# Namecheap Architecture Reference
**Cold Bore Ballistics LLC — Confidential**
Last updated: 2026-06-07
Status: Active

> This document is the authoritative record of what exists in the CBB Namecheap account. It is the single source of truth for account details, domain inventory, and credential locations. Never duplicate this information in other documents — cross-reference here instead.

---

## Account

| Field | Value |
|---|---|
| **Username** | `coldboreballistics` |
| **Email** | `admin@coldboreballisticsllc.com` |
| **Account password** | CBB 1Password vault (pending migration from personal 1Password) |
| **API key** | `kv-cbb-shared-prod` → `namecheap-api-key` |
| **API user** | `coldboreballistics` |
| **Calling IP whitelist** | Must be updated when operator IP changes — Namecheap → Profile → Tools → API Access |

---

## Domain Inventory

| Domain | Purpose | DNS managed via | Auto-renew |
|---|---|---|---|
| `coldboreballisticsllc.com` | CBB corporate identity, M365 tenant, primary email | Azure DNS (`services/dns`) | Yes |
| `scope-dope.com` | ScopeDOPE product — marketing site, SendGrid sender | Azure DNS (`services/dns`) | Yes |
| `ballisticcomputer.com` | Trademark placeholder — parked, redirects to `www.scope-dope.com` | Azure DNS (`services/dns`) | Yes |
| `ballisticscomputer.com` | Trademark placeholder — parked, redirects to `www.scope-dope.com` | Azure DNS (`services/dns`) | Yes |
| `coldboreballistics.com` | Not CBB-owned — do not use | N/A | N/A |

> **WARNING:** `coldboreballistics.com` (without "llc") is NOT a CBB-owned domain. The correct CBB domain is `coldboreballisticsllc.com`. Never use `coldboreballistics.com` in any configuration.

---

## Credentials

| Credential | Location | Rotation policy |
|---|---|---|
| Account password | CBB 1Password vault (pending migration) | Rotate annually or on suspected compromise |
| API key | `kv-cbb-shared-prod` → `namecheap-api-key` | Rotate annually or on suspected compromise — regenerate in Namecheap → Profile → Tools → API Access, then update Key Vault |

---

## DNS

All DNS zones and records are managed in Azure DNS via Terraform (`cbb-infra/services/dns`). Namecheap's role is **registrar only** — it holds the domain registrations and delegates each domain to Azure DNS nameservers. No DNS records are managed in Namecheap.

The Namecheap API (`cbb-utils/namecheap/namecheap_dns.sh`) is used only for:
- NS cutover: `namecheap.domains.dns.setCustom` to point a domain at its Azure DNS nameservers
- Account operations: IP whitelist management, API key rotation, domain renewal, domain listing

To retrieve current nameservers for any domain (as assigned by Azure DNS after `terraform apply`):
```bash
cd cbb-infra/services/dns
terraform output
```

---

## Architecture Decisions

| Decision | Choice | Rationale |
|---|---|---|
| DNS provider | Azure DNS | All CBB infrastructure is in Azure; colocating DNS eliminates cross-vendor dependencies and enables alias records pointing directly at Azure resources (SWA, etc.) |
| Registrar | Namecheap | Low cost, no lock-in, standard ICANN transfer procedures; registrar-only role is simple and stable |
| DNS management | Terraform (`cbb-infra/services/dns`) | All records are version-controlled, reproducible, and auditable — no manual portal edits |
| API auth | API key (not account password) | Scoped credential; account password stays out of automation |
| Credential storage | Key Vault for API key; 1Password for account password | API key used by automation; account password is break-glass only |

---

## Document Control

| Field | Value |
|---|---|
| **Document owner** | `jschwefel@coldboreballisticsllc.com` |
| **Classification** | Confidential (03_-_Confidential/) |
| **Location** | `OneDrive/CBB_Corporate/03_-_Confidential/Infrastructure/Namecheap/Namecheap_Architecture_Reference.md` |
| **Cross-references** | `Namecheap_Operating_Runbook.md`; `Namecheap_Rebuild_Guide.md`; `Azure_Architecture_Reference.md` |
| **Created** | 2026-06-07 |
| **Last updated** | 2026-06-07 |
| **Next full review due** | 2027-06-07 |

---

## Revision Control Block

| Rev | Date | Changed By | Reviewed By | Approved By | Summary |
|-----|------|------------|-------------|-------------|---------|
| 0.9 | 2026-06-07 | jschwefel | — | — | Initial release |
