Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.
Ryan Malloy
9e345fa488
The cache 30 directive in the (common) snippet was clamping authoritative TTLs to 30s max — every record HE pulled showed TTL≈5 because the cache plugin intercepts responses regardless of source (auto plugin authoritative answers AND forward plugin resolver answers). Switching to bare 'cache' uses the plugin's 3600s default, which preserves our source TTLs: most records at 300s, _dmarc/dkim/SRV at 3600s, wildcards at 60s. |
||
|---|---|---|
| caddy | ||
| scripts | ||
| zones | ||
| .env | ||
| .gitignore | ||
| CLAUDE.md | ||
| Corefile | ||
| docker-compose.yml | ||
| Makefile | ||