Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.
Production-readiness pass on the Dockerfile after the test stack proved out the build. Three changes: - FROM golang:1.22-alpine → golang:1.25-alpine (plugin's go.mod resolved to go 1.25, base image needed to keep up). - COREDNS_REF v1.12.2 → v1.14.3 (matches what our plugin compiles against; older CoreDNS pulled an outdated quic-go API). - GOPROXY=direct + GOSUMDB=off so go-get talks straight to the Gitea instance hosting our plugin (proxy.golang.org won't proxy private repos). - Dropped the broken GOFLAGS="-ldflags=-w -s" passthrough that miekg parses incorrectly. Resulting binary is ~10MB larger than a stripped build but functionally identical. |
||
|---|---|---|
| caddy | ||
| coredns | ||
| scripts | ||
| secondary | ||
| zones | ||
| .env | ||
| .env.local.example | ||
| .gitignore | ||
| CLAUDE.md | ||
| Corefile | ||
| docker-compose.yml | ||
| Makefile | ||