Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.
Find a file
Ryan Malloy 3dd99fa81a test: sandboxed docker-compose stack for plugin smoke testing
Brings up a parallel CoreDNS instance on ports 11053/19153 with a
single test.example.com zone. Useful for verifying the custom image
builds and the rfc2136 plugin accepts/applies UPDATEs end-to-end
before touching production zones.

Already validated the msgAcceptFunc override fix end-to-end via
nsupdate, with the auto plugin re-serving the new record within 5s.

Note: zones/test.example.com.zone gets rewritten by the plugin
during testing. If perms get hosed (docker writes as root), run
sudo chown -R rpm:rpm test/zones/ to reclaim.
2026-05-21 12:17:49 -06:00
caddy coredns: production Let's Encrypt cert via Caddy sidecar (DNS-01 + Vultr) 2026-05-14 01:34:57 -06:00
coredns coredns/Dockerfile: bump Go to 1.25, CoreDNS to v1.14.3, GOPROXY=direct 2026-05-21 12:17:40 -06:00
scripts Retire prepare-zones.sh pipeline; zones/ is now the served form 2026-05-21 11:14:42 -06:00
secondary secondary: scaffold public CoreDNS secondary on ns.supported.systems 2026-05-20 18:40:11 -06:00
test test: sandboxed docker-compose stack for plugin smoke testing 2026-05-21 12:17:49 -06:00
zones supported.systems: ssh → 149.28.207.111; vpn + web-bmh-servicedesk.bmh → CNAME ssh 2026-05-21 11:51:01 -06:00
.env deploy: enable rfc2136 plugin for all 84 production zones 2026-05-21 12:17:20 -06:00
.env.local.example Phase 0 scaffolding: RFC 2136 plugin groundwork (inactive) 2026-05-20 18:20:43 -06:00
.gitignore Retire prepare-zones.sh pipeline; zones/ is now the served form 2026-05-21 11:14:42 -06:00
CLAUDE.md secondary: scaffold public CoreDNS secondary on ns.supported.systems 2026-05-20 18:40:11 -06:00
Corefile deploy: enable rfc2136 plugin for all 84 production zones 2026-05-21 12:17:20 -06:00
docker-compose.yml deploy: enable rfc2136 plugin for all 84 production zones 2026-05-21 12:17:20 -06:00
Makefile Retire prepare-zones.sh pipeline; zones/ is now the served form 2026-05-21 11:14:42 -06:00