules

• Never print the login or the bearer token. Fetch the token inline, never write it to a file.
• Back up the zone before every change and read it back after every change.
• Make one record change per API call.

Auth

Read spatie-ops first. Its helper reads the private 1Password mapping, logs in with the API user and retains the resulting token in memory. The token is valid for about 48 hours, but the helper does not persist it between commands.

OPS="$HOME/.dotfiles/bin/spatie-ops"

Read a zone (and back it up)