Create RRset
desec_create_rrsetDestructive
WRITE: create ONE new RRset (a set of DNS records of one type at one name) in a domain. It goes live in DNS immediately and a wrong record can take a site or mail offline. Fails if an RRset with this subname and type already exists (use desec_replace_rrset for that) or if a CNAME would conflict with other records. Never touches the apex NS or DNSSEC records and cannot delete anything. Subject to deSEC's write limits (15/min, 300/day per domain). POST /domains/{name}/rrsets/.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ttl | Yes | TTL in seconds, at most 86400. Not below the domain's minimum_ttl (usually 3600): deSEC rejects lower values. | |
| type | Yes | Record type (uppercase). DNSSEC types and SOA are managed by deSEC and cannot be written. | |
| domain | Yes | Domain name in this deSEC account, e.g. example.com (see desec_list_domains). | |
| records | Yes | Record contents in zone-file format, at least one (an empty list would delete the RRset and is refused). Names need a trailing dot ("10 mx.example.com."), TXT needs quotes ("\"v=spf1 -all\""). | |
| subname | No | Subname relative to the domain: "www", "_443._tcp.www", "*" for a wildcard. Empty or "@" = the zone apex. Never the full name. |