CI

.github/CODEOWNERS

@@ -0,0 +1,3 @@
+# @link <https://help.github.com/en/articles/about-code-owners>
+
+* @tarampampam

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,11 @@
+<!--
+
+⚠ To make our job easier, please spend time reviewing your application before submitting it.
+
+🗒 Describe in two words how you plan to use the domain.
+
+-->
+
+### Link to Website
+
+Link: <!-- 🌍 Please provide a link to your website here -->

.github/dependabot.yml

@@ -0,0 +1,10 @@
+# Docs: <https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/customizing-dependency-updates>
+
+version: 2
+
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule: {interval: monthly}
+    reviewers: [tarampampam]
+    assignees: [tarampampam]

.github/renovate.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "github>tarampampam/.github//renovate/default",
+    ":rebaseStalePrs"
+  ]
+}

.github/workflows/deploy.yml

@@ -0,0 +1,29 @@
+name: deploy
+
+on:
+  workflow_dispatch: {}
+  push:
+    branches: [master, main]
+    paths: [domains/**, .github/workflows/deploy.yml]
+
+concurrency:
+  group: ${{ github.ref }}-deploy
+  cancel-in-progress: false
+
+jobs:
+  check:
+    name: Deploy DNS changes
+    runs-on: ubuntu-latest
+    environment: production
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: gacts/install-dnscontrol@v1
+
+      - name: Create credentials file
+        run: echo '{"cloudflare":{"TYPE":"CLOUDFLAREAPI","accountid":"$CF_ID","apitoken":"$CF_TOKEN"}}' > ./creds.json
+
+      - run: dnscontrol push
+        env:
+          CF_ID: ${{ secrets.CF_ACCOUNT_ID }}
+          CF_TOKEN: ${{ secrets.CF_API_TOKEN }}

.github/workflows/pr.yml

@@ -0,0 +1,46 @@
+name: pr
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened, ready_for_review, review_requested] # https://bit.ly/3FEj9D4
+    branches: [master, main]
+
+jobs:
+  check-user-star:
+    name: Check the user's star
+    runs-on: ubuntu-latest
+    steps:
+      - {uses: gacts/is-stargazer@v1, with: {username: '${{ github.event.pull_request.user.login }}'}, id: check-star}
+
+      - if: steps.check-star.outputs.is-stargazer != 'true'
+        uses: actions/github-script@v6
+        with:
+          script: core.setFailed('⭐ Please, star this repository!')
+
+  checklist:
+    name: Message a checklist to the PR
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: thollander/actions-comment-pull-request@v1
+        with:
+          message: |
+            Your PR has been created! Please now wait for a maintainer to approve it.
+
+            > ### Made a mistake in the record?
+            >
+            > Don't worry, you can edit the changes in your repo and they should automatically be added to this PR.
+
+            Please, make sure that your PR passes the following checklist:
+
+            - ⭐ You have starred this repository
+            - 🗒 The file with your subdomain has a `.json` extension, doesn't contain comments (`// ...`), and is well formatted (indent size - 2 spaces)
+            - 👤 There is sufficient information in the `owner` field
+            - 📋 You have clearly described a reason for the domain registration (and what you plan to use it for) in the PR description
+            - 🔗 The website is reachable and a link to it is in the PR description
+            - ✅ All CI checks are passed
+
+            <!--ID:CHECKLIST-->
+          comment_includes: <!--ID:CHECKLIST-->

.github/workflows/tests.yml

@@ -0,0 +1,48 @@
+name: tests
+
+on:
+  workflow_dispatch: {}
+  push:
+    branches: [master, main]
+    tags-ignore: ['**']
+    paths-ignore: ['**.md', 'web/**']
+  pull_request:
+    paths-ignore: ['**.md', 'web/**']
+
+concurrency:
+  group: ${{ github.ref }}-tests
+  cancel-in-progress: true
+
+jobs:
+  gitleaks:
+    name: GitLeaks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with: {fetch-depth: 0}
+
+      - uses: gacts/gitleaks@v1
+
+  check:
+    name: DNSControl check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: gacts/install-dnscontrol@v1
+
+      - run: dnscontrol check
+
+  validate-schemas:
+    name: Validate schemas
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: walbo/validate-json@v1.1.0
+        with:
+          schema-version: draft-07
+          print-valid-files: true
+          fail-on-missing-schema: true
+          strict: false
+          files: ./domains/**/*.json

.github/workflows/website.yml

@@ -0,0 +1,30 @@
+name: website
+
+on:
+  push:
+    branches: [master, main]
+    paths: [web/**, .github/workflows/website.yml]
+
+concurrency:
+  group: ${{ github.ref }}-website
+  cancel-in-progress: true
+
+jobs:
+  update:
+    name: Publish website
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: actions/configure-pages@v2
+
+      - uses: actions/upload-pages-artifact@v1
+        with: {path: web}
+
+      - {uses: actions/deploy-pages@v1, id: deployment}