This example is an opt-in live test for writable Dynu provider functionality. It creates real Dynu DNS records and is designed for disposable, test-owned hostnames only.

What this creates

Using a single suffix (test_suffix), this example creates five DNS record scenarios under dynu_root_domain:

A record with IPv4 content, location, and minimum TTL=90 (codex-a-<suffix>.<root_domain>)
AAAA record with IPv6 content and location (codex-aaaa-<suffix>.<root_domain>)
CNAME record created disabled (enabled = false) (codex-cname-<suffix>.<root_domain>)
Dynamic A record with omitted content (codex-dynamic-a-<suffix>.<root_domain>)
Dynamic AAAA record with omitted content (codex-dynamic-aaaa-<suffix>.<root_domain>)

Warning

Do not use a suffix that overlaps important existing hostnames. This example is intended only for disposable test records that you can safely destroy.

Prerequisites

Local provider binary + Terraform dev_overrides for dynu/dynu
DYNU_API_KEY exported, or dynu_api_key set in terraform.tfvars
A Dynu-managed root domain you control

Configure

cp terraform.tfvars.example terraform.tfvars

Edit terraform.tfvars and set at least:

dynu_root_domain
test_suffix (use a unique value per run)

Optional overrides include test_ipv4, test_ipv6, test_cname_target, test_ttl, and test_location.

test_ttl must be 0 (provider/API default) or >= 90.
test_location applies only to A/AAAA records.

Run

terraform init
terraform validate
terraform plan
terraform apply
terraform destroy

Notes

terraform apply should create all five record scenarios (including a disabled CNAME example).
terraform destroy should remove all five records created by this state.
If you need to target a single scenario, resources are explicitly named:
- dynu_dns_record.a_ipv4
- dynu_dns_record.aaaa_ipv6
- dynu_dns_record.cname
- dynu_dns_record.dynamic_a
- dynu_dns_record.dynamic_aaaa

Verification commands:

dig A codex-dynamic-a-<suffix>.<root_domain>
dig AAAA codex-dynamic-aaaa-<suffix>.<root_domain>
dig CNAME codex-cname-<suffix>.<root_domain>

dig <hostname> defaults to an A lookup, which can be misleading for AAAA-only checks.