Skip to content
Notis

Retire DNSSEC after delegation changes

Close the loop on DNSSEC cleanup after a verified delegation change.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Delete DNSSEC

Tool to delete DNSSEC records for a zone. Use after disabling DNSSEC at the registrar to remove DNSSEC configuration.

Why this helps

Old DNSSEC records can remain after a migration step and confuse later troubleshooting.

  • Complete migration cleanup
  • Keep the sequence documented
  • Reduce stale security configuration

Setup

Build it in a few focused steps.

  • 1Connect Notis to 0CodeKit and Cloudflare api key once.
  • 2Create an automation named Post-delegation DNSSEC cleanup.
  • 3Describe that Notis should delete DNSSEC records only after the instruction confirms registrar DNSSEC is disabled.
  • 4Pick a recurring cron trigger and choose where run reports should go.
  • 5Test with a maintenance example and inspect the report.

Questions about this workflow

Can this run before the registrar change?

No. The instruction should require confirmation that registrar DNSSEC is already disabled.

Will it affect other zone settings?

No. It targets DNSSEC records for the confirmed zone.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link 0CodeKit to Cloudflare api key. A trigger fires from one place; an action lands in another.

0CodeKit triggers

Cloudflare api key actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create DNS Record

Tool to create a new DNS record in a Cloudflare zone. Use when you need to add a record (A, CNAME, TXT, MX, etc.) to a specified zone.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Create Zone Lockdown Rule

Tool to create a Zone Lockdown rule. Use when you need to restrict access to specific URL patterns to defined IPs/CIDR ranges. Use after confirming zone_id.

ActionInstant

Create Rule in Ruleset

Tool to add a rule to an existing ruleset. Use when you need to append or insert a new rule in a Cloudflare ruleset.

ActionInstant

Create Ruleset

Tool to create an account- or zone-scoped ruleset. Use after defining your ruleset details and selecting the correct scope.

ActionInstant

Delete DNS Record

Tool to delete a DNS record. Use when you need to remove a specific DNS record from a zone after confirming both zone and record IDs.

ActionInstant

Delete DNSSEC

Tool to delete DNSSEC records for a zone. Use after disabling DNSSEC at the registrar to remove DNSSEC configuration.

ActionInstant

Delete Rule from Ruleset

Tool to delete a specific rule from a ruleset. Use when you need to remove an outdated or incorrect rule from an account or zone ruleset after confirming IDs.

ActionInstant

Delete Ruleset

Tool to delete all versions of a ruleset. Use when you need to remove a ruleset from an account or zone after confirming no references exist.

ActionInstant

Connect any two apps with Notis in the middle.

0CodeKit and Cloudflare api key, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare api key.