DNS_Tools/Dynamic_DNS/Dynamic_DNS_Cloudflare

🔁 Dynamic DNS Updater for Cloudflare with Mullvad IP

This script updates A records in Cloudflare with your current public IP as reported by Mullvad's IP check service. It supports:

• Multiple domains/zones via .env files
• Secure API access using Cloudflare API Tokens
• Smart updates: only changes DNS if your IP has changed
• Daily logging to ./logs/

---

🚀 Features

• ✅ Fetches current public IP from Mullvad API (https://ipv4.am.i.mullvad.net/json)
• ✅ Uses .env files to manage multiple Cloudflare DNS records
• ✅ Supports API Tokens (safer than global keys)
• ✅ Skips unnecessary updates if IP hasn't changed
• ✅ Logs every run to logs/update_YYYY-MM-DD.log

---

📁 Project Structure

.
├── update_cloudflare_ip.sh # Main script
├── zones/ # Folder for per-domain config files
│ ├── example_com.env
│ └── another_domain.env
└── logs/ # Auto-created daily log files
  └── update_2025-10-05.log

---

⚙️ Configuration

1. Create a zones/ folder (already included in repo).
2. Add one .env file per domain/zone, named descriptively. Example:

zones/subdomain.domain.com.env

ZONE_ID="your_cloudflare_zone_id"
DNS_RECORD_ID="your_dns_record_id"
CLOUDFLARE_API_TOKEN="your_cloudflare_api_token"
DNS_NAME="subdomain.domain.com"

---

✅ Use Cloudflare API Tokens with permission:

Zone → DNS → Edit for the required zone.

🧪 Usage

Make the script executable:

chmod +x update_cloudflare_ip.sh

Run it manually:

./update_cloudflare_ip.sh

Check logs:

cat logs/update_$(date +%F).log

---

🕒 Automation (Cron Example)

To run the script every 10 minutes, edit your crontab:

crontab -e

Add this line:

*/10 * * * * /path/to/update_cloudflare_ip.sh >> /dev/null 2>&1

Or, if you want to keep logs automatically:

*/10 * * * * /path/to/update_cloudflare_ip.sh >> /path/to/logs/cron.log 2>&1

---

✅ Requirements

• bash (scripted for Linux/macOS)
• curl
• jq (lightweight and flexible command-line JSON processor): https://github.com/jqlang/jq

Install jq if missing:

# Debian/Ubuntu
sudo apt install jq

# macOS (Homebrew)
brew install jq

---

🔐 Security Tip

Never share your .env files or commit them to public repositories. They contain sensitive credentials.

Use .gitignore to ignore your secrets:

.gitignore

zones/*.env
logs/

---

🙋 FAQ

Q: What happens if the IP hasn't changed? A: The script detects it and skips the update.

Q: What if one domain fails? A: The script continues to process the remaining .env files.

Q: Can I use IPv6? A: Not currently. This script uses Mullvad's IPv4 API. IPv6 support can be added if needed.