Security

SECURITY RULE
=============

This tool uses a server-side GoDaddy API key/secret.

Never put GoDaddy API secrets in browser JavaScript.

Protect the app with one or more of:

  HTTP Basic Auth
  VPN
  IP allowlist
  no public DNS A record
  SSH-only CLI usage

The app is intentionally read-only, but a domain inventory can still be private
financial and operational information.