Hostnames & credentials

Structure

Everything in JustASRV belongs to an organization (a customer). An organization has sites (physical locations); each site has one or more hostnames; each hostname has one or more credentials. A hostname can only exist inside a site, and DNS records exist only for hostnames that have reported an address.

Acme Corporation
├── Main Office   → acme-main.ddns.justasrv.com
├── Warehouse     → acme-warehouse.ddns.justasrv.com
└── Store 1       → acme-store1.ddns.justasrv.com

Naming

Names are one label: lowercase letters, digits and hyphens, up to 63 characters, not starting or ending with a hyphen. The convention is customer-site. A handful of names are reserved (www, portal, api, mail…).

Host status

Status	Meaning
online	An authenticated update arrived within the stale threshold (default 30 minutes).
stale	No update for longer than the stale threshold. The record still resolves to the last address.
offline	No update for longer than the offline threshold (default 24 hours). The record still resolves.
new	Created but never updated. No DNS record exists yet.
disabled	An administrator disabled the host or suspended the customer. Updates are refused; the record keeps its last address.

JustASRV never deletes a record because a site went quiet. A stale or offline record stays in DNS until an administrator deletes the hostname.

Credentials

Tokens are 256-bit random values beginning with jas_. JustASRV stores only a keyed hash; nobody, including SoMo staff, can display a token after it is issued.
A token can update only its own hostname. Presenting it for any other hostname is refused and logged as a security event.
A hostname can have up to five active credentials, e.g. a primary firewall and a backup updater.
Rotate issues a replacement. By default the old token keeps working for 24 hours so you can update the device without an outage; tick "immediate" to cut it off at once.
Revoke stops a token immediately.

Who can do what

Role	Can
Customer viewer	See its organization's sites, hostnames, addresses, status and history.
Customer admin	Everything a viewer can, plus issue, rotate and revoke credentials and invite colleagues to the same organization.
Platform admin (SoMo)	Create and manage organizations, sites and hostnames; all of the above for every customer. Two-factor authentication is mandatory.