Issues

• bug: technitium_zone dynamic_update_network_acl host prefix (/32) normalized by server → "inconsistent result after apply"

  bugtriage
  darkhonor/terraform-provider-technitium#180 · Filter by author max-pfeiffer opened on Oct 25, 2026

• NSS: require authenticated inbound zone transfers and dynamic update policies (#169, #172)

  enhancement
  darkhonor/terraform-provider-technitium#179 · Filter by author darkhonor opened on Oct 20, 2026

• ci: replace untagged gosec pin with the first Go 1.27.2-compatible release

  dependenciesgithub_actions
  darkhonor/terraform-provider-technitium#178 · Filter by author darkhonor opened on Oct 20, 2026 · v1.3.1
  1

• bug: technitium_tsig_key with uppercase letters in key_name never converges

  bugtriage
  darkhonor/terraform-provider-technitium#174 · Filter by author max-pfeiffer opened on Oct 16, 2026

• bug: technitium_tsig_key loses keys when several are created or destroyed in parallel

  bugtriage
  darkhonor/terraform-provider-technitium#173 · Filter by author max-pfeiffer opened on Oct 16, 2026

• enhancement: primary_name_server_addresses (and zone_transfer_protocol) on technitium_zone for Secondary/Stub zones

  darkhonor/terraform-provider-technitium#168 · Filter by author tmilnthorp opened on Oct 12, 2026

• enhancement: Add support for DNAME record type

  enhancementtriage
  darkhonor/terraform-provider-technitium#165 · Filter by author zumoshi opened on Oct 10, 2026

• server_settings: manage cache prefetch settings (enable_cache_prefetch, eligibility, trigger)

  enhancement
  darkhonor/terraform-provider-technitium#162 · Filter by author darkhonor opened on Oct 3, 2026 · v1.3.1

• Audit Create late-failure paths that leave server objects outside state

  bug
  darkhonor/terraform-provider-technitium#160 · Filter by author darkhonor opened on Oct 3, 2026 · v1.3.1

• client: align DHCP reads with the GET-for-reads rule after #150 merges

  enhancement
  darkhonor/terraform-provider-technitium#157 · Filter by author darkhonor opened on Oct 3, 2026 · v1.3.1

• provider: TLS 1.3 mismatch diagnostic calls the DNS-REQ-028 result a warning

  bug
  darkhonor/terraform-provider-technitium#156 · Filter by author darkhonor opened on Oct 3, 2026 · v1.3.1

• technitium_cluster_secondary: node_url connection is hard-wired to TLS 1.3; join_timeout_seconds falls back to 30 s after import

  bug
  darkhonor/terraform-provider-technitium#155 · Filter by author darkhonor opened on Oct 3, 2026 · v1.3.1

• stig: nss = true does not enforce the NSS transport requirement under low categorization; env-set tls_min_version is never evaluated

  bug
  darkhonor/terraform-provider-technitium#154 · Filter by author darkhonor opened on Oct 3, 2026 · v1.3.1

• chore(stig): validate requirements against the October 2026 DNS STIG releases

  enhancement
  darkhonor/terraform-provider-technitium#148 · Filter by author darkhonor opened on Oct 1, 2026 · v1.3.1

• enhancement: warn at plan time when technitium_record create will overwrite unmanaged records

  enhancementtriage
  darkhonor/terraform-provider-technitium#136 · Filter by author darkhonor opened on Sep 24, 2026
  1

• SC-13: BoringCrypto is FIPS 140-2 — decide whether to move to the Go 1.24+ native module (140-3), and verify the claim against CMVP before documenting it

  design-decisiondocumentation
  darkhonor/terraform-provider-technitium#130 · Filter by author darkhonor opened on Sep 13, 2026

• ci: the FIPS Build gate asserts a build, not a property — GOEXPERIMENT=boringcrypto exits 0 with BoringCrypto inactive

  darkhonor/terraform-provider-technitium#129 · Filter by author darkhonor opened on Sep 13, 2026 · v1.3.1

• STIG engine: legacy_token_auth is invisible to compliance validation — credential-in-URL mode passes strict and NSS with zero diagnostics

  darkhonor/terraform-provider-technitium#125 · Filter by author darkhonor opened on Aug 21, 2026

• client: no CheckRedirect policy — cross-host redirects silently drop Bearer auth, and legacy-mode tokens can propagate to redirect targets

  darkhonor/terraform-provider-technitium#124 · Filter by author darkhonor opened on Aug 21, 2026 · v1.3.1

• client: consolidate token injection behind a single helper (or RoundTripper) so auth and redaction cannot be forgotten at new call sites

  darkhonor/terraform-provider-technitium#122 · Filter by author darkhonor opened on Aug 21, 2026 · v1.3.1

• docs: make the homelab / non-hardened configuration a documented first-class path

  documentationenhancementgood first issuehelp wanted
  darkhonor/terraform-provider-technitium#120 · Filter by author darkhonor opened on Aug 19, 2026

• STIG engine: no validator covers zone dynamic_update / dynamic_update_network_acl (unrestricted RFC 2136 updates pass at every posture)

  design-decisionenhancement
  darkhonor/terraform-provider-technitium#106 · Filter by author darkhonor opened on Aug 19, 2026

• technitium_cluster_secondary: first apply after adoption pushes configured node_ip_addresses to the live node without validating against the server

  bug
  darkhonor/terraform-provider-technitium#105 · Filter by author darkhonor opened on Aug 19, 2026 · v1.3.1

• technitium_cluster: Read overwrites cluster_domain and id from an unguarded clusterDomain response field

  bug
  darkhonor/terraform-provider-technitium#104 · Filter by author darkhonor opened on Aug 19, 2026 · v1.3.1

• RSA-signed zones: state read model cannot represent 'no curve', causing perpetual inconsistent-result on RSA zones

  bug
  darkhonor/terraform-provider-technitium#101 · Filter by author darkhonor opened on Aug 18, 2026 · v1.3.1