Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.
Find a file
Ryan Malloy b78cfb0b45 coredns: fix silently-broken healthcheck (distroless image has no wget)
The original healthcheck `wget -qO- http://127.0.0.1:8080/health` has
been failing since day one because the CoreDNS image is distroless —
no shell, no HTTP client. The container has been running in
"(unhealthy)" status the whole time without anyone noticing because
nothing depends_on it.

Replace with `/coredns -version`, which is the thinnest honest check
the image can support. For deeper liveness/readiness, scrape
:8081/health from outside the container.
2026-05-16 14:01:22 -06:00
caddy coredns: production Let's Encrypt cert via Caddy sidecar (DNS-01 + Vultr) 2026-05-14 01:34:57 -06:00
scripts coredns: DoT (:853) + DoH (:443) listeners with self-signed cert 2026-05-14 01:12:25 -06:00
zones coredns: docker compose stack with Vultr zone import 2026-05-12 01:51:09 -06:00
.env coredns: production port defaults (5353 plain DNS, 8081 health) 2026-05-16 13:59:33 -06:00
.gitignore coredns: production Let's Encrypt cert via Caddy sidecar (DNS-01 + Vultr) 2026-05-14 01:34:57 -06:00
Corefile coredns: DoT (:853) + DoH (:443) listeners with self-signed cert 2026-05-14 01:12:25 -06:00
docker-compose.yml coredns: fix silently-broken healthcheck (distroless image has no wget) 2026-05-16 14:01:22 -06:00
Makefile coredns: production Let's Encrypt cert via Caddy sidecar (DNS-01 + Vultr) 2026-05-14 01:34:57 -06:00