Ryan Malloy 48cddc91cf Phase 0 scaffolding: RFC 2136 plugin groundwork (inactive) ... Lays the groundwork for a future CoreDNS rfc2136 plugin that will accept TSIG-authenticated dynamic DNS updates from Caddy (via caddy-dns/rfc2136), enabling self-hosted ACME DNS-01 cert automation without depending on registrar APIs. Nothing in this commit is active at runtime: - Corefile additions are commented out - coredns/Dockerfile references a plugin repo that doesn't exist yet - scripts/acme-add-domain.sh just appends CNAME glue but has nothing to talk to until the plugin is built Architecture and implementation plan: ~/.claude/plans/dood-does-coredns-offer-enumerated-piglet.md Secret management: TSIG key generated and stored in .env.local (gitignored). .env.local.example documents the expected shape.		2026-05-20 18:20:43 -06:00
..
acme-add-domain.sh	Phase 0 scaffolding: RFC 2136 plugin groundwork (inactive)	2026-05-20 18:20:43 -06:00
check-he.sh	scripts: add check-he.sh — parallel query across HE anycast NS for divergence detection	2026-05-20 00:14:20 -06:00
generate-certs.sh	coredns: DoT (:853) + DoH (:443) listeners with self-signed cert	2026-05-14 01:12:25 -06:00
notify-he.py	scripts: chmod +x notify-he.py	2026-05-20 11:39:25 -06:00
prepare-zones.sh	coredns: tighten SOA timers to nudge HE's internal sync	2026-05-18 18:25:16 -06:00