rsp2k/coredns
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
coredns/zones/sidejob.pro.zone

19 lines
707 B
Dns
Raw Normal View History

coredns: docker compose stack with Vultr zone import - Auto plugin loads zones-prepared/*.zone (regex zone-name extraction) - scripts/prepare-zones.sh transforms raw Vultr exports: * synthesizes SOA (omitted by Vultr; CoreDNS requires it) * prepends @ to leading-TAB apex lines to disambiguate owner inheritance * dot-terminates NS/MX/CNAME rdata so $ORIGIN doesn't double-suffix - DNS_PORT defaults to 1053 (5353=avahi, 53=libvirt dnsmasq on this host) - Forwards non-authoritative queries to 1.1.1.1/1.0.0.1/9.9.9.9 - Makefile targets: prep, up, down, reload, test, logs - 91 zones loaded
2026-05-12 01:51:09 -06:00
; Zone file for sidejob.pro
; Generated by mcp-vultr
$ORIGIN sidejob.pro.
$TTL 3600
300 IN NS ns1.vultr.com
300 IN NS ns2.vultr.com
zones: repoint 24 records 108.61.229.209 → 108.61.23.129 (docker-1 migration) Bulk swap of the old docker host IP to the new one across 13 zones. docker-1.supported.systems intentionally preserved at the old IP — the hostname stays tied to the old box until decommissioned.
2026-05-20 11:43:44 -06:00
300 IN A 108.61.23.129
zones: replace all A 100.79.95.190 with CNAME rpm-bullet.mer.idahomuellers.net 27 records across 15 zones converted from direct A records pointing at the Tailscale endpoint (100.79.95.190) to CNAMEs pointing at the Tailscale-named alias. Now if the underlying Tailscale node's IP changes, only the rpm-bullet record needs updating instead of chasing 27 zones. Affected zones (all *.l labels + a handful of dev / dev.mary names): acrazy.org copper-springs.online demostar.io flonhoney.com homestar.ink kg7q.cc malloys.us ourjob.site qubeseptic.com ryanmalloy.com septic.report sidejob.pro supported.systems warehack.ing zmesh.systems No CNAME collisions: none of the converted names had other records (MX/TXT/SRV/CAA/AAAA) at the same exact name. _acme-challenge.<sub>.l records sit at distinct subdomains and continue to resolve independently (verified: TXT lookups for known _acme-challenge.l.* names still return the original values). Also fixed prepare-zones.sh: added `|| true` after the serial-detection grep so a zero-match (first run of a new day) doesn't trip `set -e` and abort the whole prep.
2026-05-17 03:29:34 -06:00
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
coredns: docker compose stack with Vultr zone import - Auto plugin loads zones-prepared/*.zone (regex zone-name extraction) - scripts/prepare-zones.sh transforms raw Vultr exports: * synthesizes SOA (omitted by Vultr; CoreDNS requires it) * prepends @ to leading-TAB apex lines to disambiguate owner inheritance * dot-terminates NS/MX/CNAME rdata so $ORIGIN doesn't double-suffix - DNS_PORT defaults to 1053 (5353=avahi, 53=libvirt dnsmasq on this host) - Forwards non-authoritative queries to 1.1.1.1/1.0.0.1/9.9.9.9 - Makefile targets: prep, up, down, reload, test, logs - 91 zones loaded
2026-05-12 01:51:09 -06:00
* 300 IN CNAME sidejob.pro
300 IN MX 10 sidejob.pro
_acme-challenge.api 300 IN TXT "a1zkQ7ukvloDCOuB5kCsxC1TWH2rRXKCCI88GJrwV84"
_acme-challenge.api 300 IN TXT "UIKc6hzCSLphH1kQtdGMspvWKcG-k4hXcPOOV6HrydA"
zones: add explicit CNAME-to-apex for RFC 4592 empty-non-terminals Wildcards in DNS only synthesize for names that don't already exist in the zone tree. A `_acme-challenge.<sub>` TXT record makes <sub> an "empty non-terminal" — exists in the tree (as a parent node) but has no records of its own. Per RFC 4592 §2.2.3, wildcards skip these, so RFC-compliant resolvers (HE, BIND) return NODATA for <sub> even when the zone has `* CNAME @`. Fix: for each <sub> that's an empty non-terminal in a zone with a wildcard, add an explicit `<sub> CNAME @` so the resolution outcome matches what the wildcard would have produced. Zero-knowledge — no need to identify the specific service IP per name. 30 records added across 14 zones: acrazy.org (langfuse.dootie) context.bet (studio) copper-springs.online (docs.butler.dev) demostar.io (cw.cw, doom, meet) home-inspector.store (api, dashboard, mailpit) inspect.pics (admin) log.doctor (app, docs) malloys.us (cp, cp-sandbox, mary) nielsen-inspections.com (calendar, cw, files, v2-calendar) qubeseptic.com (api.dispatch, dispatch, leads, mail.dispatch, rentcache.dispatch) ryanmalloy.com (c4ai) sidejob.pro (api) upc.llc (catalog, minio.or, or, s3) CoreDNS (lenient) was returning the wildcard CNAME for these names anyway; HE (strict RFC-compliant) was returning empty. After this change, both behave identically.
2026-05-18 18:34:51 -06:00
_acme-challenge.api 300 IN TXT "GySOUk0DnGhgDKXDgUM-ggQudeENlQIi6jBPtb2O0EE"
; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
; (parent name has _acme-challenge children, so wildcard would skip it)
api 300 IN CNAME sidejob.pro
Reference in a new issue Copy permalink