I recently started migrating my DNS to a DNSSEC-enabled provider.

This involves copy-pasting DNSSEC properties from one web interface into another.

Pretty much everything but this step has been automated in my website creation process: Picking a git template for my site, creating the git repository remotely on my self-hosted Forgejo, setting up the webserver and the DNS using external-dns. Only the domain creation and initial pointing of NS and DNSSEC records is something I sit and do.

I'm not willing to switch to Cloudflare for this feature.

But it reminds me there's more to automate.