migrate GoDaddy auth → Bearer PAT (TK-10 key rotation); sso-key fallback retained

d391781d0dabc42236da2675243a4881a5842646 · 2026-07-27 20:05:44 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Files touched

M finish_dns.sh

Diff

commit d391781d0dabc42236da2675243a4881a5842646
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jul 27 20:05:44 2026 -0700

    migrate GoDaddy auth → Bearer PAT (TK-10 key rotation); sso-key fallback retained
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 finish_dns.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/finish_dns.sh b/finish_dns.sh
index eb315b7..46ae75b 100755
--- a/finish_dns.sh
+++ b/finish_dns.sh
@@ -15,6 +15,9 @@ set -euo pipefail
 CF="$CLOUDFLARE_API_TOKEN"
 GD_KEY="$GODADDY_API_KEY"
 GD_SECRET="$GODADDY_API_SECRET"
+GD_PAT="${GODADDY_PAT:-}"
+# Prefer a Bearer Personal Access Token (TK-10 key rotation); fall back to legacy sso-key.
+if [ -n "$GD_PAT" ]; then GD_AUTH="Bearer $GD_PAT"; else GD_AUTH="sso-key $GD_KEY:$GD_SECRET"; fi
 DOMAIN="philipperomano.com"
 ORIGIN_IP="45.61.58.125"
 
@@ -42,7 +45,7 @@ echo ""
 echo "=== Pointing GoDaddy NS at Cloudflare ==="
 NS_PAIR=$(echo "$ZONE" | jq -c '.result[0].name_servers')
 curl -sS -X PUT "https://api.godaddy.com/v1/domains/$DOMAIN" \
-  -H "Authorization: sso-key $GD_KEY:$GD_SECRET" \
+  -H "Authorization: $GD_AUTH" \
   -H "Content-Type: application/json" \
   --data "{\"nameServers\":$NS_PAIR}" \
   -w "GoDaddy NS update: HTTP %{http_code}\n"

← 9d4d252 Coastal Mist: point at canonical Shopify CDN image (live fix · back to Philipperomano · (newest)