feat: enhance canary mode to support domain-aware upsert behavior for site blocks

This commit is contained in:
S
2026-03-02 22:23:52 -06:00
parent b52d3187d9
commit 9224b91374
2 changed files with 186 additions and 37 deletions

View File

@@ -112,6 +112,7 @@ Phase 7.5 is done only when all are true:
3. Script does not change Cloudflare DNS records automatically.
- DNS updates are intentional/manual to keep blast radius controlled.
4. Do not set public Cloudflare proxied records to private `192.168.x.x` addresses.
5. Canary updates are enclosed between markers:
- `# BEGIN_PHASE7_5_CANARY`
- `# END_PHASE7_5_CANARY`
5. Canary upsert behavior is domain-aware:
- if site block for the canary domain does not exist, it is added
- if site block exists, it is replaced in-place
- previous block content is printed in logs before replacement