rsp2k/coredns
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Retire prepare-zones.sh pipeline; zones/ is now the served form

Browse source 
Big migration: the source/prepared split is gone. Each zones/*.zone is
now an RFC-compliant zone file that CoreDNS reads directly. Editing a
record is just edit + bump SOA + commit. CoreDNS auto-reloads within
30s; HE pulls on its own 300s SOA-refresh cycle.

Why: groundwork for the coredns-rfc2136 plugin to edit zones in place
without juggling a source/prepared transformation step. Also reduces
the mental model from "edit source, run prep, push" to just "edit".

Changes:
- zones/*.zone: 84 files migrated from Vultr-export form to RFC-compliant
  form (SOA injected, Vultr NS replaced with HE NS, CNAME/MX/NS rdata
  dot-terminated, apex lines get explicit @ prefix). Diff is mechanical
  and byte-count is unchanged (~340K) -- pure formatting promotion.
- docker-compose.yml: bind ./zones:/zones:ro (was ./zones-prepared)
- Makefile: dropped 'prep' target. 'reload' is now a no-op explainer.
  'tls-up' no longer depends on prep. 'clean' no longer wipes prepared.
- scripts/prepare-zones.sh moved to scripts/archive/ (kept for reference).
- .gitignore: updated comment for zones-prepared/ (now legacy).

NOT in this commit (follow-ups):
- CLAUDE.md updates documenting the new workflow.
- scripts/bump-serials.sh helper for manual-edit SOA bumping.
- coredns-rfc2136 plugin refactor (Phase 2b in the plan).
This commit is contained in:
Ryan Malloy 2026-05-21 11:14:42 -06:00
parent a9256f8ba4
commit 6d72d65642
88 changed files with 2125 additions and 795 deletions
Download patch file Download diff file Expand all files Collapse all files

50
zones/malloys.us.zone
View file

@ -1,22 +1,38 @@
; Zone file for malloys.us
; Generated by mcp-vultr
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00
; Source: zones/malloys.us.zone
$ORIGIN malloys.us.
$TTL 3600
@ 3600 IN SOA ns1.he.net. admin.malloys.us. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
300 IN NS ns1.vultr.com
300 IN NS ns2.vultr.com
300 IN A 74.91.22.234
dev.mary 300 IN CNAME rpm-bullet.mer.idahomuellers.net
* 300 IN CNAME malloys.us
*.dev.mary 300 IN CNAME dev.mary.malloys.us
vault 300 IN CNAME idahomuellers.fortiddns.com
300 IN MX 10 smtp.google.com
@ 3600 IN NS ns1.he.net.
@ 3600 IN NS ns2.he.net.
@ 3600 IN NS ns3.he.net.
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 74.91.22.234
dev.mary 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
* 300 IN CNAME malloys.us.
*.dev.mary 300 IN CNAME dev.mary.malloys.us.
vault 300 IN CNAME idahomuellers.fortiddns.com.
@ 300 IN MX 10 smtp.google.com.
dkim._domainkey 300 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioX3DstYBuThEEyFs/o7m4HqsaImxMJRC7o12FvX90btr7c3RXkvRzY9sawhW3O0XmhfaJfZ/Gho0ng2RwKLEdYQcnoSJaYwV+3ERvdDBwlDgBNgUs9ODmP10HELpsgRg+sNoBClZNXXuT+pkuQhRpvVz9KQWRSsHvhh5ZUCTmx4vdC9WskvfqWxgC39qScEBLylqoCYjkzIk+ByYc8X9rSUzKZ2HaHMLTlzei1k16QiLgwPHa8QRPDWsH8joIg8XW3SiLDRrwfub+lZRe5d7V+13HO76k9LXMNzG4kSAwxvDMWnfD2iki3x7tQ/CFfdcsLUDfbuRy7d3JKwMZDsbQIDAQAB"
_acme-challenge.cp 300 IN TXT "I8y77h78LeuG7H8CpyELFfgHjfWBcd0VRkPAYboV5Mg"
_acme-challenge.cp-sandbox 300 IN TXT "LUNk008FKra7ifgL61DV681kmo4wThRJb6zG4t1mDww"
_acme-challenge.cp 300 IN TXT "d3iE6aJJRzKE3iFajLg_67oYeskj_XLDNuxKt6BuG3c"
300 IN TXT "v=spf1 include:_spf.google.com ~all"
300 IN TXT "v=DMARC1; p=none; rua=mailto:dmarc@malloys.us"
@ 300 IN TXT "v=spf1 include:_spf.google.com ~all"
@ 300 IN TXT "v=DMARC1; p=none; rua=mailto:dmarc@malloys.us"
_acme-challenge 300 IN TXT "dFdOw5R4dkuNvN0SokI5v5cQbIihwCyiHu_gIxzbAo0"
_acme-challenge 300 IN TXT "2ErkGT83BzfrsCKFhutetQMIsnzIwcvTKJ8kkcfcJ8k"
_acme-challenge 300 IN TXT "UEsEmtEazgpBNfB_qbCNqG1r9rKWUvzyoCQHpTvYPQA"
@ -38,9 +54,7 @@ _acme-challenge 300 IN TXT "hPz_OIZGc2qyHrNMGkPCXDf4ML4bv67P_ojmb-ed6gM"
_acme-challenge 300 IN TXT "mzrirf7ykU_V_6mh38Q664h_yg3AEVA88tQRE7YGOUc"
_acme-challenge 300 IN TXT "v4oJppz3N-D9IEBw0faQ54pg7WsLmDNua7bVgQWVmpw"
_acme-challenge 300 IN TXT "OlN30ETZq9etulzl9lOMTDvWQ4Frpq2NlyGOx5kpB_I"
300 IN TXT "openai-domain-verification=dv-pa82Ps1fOTq50Ad2crkhWWTv"
; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
; (parent name has _acme-challenge children, so wildcard would skip it)
cp 300 IN CNAME malloys.us
cp-sandbox 300 IN CNAME malloys.us
mary 300 IN CNAME malloys.us
@ 300 IN TXT "openai-domain-verification=dv-pa82Ps1fOTq50Ad2crkhWWTv"
cp 300 IN CNAME malloys.us.
cp-sandbox 300 IN CNAME malloys.us.
mary 300 IN CNAME malloys.us.