Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.
Find a file
Ryan Malloy 47c8ff42e9 coredns/Dockerfile: bump Go to 1.25, CoreDNS to v1.14.3, GOPROXY=direct
Production-readiness pass on the Dockerfile after the test stack
proved out the build. Three changes:
- FROM golang:1.22-alpine → golang:1.25-alpine (plugin's go.mod
  resolved to go 1.25, base image needed to keep up).
- COREDNS_REF v1.12.2 → v1.14.3 (matches what our plugin compiles
  against; older CoreDNS pulled an outdated quic-go API).
- GOPROXY=direct + GOSUMDB=off so go-get talks straight to the
  Gitea instance hosting our plugin (proxy.golang.org won't proxy
  private repos).
- Dropped the broken GOFLAGS="-ldflags=-w -s" passthrough that
  miekg parses incorrectly. Resulting binary is ~10MB larger than
  a stripped build but functionally identical.
2026-05-21 12:17:40 -06:00
caddy coredns: production Let's Encrypt cert via Caddy sidecar (DNS-01 + Vultr) 2026-05-14 01:34:57 -06:00
coredns coredns/Dockerfile: bump Go to 1.25, CoreDNS to v1.14.3, GOPROXY=direct 2026-05-21 12:17:40 -06:00
scripts Retire prepare-zones.sh pipeline; zones/ is now the served form 2026-05-21 11:14:42 -06:00
secondary secondary: scaffold public CoreDNS secondary on ns.supported.systems 2026-05-20 18:40:11 -06:00
zones supported.systems: ssh → 149.28.207.111; vpn + web-bmh-servicedesk.bmh → CNAME ssh 2026-05-21 11:51:01 -06:00
.env deploy: enable rfc2136 plugin for all 84 production zones 2026-05-21 12:17:20 -06:00
.env.local.example Phase 0 scaffolding: RFC 2136 plugin groundwork (inactive) 2026-05-20 18:20:43 -06:00
.gitignore Retire prepare-zones.sh pipeline; zones/ is now the served form 2026-05-21 11:14:42 -06:00
CLAUDE.md secondary: scaffold public CoreDNS secondary on ns.supported.systems 2026-05-20 18:40:11 -06:00
Corefile deploy: enable rfc2136 plugin for all 84 production zones 2026-05-21 12:17:20 -06:00
docker-compose.yml deploy: enable rfc2136 plugin for all 84 production zones 2026-05-21 12:17:20 -06:00
Makefile Retire prepare-zones.sh pipeline; zones/ is now the served form 2026-05-21 11:14:42 -06:00