From 4a74d1b57e9a12ab8231d05839f396649bccdc0e Mon Sep 17 00:00:00 2001
From: Alaeddin <15094821+BSalaeddin@users.noreply.github.com>
Date: Sun, 12 Jul 2026 02:55:27 +0100
Subject: [PATCH] Add DoDomain templates: custom-subdomain-cname and
 domain-verification (signed, syncPubKeyDomain _dckeys.dodomain.io)

---
 dodomain.io.custom-subdomain-cname.json | 22 ++++++++++++++++++++++
 dodomain.io.domain-verification.json    | 24 ++++++++++++++++++++++++
 2 files changed, 46 insertions(+)
 create mode 100644 dodomain.io.custom-subdomain-cname.json
 create mode 100644 dodomain.io.domain-verification.json

diff --git a/dodomain.io.custom-subdomain-cname.json b/dodomain.io.custom-subdomain-cname.json
new file mode 100644
index 00000000..df268666
--- /dev/null
+++ b/dodomain.io.custom-subdomain-cname.json
@@ -0,0 +1,22 @@
+{
+  "providerId": "dodomain.io",
+  "providerName": "DoDomain",
+  "serviceId": "custom-subdomain-cname",
+  "serviceName": "Custom domain (CNAME)",
+  "version": 1,
+  "description": "Points one subdomain at a SaaS product via a single CNAME. Used by DoDomain (domain-connect-as-a-service) on behalf of its integrator applications; the CNAME target is the only variable.",
+  "variableDescription": "target = the CNAME destination host provided by the integrator application (e.g. cname.integrator-app.com).",
+  "syncBlock": false,
+  "hostRequired": true,
+  "syncPubKeyDomain": "_dckeys.dodomain.io",
+  "syncRedirectDomain": "app.dodomain.io",
+  "records": [
+    {
+      "type": "CNAME",
+      "groupId": "connect",
+      "host": "@",
+      "pointsTo": "%target%",
+      "ttl": 3600
+    }
+  ]
+}
diff --git a/dodomain.io.domain-verification.json b/dodomain.io.domain-verification.json
new file mode 100644
index 00000000..d3993e93
--- /dev/null
+++ b/dodomain.io.domain-verification.json
@@ -0,0 +1,24 @@
+{
+  "providerId": "dodomain.io",
+  "providerName": "DoDomain",
+  "serviceId": "domain-verification",
+  "serviceName": "Domain ownership verification (TXT)",
+  "version": 1,
+  "description": "Proves domain ownership to a SaaS product with a single constrained TXT record at a fixed host. The value is always prefixed dodomain-verify=; only the token is variable.",
+  "variableDescription": "token = the opaque verification token minted by DoDomain for this connect session.",
+  "syncBlock": false,
+  "hostRequired": false,
+  "syncPubKeyDomain": "_dckeys.dodomain.io",
+  "syncRedirectDomain": "app.dodomain.io",
+  "records": [
+    {
+      "type": "TXT",
+      "groupId": "verify",
+      "host": "_dodomain-challenge",
+      "data": "dodomain-verify=%token%",
+      "ttl": 3600,
+      "txtConflictMatchingMode": "Prefix",
+      "txtConflictMatchingPrefix": "dodomain-verify="
+    }
+  ]
+}