Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.

Ryan Malloy 1039838ff5 zones: retire 7 obsolete domains during docker-1 migration ... cubeseptic.com, flonhoney.com, hydrushydroponics.com, idahogreendreams.com, qube-construction.com, qube-septic.com, qubeseptic.com — all were hosted on 108.61.229.209 (docker-1, old) and are being decommissioned, not migrated to the replacement host.		2026-05-20 11:38:52 -06:00
caddy	coredns: production Let's Encrypt cert via Caddy sidecar (DNS-01 + Vultr)	2026-05-14 01:34:57 -06:00
scripts	scripts: add check-he.sh — parallel query across HE anycast NS for divergence detection	2026-05-20 00:14:20 -06:00
zones	zones: retire 7 obsolete domains during docker-1 migration	2026-05-20 11:38:52 -06:00
.env	coredns: rename endpoint dns.l.supported.systems -> dns.supported.systems	2026-05-16 15:24:27 -06:00
.gitignore	coredns: production Let's Encrypt cert via Caddy sidecar (DNS-01 + Vultr)	2026-05-14 01:34:57 -06:00
CLAUDE.md	CLAUDE.md: project knowledge — architecture, NOTIFY, SSH deploy, HE quirks	2026-05-20 11:32:25 -06:00
Corefile	coredns: script-based NOTIFY to ns1.he.net on every prep	2026-05-18 16:57:54 -06:00
docker-compose.yml	coredns: fix silently-broken healthcheck (distroless image has no wget)	2026-05-16 14:01:22 -06:00
Makefile	coredns: script-based NOTIFY to ns1.he.net on every prep	2026-05-18 16:57:54 -06:00