Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.
Ryan Malloy
083e29bd3e
Caddy needs this only for DNS-01 cert renewal via Vultr's API, which happens within the final 30 days of the cert's 90-day lifetime -- roughly once a quarter. Requiring it to be exported on every `docker compose up` was friction for routine ops (CoreDNS recreations during unrelated config changes). Empty default keeps the stack startable without the key in scope. When renewal is imminent, set the var properly OR (preferred long-term) migrate Caddy to caddy-dns/rfc2136 pointing at our own plugin and retire the Vultr dependency entirely. |
||
|---|---|---|
| caddy | ||
| coredns | ||
| scripts | ||
| secondary | ||
| zones | ||
| .env | ||
| .env.local.example | ||
| .gitignore | ||
| CLAUDE.md | ||
| Corefile | ||
| docker-compose.yml | ||
| Makefile | ||