{
  "name": "dns-sovereign",
  "version": "1.0.0",
  "description": "PowerDNS authoritative + optional Cloudflare mirror, with plan/apply/rollback.",
  "defaults": {
    "MODE": "docker",
    "PDNS_PORT": "53",
    "PDNS_WEB_PORT": "8081",
    "PDNS_DATA_DIR": "~/pdns",
    "DRY_RUN": "1",
    "REQUIRE_CONFIRM": "1",
    "CONFIRM_PHRASE": "I UNDERSTAND THIS CAN CHANGE DNS"
  },
  "phases": {
    "preflight": [
      "00_preflight.sh"
    ],
    "pdns": {
      "plan": [
        "10_pdns_plan.sh"
      ],
      "apply": [
        "11_pdns_apply.sh"
      ],
      "rollback": [
        "rollback/undo_pdns.sh"
      ]
    },
    "zone": {
      "plan": [
        "20_zone_plan.sh"
      ],
      "apply": [
        "21_zone_apply.sh"
      ],
      "rollback": [
        "rollback/undo_zone.sh"
      ]
    },
    "cloudflare": {
      "plan": [
        "30_cf_plan.sh"
      ],
      "apply": [
        "31_cf_apply.sh"
      ],
      "rollback": [
        "rollback/undo_cloudflare.sh"
      ]
    },
    "verify": [
      "90_verify.sh"
    ],
    "report": [
      "99_report.sh"
    ]
  },
  "eu_compliance": {
    "data_residency": "EU",
    "jurisdiction": "Ireland",
    "gdpr_applicable": true
  }
}