# Digitalocean

> DigitalOcean infrastructure — Droplets, managed databases, Spaces, load balancers, firewalls, DNS management

- Skill: `aibot88/digitalocean` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add aibot88/digitalocean`
- Raw SKILL.md: https://api.skillmd.com/api/skills/aibot88/digitalocean/raw
- Safety review: pending (external: skill-scanner PASS, skillspector CAUTION)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: aibot88 (https://skillmd.com/u/aibot88)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/aibot88/digitalocean

---


# DigitalOcean Skill

Full DigitalOcean infrastructure management — from Droplet provisioning to managed databases, Spaces, and DNS.

**RULE: Show plan (resources to be created, estimated cost) before provisioning. Wait for GO.**

> **🚧 Status: Stub — implementation pending**
>
> This reference skill has the structure but the snippet content is still being filled in
> (you'll see `<!-- TODO -->` placeholders below). It activates and tells Claude the topic
> exists, but won't yield deep snippets yet.
>
> **Want to help?** Pick any TODO, write the snippet, open a PR. See [CONTRIBUTING.md](../../CONTRIBUTING.md).
> Each contribution moves the skill closer to "Ready" status.

---

## Capabilities

### Droplet Provisioning
<!-- TODO: doctl droplet create, cloud-init user-data, SSH key injection -->
<!-- TODO: Droplet sizing guide (s-1vcpu-1gb through c-32 compute) -->
<!-- TODO: Private networking, reserved IPs, backups, monitoring -->

### Managed Databases
<!-- TODO: PostgreSQL, MySQL, Redis, MongoDB, Kafka clusters -->
<!-- TODO: Connection pooling (PgBouncer), standby nodes, read replicas -->
<!-- TODO: Firewall rules, trusted sources, connection string retrieval -->
<!-- TODO: Automated backups, point-in-time restore -->

### Spaces (S3-Compatible)
<!-- TODO: Bucket creation, CDN endpoint, CORS config -->
<!-- TODO: Access keys, public/private objects, lifecycle rules -->
<!-- TODO: AWS CLI / s3cmd with Spaces endpoint -->
<!-- TODO: Static site hosting via Spaces -->

### Load Balancers
<!-- TODO: HTTP/HTTPS load balancer, health checks -->
<!-- TODO: SSL termination at LB, sticky sessions -->
<!-- TODO: Forwarding rules, backend Droplet targeting -->

### Firewalls
<!-- TODO: Cloud firewall rules (inbound/outbound) -->
<!-- TODO: Apply to Droplet tags (group-based), not just individual droplets -->
<!-- TODO: Common rulesets: web server, database, internal-only -->

### DNS Management
<!-- TODO: Domain import, A/AAAA/CNAME/MX/TXT records -->
<!-- TODO: TTL management, delegation from registrar to DO nameservers -->
<!-- TODO: Wildcard records, CAA records for SSL -->

---

## doctl Quick Reference

```bash
# Auth
doctl auth init

# Droplets
doctl compute droplet list
doctl compute droplet create [name] \
  --size s-2vcpu-4gb \
  --image ubuntu-24-04-x64 \
  --region blr1 \
  --ssh-keys [key-fingerprint] \
  --user-data-file cloud-init.yml

# Databases
doctl databases list
doctl databases connection [db-id] --user doadmin

# Spaces
doctl compute cdn list
# Use AWS CLI with DO endpoint:
aws s3 ls s3://[bucket] \
  --endpoint=https://[region].digitaloceanspaces.com

# DNS
doctl compute domain list
doctl compute domain records list [domain]
doctl compute domain records create [domain] \
  --record-type A --record-name @ --record-data [ip] --record-ttl 300
```

### Terraform for DigitalOcean
```hcl
terraform {
  required_providers {
    digitalocean = {
      source  = "digitalocean/digitalocean"
      version = "~> 2.0"
    }
  }
}

provider "digitalocean" {
  token = var.do_token
}

resource "digitalocean_droplet" "web" {
  name     = "[app]-web"
  size     = "s-2vcpu-4gb"
  image    = "ubuntu-24-04-x64"
  region   = "blr1"
  ssh_keys = [data.digitalocean_ssh_key.default.id]
  tags     = ["web", "[app]"]
}

resource "digitalocean_firewall" "web" {
  name    = "[app]-firewall"
  droplet_ids = [digitalocean_droplet.web.id]

  inbound_rule {
    protocol = "tcp"; port_range = "22"
    source_addresses = ["0.0.0.0/0"]
  }
  inbound_rule {
    protocol = "tcp"; port_range = "80"
    source_addresses = ["0.0.0.0/0"]
  }
  inbound_rule {
    protocol = "tcp"; port_range = "443"
    source_addresses = ["0.0.0.0/0"]
  }
  outbound_rule {
    protocol = "tcp"; port_range = "all"
    destination_addresses = ["0.0.0.0/0"]
  }
}
```

<!-- TODO: Add full interactive workflows for each capability above -->