rsp2k/coredns
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: rsp2k:cc33fcbcc8fb56fa35ff64807efe04aafc8dfe68
Branches Tags
rsp2k:main
..
compare: rsp2k:baaa135ff32f5974971ca818097c6857b4fd34ba
Branches Tags
rsp2k:main

No commits in common. "cc33fcbcc8fb56fa35ff64807efe04aafc8dfe68" and "baaa135ff32f5974971ca818097c6857b4fd34ba" have entirely different histories.
cc33fcbcc8 ... baaa135ff3

98 changed files with 837 additions and 2429 deletions
Show Stats Expand all files Collapse all files

31
.env Normal file
View File

@ -0,0 +1,31 @@
COMPOSE_PROJECT_NAME=coredns
# CoreDNS image pin — use a digest in real deploys
COREDNS_IMAGE=coredns/coredns:1.11.3
# Host ports. systemd-resolved usually binds 53, so default to 5353.
# Override to 53 if you actually want this to be the host's resolver.
DNS_PORT=5353
METRICS_PORT=9153
# 8080 is famously contested (dev servers, alternate HTTP). 8081 less so.
HEALTH_PORT=8081
# DoT (DNS-over-TLS, RFC 7858) — IANA port 853. Host port 8853 to
# stay unprivileged.
DOT_PORT=8853
# DoH (DNS-over-HTTPS, RFC 8484) — typically 443. Host port 8443
# because Caddy already owns 443 on this host.
DOH_PORT=8443
# --- Production cert provisioning (Caddy sidecar + Let's Encrypt) ---
# Hostname the cert is issued for. Must be a name you control and that
# resolves via the public DNS server holding the zone (Vultr's NS).
CADDY_HOSTNAME=dns.supported.systems
# Contact email registered with Let's Encrypt for expiry notifications.
ACME_EMAIL=rpm@malloys.us
# VULTR_API_KEY is intentionally NOT stored here. Caddy reads it from
# the shell environment via docker compose's variable interpolation —
# export it in your shell (or in ~/.zshenv) before `make tls-up`.

50
.env.example
View File

@ -1,50 +0,0 @@
# Template for the operational .env file. Copy to .env and fill in real
# values. .env is gitignored (contains the active TSIG secret + any
# other host-specific overrides). Keeping this template in git lets
# new operators / fresh checkouts know what env vars are expected.
COMPOSE_PROJECT_NAME=coredns
# Custom CoreDNS image tag (CalVer). Built locally via `docker compose
# build coredns` using ./coredns/Dockerfile; pulls plugins from the
# referenced git repos at build time. Bump this when re-rolling.
COREDNS_IMAGE_TAG=2026.05.21.1
# Legacy pin (no longer the active image; kept for emergency rollback
# to upstream CoreDNS if the custom build needs to be reverted).
COREDNS_IMAGE=coredns/coredns:1.11.3
# Host ports. systemd-resolved usually binds 53, so default to 5353.
# Override to 53 if you actually want this to be the host's resolver.
DNS_PORT=5353
METRICS_PORT=9153
# 8080 is famously contested (dev servers, alternate HTTP). 8081 less so.
HEALTH_PORT=8081
# DoT (DNS-over-TLS, RFC 7858) — IANA port 853. Host port 8853 to
# stay unprivileged.
DOT_PORT=8853
# DoH (DNS-over-HTTPS, RFC 8484) — typically 443. Host port 8443
# because Caddy already owns 443 on this host.
DOH_PORT=8443
# --- Production cert provisioning (Caddy sidecar + Let's Encrypt) ---
# Hostname the cert is issued for. Must be a name you control and that
# resolves via the public DNS server holding the zone (Vultr's NS).
CADDY_HOSTNAME=dns.supported.systems
# Contact email registered with Let's Encrypt for expiry notifications.
ACME_EMAIL=rpm@malloys.us
# VULTR_API_KEY is intentionally NOT stored here. Caddy reads it from
# the shell environment via docker compose's variable interpolation —
# export it in your shell (or in ~/.zshenv) before `make tls-up`.
# TSIG shared secret for the rfc2136 plugin (RFC 2136 dynamic updates).
# Same secret is used by all authorised RFC 2136 clients (Caddy via
# caddy-dns/rfc2136, nsupdate, etc.). Rotate by regenerating with
# `openssl rand -base64 32` and updating this value + all clients.
# Lives in `.env` (tracked in our PRIVATE git) for operational
# simplicity; if you want a stricter convention, move to `.env.local`
# (gitignored) and pass `--env-file .env.local` at compose time.
ACME_TSIG_SECRET=GENERATE_VIA_openssl_rand_base64_32

9
.gitignore vendored
View File

@ -1,7 +1,4 @@
# Legacy: zones-prepared/ was the generated form when scripts/prepare-zones.sh # Prepared zones are generated from zones/ by scripts/prepare-zones.sh
# (now in scripts/archive/) processed zones/. We retired that pipeline in
# favour of editing zones/*.zone directly as RFC-compliant served files.
# If anyone runs the archived script, the output stays out of git.
zones-prepared/*.zone zones-prepared/*.zone
# Self-signed certs (re-generated by scripts/generate-certs.sh) # Self-signed certs (re-generated by scripts/generate-certs.sh)
@ -14,7 +11,3 @@ caddy-config/
# Local-only env overrides # Local-only env overrides
.env.local .env.local
# Operational secrets / per-host overrides. Use .env.example as template.
.env
.env.local

13
Corefile
View File

@ -24,19 +24,6 @@
to * to *
} }
# RFC 2136 dynamic DNS updates (TSIG-authenticated). Accepts UPDATE
# opcode messages from authorised clients (e.g. caddy-dns/rfc2136
# for ACME DNS-01) and applies them to the source zone files.
# SOA serial bumped automatically (CalVer); changes auto-committed
# to git. Plugin source: git.supported.systems/rsp2k/coredns-rfc2136
rfc2136 acrazy.org automaton.global automaton.host blender.bet blender.cam blender.partners blender.quest blender.systems cloud-dine.com context.bet coopermalloy.com copper-springs.online cyberinsuranceapp.com demostar.app demostar.click demostar.io demostar.net demo-tube.com dignity.ink dope.team encom.cash encom.ink encom.website encom.wtf enls.us enls.video freemyradicals.com garage.ceo garage.christmas garage.doctor garage.dog garage.engineering garage.makeup garage.rocks garage.supply glennsferry.site home-inspector.app home-inspector.pics home-inspector.site home-inspector.store home-inspector.website homestar.ink inpect.pro inspect.monster inspect.pics inspects.homes inspect.systems jobsite.homes kg7q.cc log.doctor lukascrockett.com malloys.us mcpdash.wtf mcp.website myhood.us nielsen-inspections.com nielsens.world ourjob.site paigemalloy.com paythatway.com powdercoatedcabinents.com powdercoatedcabinet.com powdercotedcabinets.com prezhub.com reviewr.guru rsvp-for.de ryanmalloy.com screencast.systems septic.report sidejob.pro spencernewbolt.com supported.systems supportedsystems.com supportedsystems.net syslog.chat tatemalloy.com tateorrtot.games timber.ink trackfeeds.cloud tuckermalloy.com upc.llc warehack.ing westboise.org zmesh.systems {
zones-dir /zones
tsig-key acme-update-key. hmac-sha256 {$ACME_TSIG_SECRET}
ttl 60
auto-commit true
git-author "coredns-rfc2136" "rfc2136@coredns.supported.systems"
}
forward . 1.1.1.1 1.0.0.1 9.9.9.9 { forward . 1.1.1.1 1.0.0.1 9.9.9.9 {
max_concurrent 1000 max_concurrent 1000
} }

30
Makefile
View File

@ -6,24 +6,15 @@ COMPOSE := docker compose
include .env include .env
export export
.PHONY: help certs up down restart logs logs-caddy ps test test-tls \ .PHONY: help prep certs up down restart logs logs-caddy ps test test-tls \
test-public reload clean tls-up cert-watch caddy-rebuild test-public reload clean tls-up cert-watch caddy-rebuild
help: ## Show this help help: ## Show this help
@awk 'BEGIN {FS = ":.*?## "} /^[a-zA-Z_-]+:.*?## / {printf " \033[36m%-14s\033[0m %s\n", $$1, $$2}' $(MAKEFILE_LIST) @awk 'BEGIN {FS = ":.*?## "} /^[a-zA-Z_-]+:.*?## / {printf " \033[36m%-14s\033[0m %s\n", $$1, $$2}' $(MAKEFILE_LIST)
# --------------------------------------------------------------------------- prep: ## Re-inject SOA + bump serial, then NOTIFY all secondaries (auto-fires AXFR)
# Zone-file edits are now direct: edit zones/*.zone, bump SOA serial, @./scripts/prepare-zones.sh
# commit. CoreDNS's auto plugin reloads within 30s. HE pulls on its @./scripts/notify-secondaries.py --quiet || echo " (NOTIFY had failures; secondaries will still re-poll on SOA refresh)"
# SOA-refresh cycle (300s by zone SOA setting).
#
# For manual edits, scripts/bump-serials.sh helps bump CalVer-style
# serials for zones changed since HEAD. RFC 2136 UPDATEs (via the
# coredns-rfc2136 plugin) bump serials themselves and auto-commit.
#
# The legacy prepare-zones.sh / make prep / notify-he.py pipeline is
# retired — kept in scripts/archive/ for reference. See CLAUDE.md.
# ---------------------------------------------------------------------------
certs: ## Generate self-signed dev cert (only useful if not using Caddy ACME) certs: ## Generate self-signed dev cert (only useful if not using Caddy ACME)
@./scripts/generate-certs.sh @./scripts/generate-certs.sh
@ -35,7 +26,7 @@ caddy-rebuild: ## Rebuild the Caddy image (after editing caddy/Dockerfile)
# Production / Let's Encrypt flow # Production / Let's Encrypt flow
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
tls-up: ## Bring up Caddy → wait for cert → start CoreDNS (one command) tls-up: prep ## Bring up Caddy → wait for cert → start CoreDNS (one command)
@if [ -z "$$VULTR_API_KEY" ]; then \ @if [ -z "$$VULTR_API_KEY" ]; then \
echo "ERROR: VULTR_API_KEY is not exported. Set it in your shell:"; \ echo "ERROR: VULTR_API_KEY is not exported. Set it in your shell:"; \
echo " export VULTR_API_KEY=..."; \ echo " export VULTR_API_KEY=..."; \
@ -70,12 +61,11 @@ logs-caddy: ## Tail Caddy logs
down: ## Stop & remove all containers down: ## Stop & remove all containers
$(COMPOSE) down $(COMPOSE) down
restart: ## Restart CoreDNS (does not re-issue cert) restart: ## Restart CoreDNS (does not re-prep zones / re-issue cert)
$(COMPOSE) restart coredns $(COMPOSE) restart coredns
reload: ## Touch zone files so CoreDNS auto plugin picks them up promptly reload: prep ## Re-prep zones; CoreDNS auto-plugin picks changes up
@echo "CoreDNS auto plugin polls zones/ every 30s — no action needed." @echo "Zones re-prepared. CoreDNS reloads files every 30s (auto plugin)."
@echo "If you just edited a zone, ensure the SOA serial was bumped."
logs: ## Tail CoreDNS logs logs: ## Tail CoreDNS logs
$(COMPOSE) logs -f coredns $(COMPOSE) logs -f coredns
@ -107,8 +97,8 @@ test-public: ## Smoke-test using the public hostname (DoT/DoH ports must be open
@echo "=== DoH on public hostname @ port 443 ===" @echo "=== DoH on public hostname @ port 443 ==="
@dig @$(CADDY_HOSTNAME) +https cloudflare.com A +short @dig @$(CADDY_HOSTNAME) +https cloudflare.com A +short
clean: down ## Remove containers + dev self-signed certs clean: down ## Remove containers + prepared zones + dev self-signed certs
rm -f certs/*.pem rm -rf zones-prepared/*.zone certs/*.pem
clean-caddy: down ## Also wipe Caddy's data dir (forces re-issuance from scratch!) clean-caddy: down ## Also wipe Caddy's data dir (forces re-issuance from scratch!)
@echo "About to delete caddy-data/ — this will force re-issuance from LE." @echo "About to delete caddy-data/ — this will force re-issuance from LE."

30
caddy/Caddyfile
View File

@ -38,33 +38,3 @@
# "Caddy is alive" sanity check inside the compose network. # "Caddy is alive" sanity check inside the compose network.
respond "CoreDNS DoT/DoH endpoint. DoT: port 853. DoH: /dns-query" 200 respond "CoreDNS DoT/DoH endpoint. DoT: port 853. DoH: /dns-query" 200
} }
# ─── Test domain using caddy-dns/rfc2136 → our own CoreDNS plugin ──
#
# Proves the full self-hosted ACME DNS-01 loop end-to-end:
# 1. Caddy attempts to issue a cert for test-rfc2136.supported.systems
# 2. Caddy uses caddy-dns/rfc2136 to UPDATE _acme-challenge.<name>
# TXT record into supported.systems via our CoreDNS plugin
# 3. Plugin verifies TSIG, writes the zone file, bumps SOA
# 4. CoreDNS reloads (auto plugin, ~30s)
# 5. HE pulls the new serial within ~300s
# 6. Let's Encrypt validates from public DNS via HE
# 7. Caddy issues the cert
test-rfc2136.supported.systems {
tls {
dns rfc2136 {
key_name acme-update-key.
key_alg hmac-sha256
key {env.ACME_TSIG_SECRET}
# `coredns` resolves on the docker network to the CoreDNS
# container; port 53 is its in-container listener.
server coredns:53
}
# Use public resolvers (not docker's embedded DNS) for the
# post-update propagation check. Allow HE plenty of time to pull.
resolvers 1.1.1.1 9.9.9.9 1.0.0.1
propagation_delay 60s
propagation_timeout 600s
}
respond "test-rfc2136: cert issued via self-hosted RFC 2136 ACME flow!" 200
}

3
caddy/Dockerfile
View File

@ -8,8 +8,7 @@ FROM caddy:2.10.0-builder AS builder
# a plugin's minimum Go version moves. # a plugin's minimum Go version moves.
ENV GOTOOLCHAIN=auto ENV GOTOOLCHAIN=auto
RUN xcaddy build \ RUN xcaddy build \
--with github.com/caddy-dns/vultr \ --with github.com/caddy-dns/vultr
--with github.com/caddy-dns/rfc2136
FROM caddy:2.10.0 FROM caddy:2.10.0
COPY --from=builder /usr/bin/caddy /usr/bin/caddy COPY --from=builder /usr/bin/caddy /usr/bin/caddy

38
coredns/Dockerfile
View File

@ -12,53 +12,25 @@
# not yet exist. Building this image will fail until Phase 1 ships. # not yet exist. Building this image will fail until Phase 1 ships.
# ─── Stage 1: builder ────────────────────────────────────────────── # ─── Stage 1: builder ──────────────────────────────────────────────
FROM golang:1.25-alpine AS builder FROM golang:1.22-alpine AS builder
# GOTOOLCHAIN=auto lets `go` download a newer toolchain on demand if
# go.mod (ours OR a transitive dep's) specifies a Go version newer
# than the base image. Belt-and-suspenders so an upstream version
# bump doesn't break this Dockerfile.
ENV GOTOOLCHAIN=auto
# Bypass the public Go module proxy. Our plugin lives on a private
# Gitea instance, which proxy.golang.org won't (and shouldn't) cache.
# direct = go talks to the upstream VCS for every module fetch.
ENV GOPROXY=direct
ENV GOSUMDB=off
RUN apk add --no-cache git make RUN apk add --no-cache git make
WORKDIR /build WORKDIR /build
ARG COREDNS_REF=v1.14.3 ARG COREDNS_REF=v1.12.2
RUN git clone --depth 1 --branch ${COREDNS_REF} https://github.com/coredns/coredns.git . RUN git clone --depth 1 --branch ${COREDNS_REF} https://github.com/coredns/coredns.git .
# Inject our plugin into plugin.cfg. Must come BEFORE the `cache` plugin # Inject our plugin into plugin.cfg. Must come BEFORE the `cache` plugin
# so authoritative answers from rfc2136 aren't intercepted by cache. # so authoritative answers from rfc2136 aren't intercepted by cache.
ARG PLUGIN_REPO=git.supported.systems/rsp2k/coredns-rfc2136 ARG PLUGIN_REPO=git.supportedsystems.net/rpm/coredns-rfc2136
ARG PLUGIN_REF=latest ARG PLUGIN_REF=latest
RUN sed -i "/^cache:cache$/i rfc2136:${PLUGIN_REPO}" plugin.cfg && \ RUN sed -i "/^cache:cache$/i rfc2136:${PLUGIN_REPO}" plugin.cfg && \
go get ${PLUGIN_REPO}@${PLUGIN_REF} go get ${PLUGIN_REPO}@${PLUGIN_REF}
# Go's GOFLAGS env splits on whitespace and doesn't honour shell quoting RUN make GOFLAGS="-ldflags=-w -s"
# in a way that survives a Dockerfile RUN, so passing
# `-ldflags="-w -s"` breaks parsing. We let `make` use its defaults;
# the resulting binary is ~10 MB larger than a stripped build but
# works correctly and is what upstream CoreDNS ships.
RUN make
# ─── Stage 2: runtime ────────────────────────────────────────────── # ─── Stage 2: runtime ──────────────────────────────────────────────
# Switched from distroless to alpine specifically so the rfc2136 FROM gcr.io/distroless/static-debian12
# plugin's auto-commit can shell out to `git`. Distroless has no
# package manager and no shell, which would block git execution.
# Image grows ~10 MB; trade-off worth it for the audit trail.
FROM alpine:3.20
RUN apk add --no-cache git ca-certificates && \
# Pre-create the user-id range the container will run as (1000)
# so that volume-mounted files written by this process land owned
# by the host's primary user. Add to the same group so a future
# interactive `docker exec --user 1000` works.
addgroup -g 1000 -S coredns && \
adduser -u 1000 -S coredns -G coredns
COPY --from=builder /build/coredns /coredns COPY --from=builder /build/coredns /coredns

35
docker-compose.yml
View File

@ -11,16 +11,7 @@ services:
environment: environment:
- CADDY_HOSTNAME=${CADDY_HOSTNAME} - CADDY_HOSTNAME=${CADDY_HOSTNAME}
- ACME_EMAIL=${ACME_EMAIL} - ACME_EMAIL=${ACME_EMAIL}
# Used by caddy-dns/rfc2136 for the test-rfc2136 site -- same - VULTR_API_KEY=${VULTR_API_KEY:?VULTR_API_KEY must be exported in your shell}
# secret CoreDNS's rfc2136 plugin verifies on the other side.
- ACME_TSIG_SECRET=${ACME_TSIG_SECRET}
# Optional: only required for Caddy's DNS-01 cert renewal via Vultr's
# API. Cert is valid ~90 days; this env var only matters within the
# final 30d renewal window. Empty default keeps `docker compose up`
# working without the key in scope. Set it when renewal is imminent,
# OR migrate Caddy to caddy-dns/rfc2136 (via our plugin) and retire
# the Vultr dependency entirely.
- VULTR_API_KEY=${VULTR_API_KEY:-}
volumes: volumes:
- ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
- ./caddy-data:/data - ./caddy-data:/data
@ -46,28 +37,10 @@ services:
start_period: 5s start_period: 5s
coredns: coredns:
# Custom build with the rfc2136 plugin baked in. The image tag is image: ${COREDNS_IMAGE}
# CalVer (set in .env COREDNS_IMAGE_TAG) so we can pin specific
# builds; `docker compose build coredns` produces the locally-tagged
# image, then up -d picks it up.
build:
context: .
dockerfile: coredns/Dockerfile
image: coredns-rfc2136:${COREDNS_IMAGE_TAG}
container_name: coredns container_name: coredns
restart: unless-stopped restart: unless-stopped
# Run as host's primary user so files the rfc2136 plugin writes to
# /zones land owned by rpm:rpm on the host. Without this they'd
# be root-owned, making manual edits / git ops painful.
#
# UID/GID come from env (defaulted to dell01's rpm: 1003:1004).
# Override in .env for hosts where rpm has different ids.
user: "${COREDNS_UID:-1003}:${COREDNS_GID:-1004}"
command: ["-conf", "/etc/coredns/Corefile"] command: ["-conf", "/etc/coredns/Corefile"]
# The Corefile uses {$ACME_TSIG_SECRET} expansion to read the
# TSIG secret. Passed in from compose's env (which auto-reads .env).
environment:
- ACME_TSIG_SECRET=${ACME_TSIG_SECRET}
depends_on: depends_on:
caddy: caddy:
condition: service_healthy condition: service_healthy
@ -80,9 +53,7 @@ services:
- "${HEALTH_PORT}:8080/tcp" - "${HEALTH_PORT}:8080/tcp"
volumes: volumes:
- ./Corefile:/etc/coredns/Corefile:ro - ./Corefile:/etc/coredns/Corefile:ro
# Read-write because the rfc2136 plugin writes zone files in-place - ./zones-prepared:/zones:ro
# after each accepted UPDATE message (atomic temp-file + rename).
- ./zones:/zones
# Subpath mount of Caddy's data dir. The healthcheck maintains # Subpath mount of Caddy's data dir. The healthcheck maintains
# cert.pem / key.pem symlinks at the top of this tree, so CoreDNS # cert.pem / key.pem symlinks at the top of this tree, so CoreDNS
# sees stable filenames regardless of hostname. The /accounts dir # sees stable filenames regardless of hostname. The /accounts dir

0
scripts/archive/prepare-zones.sh → scripts/prepare-zones.sh
View File

30
test/Corefile
View File

@ -1,30 +0,0 @@
# Test stack Corefile -- isolated from the production Corefile by virtue
# of running in a separate docker-compose project on different ports.
#
# Plugin chain semantics:
# - auto loads test.example.com.zone from /zones; reload every 5s
# so we see UPDATE-induced changes promptly during smoke tests
# - rfc2136 intercepts UPDATE opcode; passes all queries through to auto
#
# Plugin.cfg order (set in coredns/Dockerfile) puts rfc2136 BEFORE auto AND
# BEFORE cache, so UPDATE messages reach our handler before anything else.
. {
auto {
directory /zones (.*)\.zone {1}
reload 5s
}
rfc2136 test.example.com {
zones-dir /zones
tsig-key acme-update-key. hmac-sha256 {$ACME_TSIG_SECRET}
ttl 60
# Auto-commit OFF in test: there's no git repo at /zones inside
# the container, and we don't want spurious commits during smoke
# tests. End-to-end auto-commit testing happens on dell01.
auto-commit false
}
log
errors
}

73
test/README.md
View File

@ -1,73 +0,0 @@
# Test stack — sandboxed CoreDNS + rfc2136 plugin
Brings up a parallel CoreDNS instance for smoke-testing the
`git.supported.systems/rsp2k/coredns-rfc2136` plugin without
touching the production stack on dell01.
## What this proves
- The custom CoreDNS image builds and links the plugin successfully.
- The plugin parses its Corefile directive at startup.
- Queries (SOA, A, TXT, etc.) flow through the `auto` plugin as
normal (the rfc2136 plugin is transparent for non-UPDATE traffic).
- UPDATE messages signed with the configured TSIG key apply changes
to the on-disk zone file.
- After an UPDATE, `dig` returns the new record (CoreDNS's `auto`
plugin sees the mtime change and reloads within 5s).
## Quickstart
```bash
cd test/
# 1. Build + start. The build clones CoreDNS source and pulls the
# plugin via `go get` -- expect ~2-3 min for the first build.
docker compose up -d --build
# 2. Sanity-check the apex SOA is served.
dig @127.0.0.1 -p 11053 test.example.com SOA +short
# 3. Push an UPDATE via nsupdate. The TSIG secret comes from .env.
nsupdate -y "hmac-sha256:acme-update-key.:$(grep ACME_TSIG_SECRET .env | cut -d= -f2)" <<'EOF'
server 127.0.0.1 11053
zone test.example.com
update add token.test.example.com 60 TXT "validation-token-1"
send
EOF
# 4. Wait ~5s for the auto plugin to reload, then verify.
sleep 6
dig @127.0.0.1 -p 11053 token.test.example.com TXT +short
# expected: "validation-token-1"
# 5. Inspect the updated zone file on disk.
cat zones/test.example.com.zone
# 6. Tear down when done.
docker compose down
```
## Files
| Path | Role |
|---|---|
| `Corefile` | Two plugins: `auto` (serves queries) + `rfc2136` (handles UPDATE) |
| `zones/test.example.com.zone` | The one test zone; rewritten by rfc2136 on UPDATE |
| `docker-compose.yml` | Standalone stack on ports 11053 / 19153 |
| `.env` | Isolated `COMPOSE_PROJECT_NAME` + a fixed throwaway TSIG secret |
## What this does NOT test
- TSIG cryptographic correctness against a malicious client. (Unit
tests in the plugin's `tsig.go` + miekg/dns's own tests cover this.)
- Git auto-commit. We disable it here (`auto-commit false` in Corefile)
because there's no git repo at `/zones` inside the container. That
path gets exercised on dell01 in Phase 3.
- Caddy → caddy-dns/rfc2136 end-to-end cert issuance. (Phase 3.)
## Cleanup
```bash
docker compose down
git checkout -- zones/test.example.com.zone # restore baseline
```

27
test/docker-compose.yml
View File

@ -1,27 +0,0 @@
services:
# Custom CoreDNS build with the rfc2136 plugin baked in.
# The Dockerfile lives in the parent dir (../coredns/Dockerfile) so
# we reuse the production build artefact.
coredns:
build:
context: ..
dockerfile: coredns/Dockerfile
image: coredns-rfc2136-test:dev
container_name: coredns-rfc2136-test
restart: "no" # never auto-restart in test scenarios
command: ["-conf", "/etc/coredns/Corefile"]
environment:
- ACME_TSIG_SECRET=${ACME_TSIG_SECRET}
ports:
- "${TEST_DNS_PORT}:53/udp"
- "${TEST_DNS_PORT}:53/tcp"
- "${TEST_METRICS_PORT}:9153/tcp"
volumes:
- ./Corefile:/etc/coredns/Corefile:ro
- ./zones:/zones # NOT read-only: rfc2136 needs to write here
healthcheck:
test: ["CMD", "/coredns", "-version"]
interval: 10s
timeout: 3s
retries: 3
start_period: 5s

8
test/zones/test.example.com.zone
View File

@ -1,8 +0,0 @@
; Auto-written by coredns-rfc2136 on 2026-05-21T17:59:46Z
; Zone: test.example.com.
$ORIGIN test.example.com.
test.example.com. 3600 IN SOA ns.test.example.com. admin.test.example.com. 2026052103 300 120 604800 60
test.example.com. 3600 IN NS ns.test.example.com.
ns.test.example.com. 3600 IN A 127.0.0.1
token.test.example.com. 60 IN TXT "validation-1"
fresh.test.example.com. 60 IN TXT "msgAcceptFunc-fix-works"

40
zones/acrazy.org.zone
View File

@ -1,35 +1,19 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for acrazy.org
; Source: zones/acrazy.org.zone ; Generated by mcp-vultr
$ORIGIN acrazy.org. $ORIGIN acrazy.org.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.acrazy.org. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 74.91.22.234
or 300 IN A 74.91.22.233 or 300 IN A 74.91.22.233
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net. l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net. *.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
b 300 IN A 108.61.23.129 b 300 IN A 108.61.23.129
dootie 300 IN A 108.61.23.129 dootie 300 IN A 108.61.23.129
* 300 IN CNAME acrazy.org. * 300 IN CNAME acrazy.org
*.dootie 300 IN CNAME dootie.acrazy.org. *.dootie 300 IN CNAME dootie.acrazy.org
@ 300 IN MX 10 acrazy.org. 300 IN MX 10 acrazy.org
_acme-challenge 300 IN TXT "eIA2Ii4EA7cfmjVcTUvOrM5nc4nFRRYpjvxtpEYzPG4" _acme-challenge 300 IN TXT "eIA2Ii4EA7cfmjVcTUvOrM5nc4nFRRYpjvxtpEYzPG4"
_acme-challenge 300 IN TXT "DQxkmE7D658WT3-MR5xa7x5NW85L0C8Xq80Iv9-ZF60" _acme-challenge 300 IN TXT "DQxkmE7D658WT3-MR5xa7x5NW85L0C8Xq80Iv9-ZF60"
_acme-challenge 300 IN TXT "uOz583TEOpuME0AiJgaZYusECS8VDCP55yBuGw9WL58" _acme-challenge 300 IN TXT "uOz583TEOpuME0AiJgaZYusECS8VDCP55yBuGw9WL58"
@ -55,4 +39,6 @@ _acme-challenge.l 300 IN TXT "Ike1gqcB3VI7WwKoH3T8zqbpYSo2qRPrq0iqzB5wmFU"
_acme-challenge.langfuse.dootie 300 IN TXT "1WJ-mHJ2SQuuC5CgxbYY6euwiMZm1dVicfIkeluovTY" _acme-challenge.langfuse.dootie 300 IN TXT "1WJ-mHJ2SQuuC5CgxbYY6euwiMZm1dVicfIkeluovTY"
_acme-challenge.dootie.l 300 IN TXT "uW30ozl6AKA_q9FWPlvaxuwbgBJ-TgTsXxA3JFtn0tg" _acme-challenge.dootie.l 300 IN TXT "uW30ozl6AKA_q9FWPlvaxuwbgBJ-TgTsXxA3JFtn0tg"
_acme-challenge.langfuse.dootie.l 300 IN TXT "P6tOVfwB8OBbI6AqnIuHXKQc05FjuABhGihUHwzpMOs" _acme-challenge.langfuse.dootie.l 300 IN TXT "P6tOVfwB8OBbI6AqnIuHXKQc05FjuABhGihUHwzpMOs"
langfuse.dootie 300 IN CNAME acrazy.org. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
; (parent name has _acme-challenge children, so wildcard would skip it)
langfuse.dootie 300 IN CNAME acrazy.org

34
zones/automaton.global.zone
View File

@ -1,33 +1,17 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for automaton.global
; Source: zones/automaton.global.zone ; Generated by mcp-vultr
$ORIGIN automaton.global. $ORIGIN automaton.global.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.automaton.global. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 144.202.93.19
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 144.202.93.19
cloud 300 IN A 144.202.93.19 cloud 300 IN A 144.202.93.19
join 300 IN A 108.61.194.241 join 300 IN A 108.61.194.241
jump 900 IN A 134.215.239.30 jump 900 IN A 134.215.239.30
jump1 3600 IN A 134.215.239.30 jump1 3600 IN A 134.215.239.30
test 300 IN A 1.2.3.4 test 300 IN A 1.2.3.4
* 300 IN CNAME automaton.global. * 300 IN CNAME automaton.global
mail 300 IN CNAME mail.supported.systems. mail 300 IN CNAME mail.supported.systems
@ 300 IN MX 10 mail.supported.systems. 300 IN MX 10 mail.supported.systems
@ 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all" 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all"

30
zones/automaton.host.zone
View File

@ -1,27 +1,11 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for automaton.host
; Source: zones/automaton.host.zone ; Generated by mcp-vultr
$ORIGIN automaton.host. $ORIGIN automaton.host.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.automaton.host. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 50.52.72.153
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 50.52.72.153
krambu 300 IN A 134.215.239.30 krambu 300 IN A 134.215.239.30
* 300 IN CNAME automaton.host. * 300 IN CNAME automaton.host
@ 300 IN MX 10 mail.supported.systems. 300 IN MX 10 mail.supported.systems

30
zones/blender.bet.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for blender.bet
; Source: zones/blender.bet.zone ; Generated by mcp-vultr
$ORIGIN blender.bet. $ORIGIN blender.bet.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.blender.bet. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME blender.bet
@ 3600 IN NS ns5.he.net. 300 IN MX 10 blender.bet
@ 300 IN A 74.91.22.234
* 300 IN CNAME blender.bet.
@ 300 IN MX 10 blender.bet.

30
zones/blender.cam.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for blender.cam
; Source: zones/blender.cam.zone ; Generated by mcp-vultr
$ORIGIN blender.cam. $ORIGIN blender.cam.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.blender.cam. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME blender.cam
@ 3600 IN NS ns5.he.net. 300 IN MX 10 blender.cam
@ 300 IN A 74.91.22.234
* 300 IN CNAME blender.cam.
@ 300 IN MX 10 blender.cam.

30
zones/blender.partners.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for blender.partners
; Source: zones/blender.partners.zone ; Generated by mcp-vultr
$ORIGIN blender.partners. $ORIGIN blender.partners.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.blender.partners. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME blender.partners
@ 3600 IN NS ns5.he.net. 300 IN MX 10 blender.partners
@ 300 IN A 74.91.22.234
* 300 IN CNAME blender.partners.
@ 300 IN MX 10 blender.partners.

30
zones/blender.quest.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for blender.quest
; Source: zones/blender.quest.zone ; Generated by mcp-vultr
$ORIGIN blender.quest. $ORIGIN blender.quest.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.blender.quest. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME blender.quest
@ 3600 IN NS ns5.he.net. 300 IN MX 10 blender.quest
@ 300 IN A 74.91.22.234
* 300 IN CNAME blender.quest.
@ 300 IN MX 10 blender.quest.

34
zones/blender.systems.zone
View File

@ -1,29 +1,13 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for blender.systems
; Source: zones/blender.systems.zone ; Generated by mcp-vultr
$ORIGIN blender.systems. $ORIGIN blender.systems.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.blender.systems. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 74.91.22.234
l 300 IN A 127.0.0.1 l 300 IN A 127.0.0.1
* 300 IN CNAME blender.systems. * 300 IN CNAME blender.systems
*.l 300 IN CNAME blender.systems. *.l 300 IN CNAME blender.systems
@ 300 IN MX 10 mail.supported.systems. 300 IN MX 10 mail.supported.systems
@ 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all" 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all"

32
zones/cloud-dine.com.zone
View File

@ -1,27 +1,11 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for cloud-dine.com
; Source: zones/cloud-dine.com.zone ; Generated by mcp-vultr
$ORIGIN cloud-dine.com. $ORIGIN cloud-dine.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.cloud-dine.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 72.24.184.132
@ 3600 IN NS ns4.he.net. * 300 IN CNAME cloud-dine.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 mail.supported.systems
3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
@ 300 IN A 72.24.184.132
* 300 IN CNAME cloud-dine.com.
@ 300 IN MX 10 mail.supported.systems.
@ 3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"

34
zones/context.bet.zone
View File

@ -1,29 +1,13 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for context.bet
; Source: zones/context.bet.zone ; Generated by mcp-vultr
$ORIGIN context.bet. $ORIGIN context.bet.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.context.bet. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME context.bet
@ 3600 IN NS ns5.he.net. 300 IN MX 10 context.bet
@ 300 IN A 74.91.22.234
* 300 IN CNAME context.bet.
@ 300 IN MX 10 context.bet.
_acme-challenge.studio 300 IN TXT "Li380TywS7mThEIWuivl7P2Zkt3xM5Ug_dYEa-oN238" _acme-challenge.studio 300 IN TXT "Li380TywS7mThEIWuivl7P2Zkt3xM5Ug_dYEa-oN238"
_acme-challenge.studio 300 IN TXT "KHzdoVgJnWS-pYx0MFaeqzMxkAKMIffHYBE-FgV_gz8" _acme-challenge.studio 300 IN TXT "KHzdoVgJnWS-pYx0MFaeqzMxkAKMIffHYBE-FgV_gz8"
_acme-challenge 300 IN TXT "YvpqyCHZnlMxlA5I7PJu4FXLXRlObIdvTmd07P_Hctg" _acme-challenge 300 IN TXT "YvpqyCHZnlMxlA5I7PJu4FXLXRlObIdvTmd07P_Hctg"
@ -46,4 +30,6 @@ _acme-challenge 300 IN TXT "FSMb7Ru6xgzIIUvlzSzzVnOsGQD2Dgxm_qhx6hyymnE"
_acme-challenge 300 IN TXT "yB9kMNkHqVDe5vMvkgN5SFxiXgDSlSyUgldfW971BXw" _acme-challenge 300 IN TXT "yB9kMNkHqVDe5vMvkgN5SFxiXgDSlSyUgldfW971BXw"
_acme-challenge 300 IN TXT "dpheXmHW0vH_NW5t8Ie_OWXiJkZT0l2U2Yu9w5n5uZg" _acme-challenge 300 IN TXT "dpheXmHW0vH_NW5t8Ie_OWXiJkZT0l2U2Yu9w5n5uZg"
_acme-challenge 300 IN TXT "K6DYSkbn2Fk_P0fA1fxbIZszce4NzjTtgodaUNxDS1w" _acme-challenge 300 IN TXT "K6DYSkbn2Fk_P0fA1fxbIZszce4NzjTtgodaUNxDS1w"
studio 300 IN CNAME context.bet. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
; (parent name has _acme-challenge children, so wildcard would skip it)
studio 300 IN CNAME context.bet

36
zones/coopermalloy.com.zone
View File

@ -1,31 +1,15 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for coopermalloy.com
; Source: zones/coopermalloy.com.zone ; Generated by mcp-vultr
$ORIGIN coopermalloy.com. $ORIGIN coopermalloy.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.coopermalloy.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME coopermalloy.com
@ 3600 IN NS ns5.he.net. mail 3600 IN CNAME mail.supported.systems
300 IN MX 10 mail.supported.systems
3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
@ 300 IN A 74.91.22.234
* 300 IN CNAME coopermalloy.com.
mail 3600 IN CNAME mail.supported.systems.
@ 300 IN MX 10 mail.supported.systems.
@ 3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
_acme-challenge 300 IN TXT "EZLETkIGw-ztOqS8PxZ6ErG1wuFdbwUUo_hQ6Ouc1u0" _acme-challenge 300 IN TXT "EZLETkIGw-ztOqS8PxZ6ErG1wuFdbwUUo_hQ6Ouc1u0"
_acme-challenge 300 IN TXT "YckMEs1aROXztwr7eHJksQ7VdR9GSKfMDujVL8BH25E" _acme-challenge 300 IN TXT "YckMEs1aROXztwr7eHJksQ7VdR9GSKfMDujVL8BH25E"
_acme-challenge 300 IN TXT "zSS6xNG4EIz1LLTRIcSmX2HBHTSRZVvy8kkgTYI2mSg" _acme-challenge 300 IN TXT "zSS6xNG4EIz1LLTRIcSmX2HBHTSRZVvy8kkgTYI2mSg"
@ -37,4 +21,4 @@ _acme-challenge 300 IN TXT "SEIL9s7-r-rOHWnE-ZDeNPk_1f3iHfqGYjluAU6R4Xw"
_acme-challenge 300 IN TXT "fZ9Wg4cJirtPEGr5JtR_aO4dSRZOtKLopug05hwJOU0" _acme-challenge 300 IN TXT "fZ9Wg4cJirtPEGr5JtR_aO4dSRZOtKLopug05hwJOU0"
_acme-challenge 300 IN TXT "6LWS9nyupxDGygeRbBmWnkJyjZhMCxj-xZRZmRnzquw" _acme-challenge 300 IN TXT "6LWS9nyupxDGygeRbBmWnkJyjZhMCxj-xZRZmRnzquw"
_acme-challenge 300 IN TXT "JG5vKxfEqXH43AK3FEnPYwVc7TkADQ-PxgjdqfrpAgU" _acme-challenge 300 IN TXT "JG5vKxfEqXH43AK3FEnPYwVc7TkADQ-PxgjdqfrpAgU"
_acme-challenge 300 IN TXT "b9X8yKk78gcZ0mg8Wy-81_keh9ZetEBs08QNqUDuXr4" _acme-challenge 300 IN TXT "b9X8yKk78gcZ0mg8Wy-81_keh9ZetEBs08QNqUDuXr4"

38
zones/copper-springs.online.zone
View File

@ -1,30 +1,16 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for copper-springs.online
; Source: zones/copper-springs.online.zone ; Generated by mcp-vultr
$ORIGIN copper-springs.online. $ORIGIN copper-springs.online.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.copper-springs.online. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. dev 300 IN CNAME rpm-bullet.mer.idahomuellers.net
@ 3600 IN NS ns5.he.net. * 300 IN CNAME copper-springs.online
*.dev 300 IN CNAME dev.copper-springs.online
300 IN MX 10 copper-springs.online
@ 300 IN A 74.91.22.234
dev 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
* 300 IN CNAME copper-springs.online.
*.dev 300 IN CNAME dev.copper-springs.online.
@ 300 IN MX 10 copper-springs.online.
_acme-challenge.docs.butler.dev 300 IN TXT "JcIKn8HyUtQMwY_q0FNdj-XfacQS9Tn5SQiwTKB79VE" _acme-challenge.docs.butler.dev 300 IN TXT "JcIKn8HyUtQMwY_q0FNdj-XfacQS9Tn5SQiwTKB79VE"
docs.butler.dev 300 IN CNAME copper-springs.online. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
; (parent name has _acme-challenge children, so wildcard would skip it)
docs.butler.dev 300 IN CNAME copper-springs.online

30
zones/cyberinsuranceapp.com.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for cyberinsuranceapp.com
; Source: zones/cyberinsuranceapp.com.zone ; Generated by mcp-vultr
$ORIGIN cyberinsuranceapp.com. $ORIGIN cyberinsuranceapp.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.cyberinsuranceapp.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 144.202.104.200
@ 3600 IN NS ns4.he.net. * 300 IN CNAME cyberinsuranceapp.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 cyberinsuranceapp.com
@ 300 IN A 144.202.104.200
* 300 IN CNAME cyberinsuranceapp.com.
@ 300 IN MX 10 cyberinsuranceapp.com.

32
zones/demo-tube.com.zone
View File

@ -1,28 +1,12 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for demo-tube.com
; Source: zones/demo-tube.com.zone ; Generated by mcp-vultr
$ORIGIN demo-tube.com. $ORIGIN demo-tube.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.demo-tube.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME demo-tube.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 demo-tube.com
@ 300 IN A 74.91.22.234
* 300 IN CNAME demo-tube.com.
@ 300 IN MX 10 demo-tube.com.
_acme-challenge 300 IN TXT "-ucCFXSieY1TSGAAgfEnmNQY7C59R8d-VeCL7YWG80E" _acme-challenge 300 IN TXT "-ucCFXSieY1TSGAAgfEnmNQY7C59R8d-VeCL7YWG80E"
_acme-challenge 300 IN TXT "rl8mWufuTFr3fbO9Yq5XzLg8HvuU_SiwUdylOopo5Sk" _acme-challenge 300 IN TXT "rl8mWufuTFr3fbO9Yq5XzLg8HvuU_SiwUdylOopo5Sk"

32
zones/demostar.app.zone
View File

@ -1,27 +1,11 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for demostar.app
; Source: zones/demostar.app.zone ; Generated by mcp-vultr
$ORIGIN demostar.app. $ORIGIN demostar.app.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.demostar.app. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 72.24.184.132
@ 3600 IN NS ns4.he.net. * 300 IN CNAME demostar.app
@ 3600 IN NS ns5.he.net. 300 IN MX 10 mail.supported.systems
300 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
@ 300 IN A 72.24.184.132
* 300 IN CNAME demostar.app.
@ 300 IN MX 10 mail.supported.systems.
@ 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all"

30
zones/demostar.click.zone
View File

@ -1,27 +1,11 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for demostar.click
; Source: zones/demostar.click.zone ; Generated by mcp-vultr
$ORIGIN demostar.click. $ORIGIN demostar.click.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.demostar.click. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 149.28.50.172
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 149.28.50.172
analytics 300 IN A 144.202.93.19 analytics 300 IN A 144.202.93.19
* 300 IN CNAME demostar.click. * 300 IN CNAME demostar.click
@ 300 IN MX 10 mail.supported.systems. 300 IN MX 10 mail.supported.systems

52
zones/demostar.io.zone
View File

@ -1,39 +1,23 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for demostar.io
; Source: zones/demostar.io.zone ; Generated by mcp-vultr
$ORIGIN demostar.io. $ORIGIN demostar.io.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.demostar.io. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.230
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 74.91.22.230
ph 300 IN A 144.202.60.236 ph 300 IN A 144.202.60.236
or 300 IN A 74.91.22.233 or 300 IN A 74.91.22.233
vdo 300 IN A 74.91.22.230 vdo 300 IN A 74.91.22.230
dev 300 IN CNAME rpm-bullet.mer.idahomuellers.net. dev 300 IN CNAME rpm-bullet.mer.idahomuellers.net
* 300 IN CNAME demostar.io. * 300 IN CNAME demostar.io
shynet 300 IN CNAME demostar.io. shynet 300 IN CNAME demostar.io
oo-sandbox 300 IN CNAME oo.demostar.io. oo-sandbox 300 IN CNAME oo.demostar.io
oo 300 IN CNAME demostar.io. oo 300 IN CNAME demostar.io
cw 3600 IN CNAME demostar.io. cw 3600 IN CNAME demostar.io
@ 300 IN MX 10 mail.supported.systems. 300 IN MX 10 mail.supported.systems
@ 3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all" 3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
@ 3600 IN TXT "google-site-verification=2O9jXz4H-nx0oRi2hVdFCWnPudISRlpT2nWE0xF-U14" 3600 IN TXT "google-site-verification=2O9jXz4H-nx0oRi2hVdFCWnPudISRlpT2nWE0xF-U14"
_acme-challenge.meet 300 IN TXT "6ZSVw9yrMNjG2z-KqLP77_FW7w0I7embcfCLc9g6CRs" _acme-challenge.meet 300 IN TXT "6ZSVw9yrMNjG2z-KqLP77_FW7w0I7embcfCLc9g6CRs"
_acme-challenge.oo-sandbox 300 IN TXT "o8a0j9u2-CmTCkAPJ9audd0SSh2KFv90vXPgLOoib_c" _acme-challenge.oo-sandbox 300 IN TXT "o8a0j9u2-CmTCkAPJ9audd0SSh2KFv90vXPgLOoib_c"
_acme-challenge 300 IN TXT "xfcM1eMV0DRZMxHWzY5_l4v8sEHe064XmrJpBn7KZik" _acme-challenge 300 IN TXT "xfcM1eMV0DRZMxHWzY5_l4v8sEHe064XmrJpBn7KZik"
@ -48,6 +32,8 @@ _acme-challenge.vdo 300 IN TXT "slcvr2gvi6ahNucyzfzLvInL-l0L1P93I2p3vQ3ytrU"
_acme-challenge.vdo 300 IN TXT "cGxfMICfHYD7QiQmsAuWuVN-hQQoZ38GcvDTigsioWQ" _acme-challenge.vdo 300 IN TXT "cGxfMICfHYD7QiQmsAuWuVN-hQQoZ38GcvDTigsioWQ"
_acme-challenge.cw.cw 300 IN TXT "Y0ahdJHcKysWxYNQG8aXQuWr0uSp7WVlwxkdWYHcrIM" _acme-challenge.cw.cw 300 IN TXT "Y0ahdJHcKysWxYNQG8aXQuWr0uSp7WVlwxkdWYHcrIM"
_acme-challenge.cw 300 IN TXT "e7IRkthq2cwpEJHEjbAsQwqkvQGHl831X6luH3ct6uc" _acme-challenge.cw 300 IN TXT "e7IRkthq2cwpEJHEjbAsQwqkvQGHl831X6luH3ct6uc"
cw.cw 300 IN CNAME demostar.io. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
doom 300 IN CNAME demostar.io. ; (parent name has _acme-challenge children, so wildcard would skip it)
meet 300 IN CNAME demostar.io. cw.cw 300 IN CNAME demostar.io
doom 300 IN CNAME demostar.io
meet 300 IN CNAME demostar.io

32
zones/demostar.net.zone
View File

@ -1,28 +1,12 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for demostar.net
; Source: zones/demostar.net.zone ; Generated by mcp-vultr
$ORIGIN demostar.net. $ORIGIN demostar.net.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.demostar.net. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 140.82.13.104
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 140.82.13.104
docker-zfs1.nj 300 IN A 140.82.13.104 docker-zfs1.nj 300 IN A 140.82.13.104
* 300 IN CNAME demostar.net. * 300 IN CNAME demostar.net
@ 300 IN MX 10 mail.supported.systems. 300 IN MX 10 mail.supported.systems
@ 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all" 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all"

34
zones/dignity.ink.zone
View File

@ -1,29 +1,13 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for dignity.ink
; Source: zones/dignity.ink.zone ; Generated by mcp-vultr
$ORIGIN dignity.ink. $ORIGIN dignity.ink.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.dignity.ink. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 108.61.23.129
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 108.61.23.129
l 300 IN A 10.20.0.38 l 300 IN A 10.20.0.38
* 300 IN CNAME dignity.ink. * 300 IN CNAME dignity.ink
*.l 300 IN CNAME l.dignity.ink. *.l 300 IN CNAME l.dignity.ink
kayla 300 IN CNAME docker-2.supportedsystems.net. kayla 300 IN CNAME docker-2.supportedsystems.net
@ 300 IN MX 10 dignity.ink. 300 IN MX 10 dignity.ink

30
zones/dope.team.zone
View File

@ -1,27 +1,11 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for dope.team
; Source: zones/dope.team.zone ; Generated by mcp-vultr
$ORIGIN dope.team. $ORIGIN dope.team.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.dope.team. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 108.61.23.129
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 108.61.23.129
qube 300 IN A 108.61.23.129 qube 300 IN A 108.61.23.129
* 300 IN CNAME dope.team. * 300 IN CNAME dope.team
@ 300 IN MX 10 dope.team. 300 IN MX 10 dope.team

30
zones/encom.cash.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for encom.cash
; Source: zones/encom.cash.zone ; Generated by mcp-vultr
$ORIGIN encom.cash. $ORIGIN encom.cash.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.encom.cash. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME encom.cash
@ 3600 IN NS ns5.he.net. 300 IN MX 10 encom.cash
@ 300 IN A 74.91.22.234
* 300 IN CNAME encom.cash.
@ 300 IN MX 10 encom.cash.

30
zones/encom.ink.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for encom.ink
; Source: zones/encom.ink.zone ; Generated by mcp-vultr
$ORIGIN encom.ink. $ORIGIN encom.ink.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.encom.ink. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME encom.ink
@ 3600 IN NS ns5.he.net. 300 IN MX 10 encom.ink
@ 300 IN A 74.91.22.234
* 300 IN CNAME encom.ink.
@ 300 IN MX 10 encom.ink.

30
zones/encom.website.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for encom.website
; Source: zones/encom.website.zone ; Generated by mcp-vultr
$ORIGIN encom.website. $ORIGIN encom.website.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.encom.website. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME encom.website
@ 3600 IN NS ns5.he.net. 300 IN MX 10 encom.website
@ 300 IN A 74.91.22.234
* 300 IN CNAME encom.website.
@ 300 IN MX 10 encom.website.

30
zones/encom.wtf.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for encom.wtf
; Source: zones/encom.wtf.zone ; Generated by mcp-vultr
$ORIGIN encom.wtf. $ORIGIN encom.wtf.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.encom.wtf. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME encom.wtf
@ 3600 IN NS ns5.he.net. 300 IN MX 10 encom.wtf
@ 300 IN A 74.91.22.234
* 300 IN CNAME encom.wtf.
@ 300 IN MX 10 encom.wtf.

32
zones/enls.us.zone
View File

@ -1,28 +1,12 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for enls.us
; Source: zones/enls.us.zone ; Generated by mcp-vultr
$ORIGIN enls.us. $ORIGIN enls.us.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.enls.us. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME enls.us
@ 3600 IN NS ns5.he.net. 300 IN MX 10 enls.us
@ 300 IN A 74.91.22.234
* 300 IN CNAME enls.us.
@ 300 IN MX 10 enls.us.
_acme-challenge 300 IN TXT "RpllERXufsL0PWSFs_5p980PX3twLnYM-JKt048e7iI" _acme-challenge 300 IN TXT "RpllERXufsL0PWSFs_5p980PX3twLnYM-JKt048e7iI"
_acme-challenge 300 IN TXT "qGFOfoDwY0NHx-Xdo5aPQQ1z7wOQ3d4UJcbU17iL0WQ" _acme-challenge 300 IN TXT "qGFOfoDwY0NHx-Xdo5aPQQ1z7wOQ3d4UJcbU17iL0WQ"

30
zones/enls.video.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for enls.video
; Source: zones/enls.video.zone ; Generated by mcp-vultr
$ORIGIN enls.video. $ORIGIN enls.video.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.enls.video. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME enls.video
@ 3600 IN NS ns5.he.net. 300 IN MX 10 enls.video
@ 300 IN A 74.91.22.234
* 300 IN CNAME enls.video.
@ 300 IN MX 10 enls.video.

30
zones/freemyradicals.com.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for freemyradicals.com
; Source: zones/freemyradicals.com.zone ; Generated by mcp-vultr
$ORIGIN freemyradicals.com. $ORIGIN freemyradicals.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.freemyradicals.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME freemyradicals.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 freemyradicals.com
@ 300 IN A 74.91.22.234
* 300 IN CNAME freemyradicals.com.
@ 300 IN MX 10 freemyradicals.com.

30
zones/garage.ceo.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for garage.ceo
; Source: zones/garage.ceo.zone ; Generated by mcp-vultr
$ORIGIN garage.ceo. $ORIGIN garage.ceo.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.garage.ceo. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME garage.ceo
@ 3600 IN NS ns5.he.net. 300 IN MX 10 garage.ceo
@ 300 IN A 74.91.22.234
* 300 IN CNAME garage.ceo.
@ 300 IN MX 10 garage.ceo.

30
zones/garage.christmas.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for garage.christmas
; Source: zones/garage.christmas.zone ; Generated by mcp-vultr
$ORIGIN garage.christmas. $ORIGIN garage.christmas.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.garage.christmas. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME garage.christmas
@ 3600 IN NS ns5.he.net. 300 IN MX 10 garage.christmas
@ 300 IN A 74.91.22.234
* 300 IN CNAME garage.christmas.
@ 300 IN MX 10 garage.christmas.

30
zones/garage.doctor.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for garage.doctor
; Source: zones/garage.doctor.zone ; Generated by mcp-vultr
$ORIGIN garage.doctor. $ORIGIN garage.doctor.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.garage.doctor. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME garage.doctor
@ 3600 IN NS ns5.he.net. 300 IN MX 10 garage.doctor
@ 300 IN A 74.91.22.234
* 300 IN CNAME garage.doctor.
@ 300 IN MX 10 garage.doctor.

30
zones/garage.dog.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for garage.dog
; Source: zones/garage.dog.zone ; Generated by mcp-vultr
$ORIGIN garage.dog. $ORIGIN garage.dog.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.garage.dog. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME garage.dog
@ 3600 IN NS ns5.he.net. 300 IN MX 10 garage.dog
@ 300 IN A 74.91.22.234
* 300 IN CNAME garage.dog.
@ 300 IN MX 10 garage.dog.

30
zones/garage.engineering.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for garage.engineering
; Source: zones/garage.engineering.zone ; Generated by mcp-vultr
$ORIGIN garage.engineering. $ORIGIN garage.engineering.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.garage.engineering. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME garage.engineering
@ 3600 IN NS ns5.he.net. 300 IN MX 10 garage.engineering
@ 300 IN A 74.91.22.234
* 300 IN CNAME garage.engineering.
@ 300 IN MX 10 garage.engineering.

30
zones/garage.makeup.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for garage.makeup
; Source: zones/garage.makeup.zone ; Generated by mcp-vultr
$ORIGIN garage.makeup. $ORIGIN garage.makeup.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.garage.makeup. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME garage.makeup
@ 3600 IN NS ns5.he.net. 300 IN MX 10 garage.makeup
@ 300 IN A 74.91.22.234
* 300 IN CNAME garage.makeup.
@ 300 IN MX 10 garage.makeup.

30
zones/garage.rocks.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for garage.rocks
; Source: zones/garage.rocks.zone ; Generated by mcp-vultr
$ORIGIN garage.rocks. $ORIGIN garage.rocks.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.garage.rocks. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME garage.rocks
@ 3600 IN NS ns5.he.net. 300 IN MX 10 garage.rocks
@ 300 IN A 74.91.22.234
* 300 IN CNAME garage.rocks.
@ 300 IN MX 10 garage.rocks.

30
zones/garage.supply.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for garage.supply
; Source: zones/garage.supply.zone ; Generated by mcp-vultr
$ORIGIN garage.supply. $ORIGIN garage.supply.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.garage.supply. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME garage.supply
@ 3600 IN NS ns5.he.net. 300 IN MX 10 garage.supply
@ 300 IN A 74.91.22.234
* 300 IN CNAME garage.supply.
@ 300 IN MX 10 garage.supply.

30
zones/glennsferry.site.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for glennsferry.site
; Source: zones/glennsferry.site.zone ; Generated by mcp-vultr
$ORIGIN glennsferry.site. $ORIGIN glennsferry.site.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.glennsferry.site. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 108.61.23.129
@ 3600 IN NS ns4.he.net. * 300 IN CNAME glennsferry.site
@ 3600 IN NS ns5.he.net. 300 IN MX 10 glennsferry.site
@ 300 IN A 108.61.23.129
* 300 IN CNAME glennsferry.site.
@ 300 IN MX 10 glennsferry.site.

30
zones/home-inspector.app.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for home-inspector.app
; Source: zones/home-inspector.app.zone ; Generated by mcp-vultr
$ORIGIN home-inspector.app. $ORIGIN home-inspector.app.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.home-inspector.app. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME home-inspector.app
@ 3600 IN NS ns5.he.net. 300 IN MX 10 home-inspector.app
@ 300 IN A 74.91.22.234
* 300 IN CNAME home-inspector.app.
@ 300 IN MX 10 home-inspector.app.

30
zones/home-inspector.pics.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for home-inspector.pics
; Source: zones/home-inspector.pics.zone ; Generated by mcp-vultr
$ORIGIN home-inspector.pics. $ORIGIN home-inspector.pics.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.home-inspector.pics. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME home-inspector.pics
@ 3600 IN NS ns5.he.net. 300 IN MX 10 home-inspector.pics
@ 300 IN A 74.91.22.234
* 300 IN CNAME home-inspector.pics.
@ 300 IN MX 10 home-inspector.pics.

30
zones/home-inspector.site.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for home-inspector.site
; Source: zones/home-inspector.site.zone ; Generated by mcp-vultr
$ORIGIN home-inspector.site. $ORIGIN home-inspector.site.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.home-inspector.site. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME home-inspector.site
@ 3600 IN NS ns5.he.net. 300 IN MX 10 home-inspector.site
@ 300 IN A 74.91.22.234
* 300 IN CNAME home-inspector.site.
@ 300 IN MX 10 home-inspector.site.

38
zones/home-inspector.store.zone
View File

@ -1,34 +1,20 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for home-inspector.store
; Source: zones/home-inspector.store.zone ; Generated by mcp-vultr
$ORIGIN home-inspector.store. $ORIGIN home-inspector.store.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.home-inspector.store. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME home-inspector.store
@ 3600 IN NS ns5.he.net. 300 IN MX 10 home-inspector.store
@ 300 IN A 74.91.22.234
* 300 IN CNAME home-inspector.store.
@ 300 IN MX 10 home-inspector.store.
_acme-challenge.dashboard 300 IN TXT "TLTjv7weswoJMxQ8K897MGeez7RJlTTay7sJ5_OQY-M" _acme-challenge.dashboard 300 IN TXT "TLTjv7weswoJMxQ8K897MGeez7RJlTTay7sJ5_OQY-M"
_acme-challenge 300 IN TXT "qtDNogktSbMLdjkIQNciTHAIIKIIO7CKaOhIvg2PY7U" _acme-challenge 300 IN TXT "qtDNogktSbMLdjkIQNciTHAIIKIIO7CKaOhIvg2PY7U"
_acme-challenge.dashboard 300 IN TXT "U3yUObG_I0bU4lEiBQz_saa-U9ysq0lSRCqJcBwJi2I" _acme-challenge.dashboard 300 IN TXT "U3yUObG_I0bU4lEiBQz_saa-U9ysq0lSRCqJcBwJi2I"
_acme-challenge.api 300 IN TXT "LwzNwdpFoJsKzXbGhaV7nenwRFj9vDyIAokNLdV4zwE" _acme-challenge.api 300 IN TXT "LwzNwdpFoJsKzXbGhaV7nenwRFj9vDyIAokNLdV4zwE"
_acme-challenge.mailpit 300 IN TXT "ZAfKxXBLnghzsFKBTXOIdFvEzgfu4zOny_Kqv3cF3AM" _acme-challenge.mailpit 300 IN TXT "ZAfKxXBLnghzsFKBTXOIdFvEzgfu4zOny_Kqv3cF3AM"
api 300 IN CNAME home-inspector.store. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
dashboard 300 IN CNAME home-inspector.store. ; (parent name has _acme-challenge children, so wildcard would skip it)
mailpit 300 IN CNAME home-inspector.store. api 300 IN CNAME home-inspector.store
dashboard 300 IN CNAME home-inspector.store
mailpit 300 IN CNAME home-inspector.store

30
zones/home-inspector.website.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for home-inspector.website
; Source: zones/home-inspector.website.zone ; Generated by mcp-vultr
$ORIGIN home-inspector.website. $ORIGIN home-inspector.website.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.home-inspector.website. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME home-inspector.website
@ 3600 IN NS ns5.he.net. 300 IN MX 10 home-inspector.website
@ 300 IN A 74.91.22.234
* 300 IN CNAME home-inspector.website.
@ 300 IN MX 10 home-inspector.website.

36
zones/homestar.ink.zone
View File

@ -1,29 +1,13 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for homestar.ink
; Source: zones/homestar.ink.zone ; Generated by mcp-vultr
$ORIGIN homestar.ink. $ORIGIN homestar.ink.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.homestar.ink. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 104.238.162.49
@ 3600 IN NS ns4.he.net. l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
@ 3600 IN NS ns5.he.net. *.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
@ 300 IN A 104.238.162.49
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
photos.mock-reso 300 IN A 104.238.162.49 photos.mock-reso 300 IN A 104.238.162.49
tiles 300 IN A 104.238.162.49 tiles 300 IN A 104.238.162.49
auth 300 IN A 104.238.162.49 auth 300 IN A 104.238.162.49
@ -39,8 +23,8 @@ help.demo 300 IN A 144.202.24.151
mock-api.demo 300 IN A 144.202.24.151 mock-api.demo 300 IN A 144.202.24.151
*.demo 300 IN A 144.202.24.151 *.demo 300 IN A 144.202.24.151
photos.mock-reso.demo 300 IN A 144.202.24.151 photos.mock-reso.demo 300 IN A 144.202.24.151
* 300 IN CNAME homestar.ink. * 300 IN CNAME homestar.ink
@ 300 IN MX 10 homestar.ink. 300 IN MX 10 homestar.ink
_acme-challenge.app.l 300 IN TXT "mvwfXPM6nlBHSQwHGqWRTXzvDEuSKLy8BibTPMSKXHA" _acme-challenge.app.l 300 IN TXT "mvwfXPM6nlBHSQwHGqWRTXzvDEuSKLy8BibTPMSKXHA"
_acme-challenge.app 300 IN TXT "SEAAW9v1r_gKgC9nyh4COloffktc-YjJKqt2NSkPU7Y" _acme-challenge.app 300 IN TXT "SEAAW9v1r_gKgC9nyh4COloffktc-YjJKqt2NSkPU7Y"
_acme-challenge.mcp 300 IN TXT "-TGB3voLmbRPvlVghG74Keb3Skqlq0mRqxSexA4umm4" _acme-challenge.mcp 300 IN TXT "-TGB3voLmbRPvlVghG74Keb3Skqlq0mRqxSexA4umm4"
@ -58,4 +42,4 @@ _acme-challenge.mock-api 300 IN TXT "KehJ8tjPUUz5c43-Ewc8iBv_Exf3JJjSbaXrWEhiw6g
_acme-challenge 300 IN TXT "BbK7sPiEMhYBMaxSMyCQmqbL9zTfb3klFl4lcbipKsQ" _acme-challenge 300 IN TXT "BbK7sPiEMhYBMaxSMyCQmqbL9zTfb3klFl4lcbipKsQ"
_acme-challenge.auth 300 IN TXT "wYPRXeQdbLIetlJdqmk41yPGvgNjnTfEUa1nBMmvGgM" _acme-challenge.auth 300 IN TXT "wYPRXeQdbLIetlJdqmk41yPGvgNjnTfEUa1nBMmvGgM"
_acme-challenge.photos.mock-reso 300 IN TXT "IMnrty4nznAfRYib1anooATLTNoVsZ8UxwlQrgw12o4" _acme-challenge.photos.mock-reso 300 IN TXT "IMnrty4nznAfRYib1anooATLTNoVsZ8UxwlQrgw12o4"
_acme-challenge.mock-api.demo 300 IN TXT "rYEoJlrmu5pbmtj0dv7LUOLqgQNBVQLTnjqMxWV2NrE" _acme-challenge.mock-api.demo 300 IN TXT "rYEoJlrmu5pbmtj0dv7LUOLqgQNBVQLTnjqMxWV2NrE"

32
zones/inpect.pro.zone
View File

@ -1,29 +1,13 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for inpect.pro
; Source: zones/inpect.pro.zone ; Generated by mcp-vultr
$ORIGIN inpect.pro. $ORIGIN inpect.pro.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.inpect.pro. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME inpect.pro
@ 3600 IN NS ns5.he.net. 300 IN MX 10 inpect.pro
@ 300 IN A 74.91.22.234
* 300 IN CNAME inpect.pro.
@ 300 IN MX 10 inpect.pro.
_acme-challenge 300 IN TXT "ERZWm4IprjdR5YXus-BHtJmQ5q3tnd_HWy7S9JkZUIQ" _acme-challenge 300 IN TXT "ERZWm4IprjdR5YXus-BHtJmQ5q3tnd_HWy7S9JkZUIQ"
_acme-challenge 300 IN TXT "6aefAQtyBbf0HZZazNsmogvRb-7TEjv2EfG-ydfxTww" _acme-challenge 300 IN TXT "6aefAQtyBbf0HZZazNsmogvRb-7TEjv2EfG-ydfxTww"
_acme-challenge 300 IN TXT "sYEwgVBnqS5B3lL1IlKenuOHTB4dmFbMvYH7gN7HTOk" _acme-challenge 300 IN TXT "sYEwgVBnqS5B3lL1IlKenuOHTB4dmFbMvYH7gN7HTOk"

30
zones/inspect.monster.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for inspect.monster
; Source: zones/inspect.monster.zone ; Generated by mcp-vultr
$ORIGIN inspect.monster. $ORIGIN inspect.monster.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.inspect.monster. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME inspect.monster
@ 3600 IN NS ns5.he.net. 300 IN MX 10 inspect.monster
@ 300 IN A 74.91.22.234
* 300 IN CNAME inspect.monster.
@ 300 IN MX 10 inspect.monster.

34
zones/inspect.pics.zone
View File

@ -1,32 +1,18 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for inspect.pics
; Source: zones/inspect.pics.zone ; Generated by mcp-vultr
$ORIGIN inspect.pics. $ORIGIN inspect.pics.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.inspect.pics. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net.
@ 3600 IN NS ns2.he.net.
@ 3600 IN NS ns3.he.net.
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
300 IN NS ns1.vultr.com
300 IN NS ns2.vultr.com
l 300 IN A 127.0.0.1 l 300 IN A 127.0.0.1
*.l 300 IN A 127.0.0.1 *.l 300 IN A 127.0.0.1
@ 300 IN A 74.91.22.232 300 IN A 74.91.22.232
* 300 IN CNAME inspect.pics. * 300 IN CNAME inspect.pics
@ 300 IN MX 10 inspect.pics. 300 IN MX 10 inspect.pics
_acme-challenge 300 IN TXT "O76KUDoUq834H7foiWV2VXVO-XWWAx2mGm1Gt3YJtvQ" _acme-challenge 300 IN TXT "O76KUDoUq834H7foiWV2VXVO-XWWAx2mGm1Gt3YJtvQ"
_acme-challenge 300 IN TXT "0QRoK7IMPLfLffpv8aH8afyw6f9ssDb9NPbWJSJ66q8" _acme-challenge 300 IN TXT "0QRoK7IMPLfLffpv8aH8afyw6f9ssDb9NPbWJSJ66q8"
_acme-challenge.admin 300 IN TXT "i5VYntrsr97R142m7Xj7FJR4huFX1KGlQPgnQjHEeTk" _acme-challenge.admin 300 IN TXT "i5VYntrsr97R142m7Xj7FJR4huFX1KGlQPgnQjHEeTk"
admin 300 IN CNAME inspect.pics. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
; (parent name has _acme-challenge children, so wildcard would skip it)
admin 300 IN CNAME inspect.pics

42
zones/inspect.systems.zone
View File

@ -1,27 +1,11 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for inspect.systems
; Source: zones/inspect.systems.zone ; Generated by mcp-vultr
$ORIGIN inspect.systems. $ORIGIN inspect.systems.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.inspect.systems. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.232
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 74.91.22.232
properties 300 IN A 108.61.23.129 properties 300 IN A 108.61.23.129
nielsen-inspections 300 IN A 74.91.22.232 nielsen-inspections 300 IN A 74.91.22.232
vh.l 300 IN A 127.0.0.1 vh.l 300 IN A 127.0.0.1
@ -32,12 +16,12 @@ vh 300 IN A 74.91.22.232
*.vh 300 IN A 74.91.22.232 *.vh 300 IN A 74.91.22.232
maps 300 IN A 74.91.22.232 maps 300 IN A 74.91.22.232
*.pitch.l 300 IN A 127.0.0.1 *.pitch.l 300 IN A 127.0.0.1
api.properties 300 IN CNAME properties.inspect.systems. api.properties 300 IN CNAME properties.inspect.systems
*.maps 300 IN CNAME maps.inspect.systems. *.maps 300 IN CNAME maps.inspect.systems
api 300 IN CNAME inspect.systems. api 300 IN CNAME inspect.systems
crm 300 IN CNAME inspect.systems. crm 300 IN CNAME inspect.systems
*.crm 300 IN CNAME crm.inspect.systems. *.crm 300 IN CNAME crm.inspect.systems
@ 300 IN MX 10 inspect.systems. 300 IN MX 10 inspect.systems
_acme-challenge.operate 300 IN TXT "OSIKGstLTQz9frXXRU-3-OvTlU8dLoWtcegc_CdGCbc" _acme-challenge.operate 300 IN TXT "OSIKGstLTQz9frXXRU-3-OvTlU8dLoWtcegc_CdGCbc"
_acme-challenge.operate 300 IN TXT "WNomXhVF1Ymh5NrLhJ10vp2i9o8ia6KWHt_xIRlp4as" _acme-challenge.operate 300 IN TXT "WNomXhVF1Ymh5NrLhJ10vp2i9o8ia6KWHt_xIRlp4as"
_acme-challenge 300 IN TXT "FiVckyB6dI47M5w-gljo2mK0P2xR3ydjJx0CtC4lHUM" _acme-challenge 300 IN TXT "FiVckyB6dI47M5w-gljo2mK0P2xR3ydjJx0CtC4lHUM"
@ -46,8 +30,8 @@ _acme-challenge 300 IN TXT "1qLCDrKw1nNkCQ5NWSZlkF2yU85qiBday89IaAd_QdA"
_acme-challenge.rentcast 300 IN TXT "4QPeaV-7P8XwGKSARcgqil1IwWwnLvSO5t3RM0wnN8I" _acme-challenge.rentcast 300 IN TXT "4QPeaV-7P8XwGKSARcgqil1IwWwnLvSO5t3RM0wnN8I"
_acme-challenge.properties 300 IN TXT "2vdt3jDH9cnVlTURGi32dpT0fTMJxGLFTif8da_HwFo" _acme-challenge.properties 300 IN TXT "2vdt3jDH9cnVlTURGi32dpT0fTMJxGLFTif8da_HwFo"
google-site-verification 300 IN TXT "_EJ1YRy_aoJLEGhHK8QYyUgcOudM7TgQHiqr" google-site-verification 300 IN TXT "_EJ1YRy_aoJLEGhHK8QYyUgcOudM7TgQHiqr"
@ 300 IN TXT "google-site-verification=_EJ1YRy_aoJLEGhHK8QYyUgcOudM7TgQHiqry87x7Hk" 300 IN TXT "google-site-verification=_EJ1YRy_aoJLEGhHK8QYyUgcOudM7TgQHiqry87x7Hk"
_acme-challenge.hsp.l 300 IN TXT "85HMpvUyNzHQtvy9Z7vUE7Sfpe96kVYbkqeazdPEiGQ" _acme-challenge.hsp.l 300 IN TXT "85HMpvUyNzHQtvy9Z7vUE7Sfpe96kVYbkqeazdPEiGQ"
_acme-challenge.auth.l 300 IN TXT "1I0ITcegP5yRd6dwevuw00WWyjSrGu7NQq2pxOnQhLY" _acme-challenge.auth.l 300 IN TXT "1I0ITcegP5yRd6dwevuw00WWyjSrGu7NQq2pxOnQhLY"
_acme-challenge.api.properties 300 IN TXT "8LS8rK4pP-dJ7lVtXjXRWBEvPPBxC2CwEZ5SWuF-6Lw" _acme-challenge.api.properties 300 IN TXT "8LS8rK4pP-dJ7lVtXjXRWBEvPPBxC2CwEZ5SWuF-6Lw"
_acme-challenge.mail.hsp.l 300 IN TXT "grD5BUnt_VxhvY200OOPZQQzZAZj06GtUK5kSap0jGQ" _acme-challenge.mail.hsp.l 300 IN TXT "grD5BUnt_VxhvY200OOPZQQzZAZj06GtUK5kSap0jGQ"

32
zones/inspects.homes.zone
View File

@ -1,29 +1,13 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for inspects.homes
; Source: zones/inspects.homes.zone ; Generated by mcp-vultr
$ORIGIN inspects.homes. $ORIGIN inspects.homes.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.inspects.homes. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME inspects.homes
@ 3600 IN NS ns5.he.net. 300 IN MX 10 inspects.homes
@ 300 IN A 74.91.22.234
* 300 IN CNAME inspects.homes.
@ 300 IN MX 10 inspects.homes.
_acme-challenge 300 IN TXT "7mrEVPlDNmCMXoxghHwuNrj3FHPavpiPnMEcTpfoH_0" _acme-challenge 300 IN TXT "7mrEVPlDNmCMXoxghHwuNrj3FHPavpiPnMEcTpfoH_0"
_acme-challenge 300 IN TXT "Y5Og2bzxdWDvvGLQlkXXpLy2xKIJMuXV3WTpBzmhHiY" _acme-challenge 300 IN TXT "Y5Og2bzxdWDvvGLQlkXXpLy2xKIJMuXV3WTpBzmhHiY"
_acme-challenge 300 IN TXT "FbCMdIZpiZlR4CBqBMkGuTll6qwJFE-BwcFJSQHrkcE" _acme-challenge 300 IN TXT "FbCMdIZpiZlR4CBqBMkGuTll6qwJFE-BwcFJSQHrkcE"

30
zones/jobsite.homes.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for jobsite.homes
; Source: zones/jobsite.homes.zone ; Generated by mcp-vultr
$ORIGIN jobsite.homes. $ORIGIN jobsite.homes.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.jobsite.homes. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 108.61.23.129
@ 3600 IN NS ns4.he.net. * 300 IN CNAME jobsite.homes
@ 3600 IN NS ns5.he.net. 300 IN MX 10 jobsite.homes
@ 300 IN A 108.61.23.129
* 300 IN CNAME jobsite.homes.
@ 300 IN MX 10 jobsite.homes.

34
zones/kg7q.cc.zone
View File

@ -1,28 +1,12 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for kg7q.cc
; Source: zones/kg7q.cc.zone ; Generated by mcp-vultr
$ORIGIN kg7q.cc. $ORIGIN kg7q.cc.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.kg7q.cc. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 64.177.113.31
@ 3600 IN NS ns4.he.net. *.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
@ 3600 IN NS ns5.he.net. l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
* 300 IN CNAME kg7q.cc
300 IN MX 10 mail.supported.systems
@ 300 IN A 64.177.113.31
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
* 300 IN CNAME kg7q.cc.
@ 300 IN MX 10 mail.supported.systems.

36
zones/log.doctor.zone
View File

@ -1,30 +1,16 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for log.doctor
; Source: zones/log.doctor.zone ; Generated by mcp-vultr
$ORIGIN log.doctor. $ORIGIN log.doctor.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.log.doctor. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.226
@ 3600 IN NS ns4.he.net. * 300 IN CNAME log.doctor
@ 3600 IN NS ns5.he.net. 300 IN MX 10 log.doctor
@ 300 IN A 74.91.22.226
* 300 IN CNAME log.doctor.
@ 300 IN MX 10 log.doctor.
_acme-challenge.app 300 IN TXT "y2ZR60rA40x7LtMubTbAZNNubTCIHm36_FT0dTZ6e9E" _acme-challenge.app 300 IN TXT "y2ZR60rA40x7LtMubTbAZNNubTCIHm36_FT0dTZ6e9E"
_acme-challenge.docs 300 IN TXT "5lVC4dW_6dd8ir0eNION32rSBVTl1WXL69QRzaiJ8ds" _acme-challenge.docs 300 IN TXT "5lVC4dW_6dd8ir0eNION32rSBVTl1WXL69QRzaiJ8ds"
app 300 IN CNAME log.doctor. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
docs 300 IN CNAME log.doctor. ; (parent name has _acme-challenge children, so wildcard would skip it)
app 300 IN CNAME log.doctor
docs 300 IN CNAME log.doctor

32
zones/lukascrockett.com.zone
View File

@ -1,30 +1,14 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for lukascrockett.com
; Source: zones/lukascrockett.com.zone ; Generated by mcp-vultr
$ORIGIN lukascrockett.com. $ORIGIN lukascrockett.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.lukascrockett.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 74.91.22.234
mail 3600 IN A 66.42.75.247 mail 3600 IN A 66.42.75.247
* 300 IN CNAME lukascrockett.com. * 300 IN CNAME lukascrockett.com
@ 300 IN MX 10 mail.supported.systems. 300 IN MX 10 mail.supported.systems
_acme-challenge 300 IN TXT "YrLNcgbxEOPdEE8s-Ba4w0iHVVSWTX3uQQQHk8Xrgwo" _acme-challenge 300 IN TXT "YrLNcgbxEOPdEE8s-Ba4w0iHVVSWTX3uQQQHk8Xrgwo"
_acme-challenge 300 IN TXT "Gq03noaghtCkdjgQQUPf6CacZaYqFuOMLJLyws9wibM" _acme-challenge 300 IN TXT "Gq03noaghtCkdjgQQUPf6CacZaYqFuOMLJLyws9wibM"
_acme-challenge 300 IN TXT "smQymDPT3Ly1knxl9gbe0X6fq2IW95r6j03SL3z-C98" _acme-challenge 300 IN TXT "smQymDPT3Ly1knxl9gbe0X6fq2IW95r6j03SL3z-C98"
@ -35,4 +19,4 @@ _acme-challenge 300 IN TXT "VSvPcX1tAvUhs7hMrvjJEaF-Agjt0GeA_EQCyB6MFEQ"
_acme-challenge 300 IN TXT "quP3aX7vxqc37_VL7y9vHBseSM_OaALkGQYqWFDKma0" _acme-challenge 300 IN TXT "quP3aX7vxqc37_VL7y9vHBseSM_OaALkGQYqWFDKma0"
_acme-challenge 300 IN TXT "6yXwyJweM1iTDLH-ONYIG1nudIM2qCtcOldtAcWmrmI" _acme-challenge 300 IN TXT "6yXwyJweM1iTDLH-ONYIG1nudIM2qCtcOldtAcWmrmI"
_acme-challenge 300 IN TXT "fji0kvYStzx22d3UDTS74EnuJGLQtBlexrsQt4qiV_4" _acme-challenge 300 IN TXT "fji0kvYStzx22d3UDTS74EnuJGLQtBlexrsQt4qiV_4"
_acme-challenge 300 IN TXT "uTYNsXtezmVIZnPqHMjMYi-3zYPzCVV8uRYoZsREJxk" _acme-challenge 300 IN TXT "uTYNsXtezmVIZnPqHMjMYi-3zYPzCVV8uRYoZsREJxk"

50
zones/malloys.us.zone
View File

@ -1,38 +1,22 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for malloys.us
; Source: zones/malloys.us.zone ; Generated by mcp-vultr
$ORIGIN malloys.us. $ORIGIN malloys.us.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.malloys.us. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. dev.mary 300 IN CNAME rpm-bullet.mer.idahomuellers.net
@ 3600 IN NS ns5.he.net. * 300 IN CNAME malloys.us
*.dev.mary 300 IN CNAME dev.mary.malloys.us
vault 300 IN CNAME idahomuellers.fortiddns.com
@ 300 IN A 74.91.22.234 300 IN MX 10 smtp.google.com
dev.mary 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
* 300 IN CNAME malloys.us.
*.dev.mary 300 IN CNAME dev.mary.malloys.us.
vault 300 IN CNAME idahomuellers.fortiddns.com.
@ 300 IN MX 10 smtp.google.com.
dkim._domainkey 300 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioX3DstYBuThEEyFs/o7m4HqsaImxMJRC7o12FvX90btr7c3RXkvRzY9sawhW3O0XmhfaJfZ/Gho0ng2RwKLEdYQcnoSJaYwV+3ERvdDBwlDgBNgUs9ODmP10HELpsgRg+sNoBClZNXXuT+pkuQhRpvVz9KQWRSsHvhh5ZUCTmx4vdC9WskvfqWxgC39qScEBLylqoCYjkzIk+ByYc8X9rSUzKZ2HaHMLTlzei1k16QiLgwPHa8QRPDWsH8joIg8XW3SiLDRrwfub+lZRe5d7V+13HO76k9LXMNzG4kSAwxvDMWnfD2iki3x7tQ/CFfdcsLUDfbuRy7d3JKwMZDsbQIDAQAB" dkim._domainkey 300 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioX3DstYBuThEEyFs/o7m4HqsaImxMJRC7o12FvX90btr7c3RXkvRzY9sawhW3O0XmhfaJfZ/Gho0ng2RwKLEdYQcnoSJaYwV+3ERvdDBwlDgBNgUs9ODmP10HELpsgRg+sNoBClZNXXuT+pkuQhRpvVz9KQWRSsHvhh5ZUCTmx4vdC9WskvfqWxgC39qScEBLylqoCYjkzIk+ByYc8X9rSUzKZ2HaHMLTlzei1k16QiLgwPHa8QRPDWsH8joIg8XW3SiLDRrwfub+lZRe5d7V+13HO76k9LXMNzG4kSAwxvDMWnfD2iki3x7tQ/CFfdcsLUDfbuRy7d3JKwMZDsbQIDAQAB"
_acme-challenge.cp 300 IN TXT "I8y77h78LeuG7H8CpyELFfgHjfWBcd0VRkPAYboV5Mg" _acme-challenge.cp 300 IN TXT "I8y77h78LeuG7H8CpyELFfgHjfWBcd0VRkPAYboV5Mg"
_acme-challenge.cp-sandbox 300 IN TXT "LUNk008FKra7ifgL61DV681kmo4wThRJb6zG4t1mDww" _acme-challenge.cp-sandbox 300 IN TXT "LUNk008FKra7ifgL61DV681kmo4wThRJb6zG4t1mDww"
_acme-challenge.cp 300 IN TXT "d3iE6aJJRzKE3iFajLg_67oYeskj_XLDNuxKt6BuG3c" _acme-challenge.cp 300 IN TXT "d3iE6aJJRzKE3iFajLg_67oYeskj_XLDNuxKt6BuG3c"
@ 300 IN TXT "v=spf1 include:_spf.google.com ~all" 300 IN TXT "v=spf1 include:_spf.google.com ~all"
@ 300 IN TXT "v=DMARC1; p=none; rua=mailto:dmarc@malloys.us" 300 IN TXT "v=DMARC1; p=none; rua=mailto:dmarc@malloys.us"
_acme-challenge 300 IN TXT "dFdOw5R4dkuNvN0SokI5v5cQbIihwCyiHu_gIxzbAo0" _acme-challenge 300 IN TXT "dFdOw5R4dkuNvN0SokI5v5cQbIihwCyiHu_gIxzbAo0"
_acme-challenge 300 IN TXT "2ErkGT83BzfrsCKFhutetQMIsnzIwcvTKJ8kkcfcJ8k" _acme-challenge 300 IN TXT "2ErkGT83BzfrsCKFhutetQMIsnzIwcvTKJ8kkcfcJ8k"
_acme-challenge 300 IN TXT "UEsEmtEazgpBNfB_qbCNqG1r9rKWUvzyoCQHpTvYPQA" _acme-challenge 300 IN TXT "UEsEmtEazgpBNfB_qbCNqG1r9rKWUvzyoCQHpTvYPQA"
@ -54,7 +38,9 @@ _acme-challenge 300 IN TXT "hPz_OIZGc2qyHrNMGkPCXDf4ML4bv67P_ojmb-ed6gM"
_acme-challenge 300 IN TXT "mzrirf7ykU_V_6mh38Q664h_yg3AEVA88tQRE7YGOUc" _acme-challenge 300 IN TXT "mzrirf7ykU_V_6mh38Q664h_yg3AEVA88tQRE7YGOUc"
_acme-challenge 300 IN TXT "v4oJppz3N-D9IEBw0faQ54pg7WsLmDNua7bVgQWVmpw" _acme-challenge 300 IN TXT "v4oJppz3N-D9IEBw0faQ54pg7WsLmDNua7bVgQWVmpw"
_acme-challenge 300 IN TXT "OlN30ETZq9etulzl9lOMTDvWQ4Frpq2NlyGOx5kpB_I" _acme-challenge 300 IN TXT "OlN30ETZq9etulzl9lOMTDvWQ4Frpq2NlyGOx5kpB_I"
@ 300 IN TXT "openai-domain-verification=dv-pa82Ps1fOTq50Ad2crkhWWTv" 300 IN TXT "openai-domain-verification=dv-pa82Ps1fOTq50Ad2crkhWWTv"
cp 300 IN CNAME malloys.us. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
cp-sandbox 300 IN CNAME malloys.us. ; (parent name has _acme-challenge children, so wildcard would skip it)
mary 300 IN CNAME malloys.us. cp 300 IN CNAME malloys.us
cp-sandbox 300 IN CNAME malloys.us
mary 300 IN CNAME malloys.us

30
zones/mcp.website.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for mcp.website
; Source: zones/mcp.website.zone ; Generated by mcp-vultr
$ORIGIN mcp.website. $ORIGIN mcp.website.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.mcp.website. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 64.177.113.31
@ 3600 IN NS ns4.he.net. * 300 IN CNAME mcp.website
@ 3600 IN NS ns5.he.net. 300 IN MX 10 mcp.website
@ 300 IN A 64.177.113.31
* 300 IN CNAME mcp.website.
@ 300 IN MX 10 mcp.website.

30
zones/mcpdash.wtf.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for mcpdash.wtf
; Source: zones/mcpdash.wtf.zone ; Generated by mcp-vultr
$ORIGIN mcpdash.wtf. $ORIGIN mcpdash.wtf.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.mcpdash.wtf. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 108.61.23.129
@ 3600 IN NS ns4.he.net. * 300 IN CNAME mcpdash.wtf
@ 3600 IN NS ns5.he.net. 300 IN MX 10 mcpdash.wtf
@ 300 IN A 108.61.23.129
* 300 IN CNAME mcpdash.wtf.
@ 300 IN MX 10 mcpdash.wtf.

34
zones/myhood.us.zone
View File

@ -1,30 +1,14 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for myhood.us
; Source: zones/myhood.us.zone ; Generated by mcp-vultr
$ORIGIN myhood.us. $ORIGIN myhood.us.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.myhood.us. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME myhood.us
@ 3600 IN NS ns5.he.net. autoconfig 300 IN CNAME mail.supported.systems
mail.supported.systems 300 IN MX 10 myhood.us
@ 300 IN A 74.91.22.234
* 300 IN CNAME myhood.us.
autoconfig 300 IN CNAME mail.supported.systems.
mail.supported.systems 300 IN MX 10 myhood.us.
myhood.us_report_dmarc.mail 300 IN TXT "v=DMARC1;" myhood.us_report_dmarc.mail 300 IN TXT "v=DMARC1;"
_dmarc 300 IN TXT "v=DMARC1; p=reject; rua=mailto:reports@mrpickett.com; adkim=s; aspf=s;" _dmarc 300 IN TXT "v=DMARC1; p=reject; rua=mailto:reports@mrpickett.com; adkim=s; aspf=s;"
_acme-challenge 300 IN TXT "uKPYK58a44s0kWpnppooML4E4MkptkgVGqvaUK5eWXw" _acme-challenge 300 IN TXT "uKPYK58a44s0kWpnppooML4E4MkptkgVGqvaUK5eWXw"
@ -42,4 +26,4 @@ _acme-challenge 300 IN TXT "dkzMydDeiX6a07LbM1O-KCkyTvNoEjMsH9SJETKygBE"
_acme-challenge 300 IN TXT "36vAmVKS_ALuL2kB1KlVMvz44WN2LKCb0tBmA43gXSo" _acme-challenge 300 IN TXT "36vAmVKS_ALuL2kB1KlVMvz44WN2LKCb0tBmA43gXSo"
_acme-challenge 300 IN TXT "BYICEu3hp5veDk1eCKQsrso36eq4uv-zGpqMszlWT6o" _acme-challenge 300 IN TXT "BYICEu3hp5veDk1eCKQsrso36eq4uv-zGpqMszlWT6o"
_acme-challenge 300 IN TXT "goItf43E0Yi_uZ6E-S0DxyxoA1v5o9FdHR6Tk9-avZ0" _acme-challenge 300 IN TXT "goItf43E0Yi_uZ6E-S0DxyxoA1v5o9FdHR6Tk9-avZ0"
_acme-challenge 300 IN TXT "4_XAQyLYKQNDV1Bs2CPHQt3FU4uo6g_rrwb5zuyMyNw" _acme-challenge 300 IN TXT "4_XAQyLYKQNDV1Bs2CPHQt3FU4uo6g_rrwb5zuyMyNw"

48
zones/nielsen-inspections.com.zone
View File

@ -1,39 +1,23 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for nielsen-inspections.com
; Source: zones/nielsen-inspections.com.zone ; Generated by mcp-vultr
$ORIGIN nielsen-inspections.com. $ORIGIN nielsen-inspections.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.nielsen-inspections.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net.
@ 3600 IN NS ns2.he.net.
@ 3600 IN NS ns3.he.net.
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
300 IN NS ns1.vultr.com
300 IN NS ns2.vultr.com
* 300 IN A 74.91.22.234 * 300 IN A 74.91.22.234
@ 300 IN A 74.91.22.234 300 IN A 74.91.22.234
new 300 IN A 74.91.22.232 new 300 IN A 74.91.22.232
74.91.22.232 300 IN A 74.91.22.232 74.91.22.232 300 IN A 74.91.22.232
l 300 IN A 127.0.0.1 l 300 IN A 127.0.0.1
*.l 300 IN A 127.0.0.1 *.l 300 IN A 127.0.0.1
supabase 300 IN CNAME supabase.supported.systems. supabase 300 IN CNAME supabase.supported.systems
quote 300 IN CNAME nielsen-inspections.inspect.systems. quote 300 IN CNAME nielsen-inspections.inspect.systems
docs 300 IN CNAME nielsen-inspections.inspect.systems. docs 300 IN CNAME nielsen-inspections.inspect.systems
docs-sandbox 300 IN CNAME nielsen-inspections.inspect.systems. docs-sandbox 300 IN CNAME nielsen-inspections.inspect.systems
@ 300 IN MX 10 mail.supported.systems. 300 IN MX 10 mail.supported.systems
nielsen-inspections.com_report._dmarc.mail 3600 IN TXT "v=DMARC1" nielsen-inspections.com_report._dmarc.mail 3600 IN TXT "v=DMARC1"
@ 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all" 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
dkim._domainkey 300 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGPt3zH0RxxDUW1Wg+3FOKIYNQy5vo/hvbPB/U6O7hh5K/SnQ2MDPfnL3B+Ur3kKmYFcSTdVMotr9Ds7wRJWFv49oK4f4VKxfoBD8Sh9GrJDNDM+g86h8M1v3cWKLdeRa+UczJDLRb9wwW8eRR17OQafqGupN0ZbsazbZwTrC5z/RZlLBtEMsIceWwHPhR+H3Bl9rH2t1RQSjbD2A9fM5EPXeVvzn9SwDpxgfMRfs7/k/prPASxW0/8Bun3k2BOzOjP/H4v509xTJOn/6S5eC2QJ47hw5XsjOu1j9Fy2YqUkgDpcrqLiS5K/7E+BSWURitfuxAamv+vkTfrbU3D0lQIDAQAB" dkim._domainkey 300 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGPt3zH0RxxDUW1Wg+3FOKIYNQy5vo/hvbPB/U6O7hh5K/SnQ2MDPfnL3B+Ur3kKmYFcSTdVMotr9Ds7wRJWFv49oK4f4VKxfoBD8Sh9GrJDNDM+g86h8M1v3cWKLdeRa+UczJDLRb9wwW8eRR17OQafqGupN0ZbsazbZwTrC5z/RZlLBtEMsIceWwHPhR+H3Bl9rH2t1RQSjbD2A9fM5EPXeVvzn9SwDpxgfMRfs7/k/prPASxW0/8Bun3k2BOzOjP/H4v509xTJOn/6S5eC2QJ47hw5XsjOu1j9Fy2YqUkgDpcrqLiS5K/7E+BSWURitfuxAamv+vkTfrbU3D0lQIDAQAB"
_acme-challenge.new 300 IN TXT "-hHWyBLh_3qyIy1gYFSifjgOAbmN2t3OU2I_232rVNU" _acme-challenge.new 300 IN TXT "-hHWyBLh_3qyIy1gYFSifjgOAbmN2t3OU2I_232rVNU"
_acme-challenge.new 300 IN TXT "WQbACLatgQG_0Z3IrbcMMjzOleV5El5NUp8gTJuHd0A" _acme-challenge.new 300 IN TXT "WQbACLatgQG_0Z3IrbcMMjzOleV5El5NUp8gTJuHd0A"
@ -58,7 +42,9 @@ _acme-challenge 300 IN TXT "_OarPKPxYMpsvT_VuAKVkJoxP1vQmqMMRESOwpPflbg"
_acme-challenge 300 IN TXT "06at-8AT6CKT6Cbn5JEfASqOyiqx2T-PfvYlg4O86Bo" _acme-challenge 300 IN TXT "06at-8AT6CKT6Cbn5JEfASqOyiqx2T-PfvYlg4O86Bo"
_acme-challenge 300 IN TXT "8YYbiZ4dEbfK0KKrVWl81ZCdamED1a9b_3we2JEl-rE" _acme-challenge 300 IN TXT "8YYbiZ4dEbfK0KKrVWl81ZCdamED1a9b_3we2JEl-rE"
_acme-challenge.files 300 IN TXT "nckNo7UBhAFgevwMvQ85niQIiXuU37FoLK3XVECZzfk" _acme-challenge.files 300 IN TXT "nckNo7UBhAFgevwMvQ85niQIiXuU37FoLK3XVECZzfk"
calendar 300 IN CNAME nielsen-inspections.com. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
cw 300 IN CNAME nielsen-inspections.com. ; (parent name has _acme-challenge children, so wildcard would skip it)
files 300 IN CNAME nielsen-inspections.com. calendar 300 IN CNAME nielsen-inspections.com
v2-calendar 300 IN CNAME nielsen-inspections.com. cw 300 IN CNAME nielsen-inspections.com
files 300 IN CNAME nielsen-inspections.com
v2-calendar 300 IN CNAME nielsen-inspections.com

32
zones/nielsens.world.zone
View File

@ -1,29 +1,13 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for nielsens.world
; Source: zones/nielsens.world.zone ; Generated by mcp-vultr
$ORIGIN nielsens.world. $ORIGIN nielsens.world.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.nielsens.world. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME nielsens.world
@ 3600 IN NS ns5.he.net. 300 IN MX 10 nielsens.world
@ 300 IN A 74.91.22.234
* 300 IN CNAME nielsens.world.
@ 300 IN MX 10 nielsens.world.
_acme-challenge 300 IN TXT "yp-IarvtiSb7qhW1xT6l3V7vZePbvgRmPJwYUKpT1uM" _acme-challenge 300 IN TXT "yp-IarvtiSb7qhW1xT6l3V7vZePbvgRmPJwYUKpT1uM"
_acme-challenge 300 IN TXT "P0qX-6q0E2i8boMN2k2P9QEFL8no62uJyQXKU6cd748" _acme-challenge 300 IN TXT "P0qX-6q0E2i8boMN2k2P9QEFL8no62uJyQXKU6cd748"
_acme-challenge 300 IN TXT "Rp394t0XdkqnnJqfBQpGQwKpFAbQn9-XJAd1V_rVoyg" _acme-challenge 300 IN TXT "Rp394t0XdkqnnJqfBQpGQwKpFAbQn9-XJAd1V_rVoyg"
@ -38,4 +22,4 @@ _acme-challenge 300 IN TXT "5N-B9TqOnm7ax5s_MLb2eYkEJHu16pR_5XbyCc4Ws3M"
_acme-challenge 300 IN TXT "cQD7ne1AEfylbTLsz0cu4WjzZTYYs4Sf2-Co5_xXyFc" _acme-challenge 300 IN TXT "cQD7ne1AEfylbTLsz0cu4WjzZTYYs4Sf2-Co5_xXyFc"
_acme-challenge 300 IN TXT "-qb5Ano9xU1Z1aAtZ16kInYKpItqjX0fQwm2rRLHXwg" _acme-challenge 300 IN TXT "-qb5Ano9xU1Z1aAtZ16kInYKpItqjX0fQwm2rRLHXwg"
_acme-challenge 300 IN TXT "t8qVdInrTstes_A-Cub-pVyMkk7PivPxvtNE59HTMNM" _acme-challenge 300 IN TXT "t8qVdInrTstes_A-Cub-pVyMkk7PivPxvtNE59HTMNM"
_acme-challenge 300 IN TXT "CcZ2OuKYLR80GT1zf8CiHvkfwVz8QJras98kMQIasKw" _acme-challenge 300 IN TXT "CcZ2OuKYLR80GT1zf8CiHvkfwVz8QJras98kMQIasKw"

34
zones/ourjob.site.zone
View File

@ -1,28 +1,12 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for ourjob.site
; Source: zones/ourjob.site.zone ; Generated by mcp-vultr
$ORIGIN ourjob.site. $ORIGIN ourjob.site.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.ourjob.site. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 108.61.23.129
@ 3600 IN NS ns4.he.net. l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
@ 3600 IN NS ns5.he.net. *.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
* 300 IN CNAME ourjob.site
300 IN MX 10 ourjob.site
@ 300 IN A 108.61.23.129
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
* 300 IN CNAME ourjob.site.
@ 300 IN MX 10 ourjob.site.

32
zones/paigemalloy.com.zone
View File

@ -1,29 +1,13 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for paigemalloy.com
; Source: zones/paigemalloy.com.zone ; Generated by mcp-vultr
$ORIGIN paigemalloy.com. $ORIGIN paigemalloy.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.paigemalloy.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME paigemalloy.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 paigemalloy.com
@ 300 IN A 74.91.22.234
* 300 IN CNAME paigemalloy.com.
@ 300 IN MX 10 paigemalloy.com.
_acme-challenge 300 IN TXT "YLoFC0o_ZDvk0Fz-pMJHpMPDz5IHNy_CCZq9gY0xcXk" _acme-challenge 300 IN TXT "YLoFC0o_ZDvk0Fz-pMJHpMPDz5IHNy_CCZq9gY0xcXk"
_acme-challenge 300 IN TXT "HKi0Whd31hGZjayLUZUE86_PF8RPvy-yghxbVdyoVoQ" _acme-challenge 300 IN TXT "HKi0Whd31hGZjayLUZUE86_PF8RPvy-yghxbVdyoVoQ"
_acme-challenge 300 IN TXT "l9F-TnZEcPXu63A2IsQkJxuqsN5QaovR21uGZhCqh1U" _acme-challenge 300 IN TXT "l9F-TnZEcPXu63A2IsQkJxuqsN5QaovR21uGZhCqh1U"
@ -35,4 +19,4 @@ _acme-challenge 300 IN TXT "Dr7s_BX6fHwmd2H6EbfnBWqC7D2enV3Kqp6r9gXiVSE"
_acme-challenge 300 IN TXT "BFOaEgEwoqmBLePqn2uEgXmhFJyFvik9Uw02kJcX4C4" _acme-challenge 300 IN TXT "BFOaEgEwoqmBLePqn2uEgXmhFJyFvik9Uw02kJcX4C4"
_acme-challenge 300 IN TXT "8K3qpw5zZ1M2GbCxWlgYdQxAVoZHcQzg-2rK_e7zRDQ" _acme-challenge 300 IN TXT "8K3qpw5zZ1M2GbCxWlgYdQxAVoZHcQzg-2rK_e7zRDQ"
_acme-challenge 300 IN TXT "UKnDm8Nj10v1UtHnPd4KtdewGkTBKgKNxH6ZTAg0WLM" _acme-challenge 300 IN TXT "UKnDm8Nj10v1UtHnPd4KtdewGkTBKgKNxH6ZTAg0WLM"
_acme-challenge 300 IN TXT "RnPOmkbwqpfZx0dZ8bC6u6wbpRJa5gIYup5jespMFfE" _acme-challenge 300 IN TXT "RnPOmkbwqpfZx0dZ8bC6u6wbpRJa5gIYup5jespMFfE"

30
zones/paythatway.com.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for paythatway.com
; Source: zones/paythatway.com.zone ; Generated by mcp-vultr
$ORIGIN paythatway.com. $ORIGIN paythatway.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.paythatway.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME paythatway.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 paythatway.com
@ 300 IN A 74.91.22.234
* 300 IN CNAME paythatway.com.
@ 300 IN MX 10 paythatway.com.

30
zones/powdercoatedcabinents.com.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for powdercoatedcabinents.com
; Source: zones/powdercoatedcabinents.com.zone ; Generated by mcp-vultr
$ORIGIN powdercoatedcabinents.com. $ORIGIN powdercoatedcabinents.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.powdercoatedcabinents.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME powdercoatedcabinents.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 powdercoatedcabinents.com
@ 300 IN A 74.91.22.234
* 300 IN CNAME powdercoatedcabinents.com.
@ 300 IN MX 10 powdercoatedcabinents.com.

30
zones/powdercoatedcabinet.com.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for powdercoatedcabinet.com
; Source: zones/powdercoatedcabinet.com.zone ; Generated by mcp-vultr
$ORIGIN powdercoatedcabinet.com. $ORIGIN powdercoatedcabinet.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.powdercoatedcabinet.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME powdercoatedcabinet.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 powdercoatedcabinet.com
@ 300 IN A 74.91.22.234
* 300 IN CNAME powdercoatedcabinet.com.
@ 300 IN MX 10 powdercoatedcabinet.com.

30
zones/powdercotedcabinets.com.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for powdercotedcabinets.com
; Source: zones/powdercotedcabinets.com.zone ; Generated by mcp-vultr
$ORIGIN powdercotedcabinets.com. $ORIGIN powdercotedcabinets.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.powdercotedcabinets.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME powdercotedcabinets.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 powdercotedcabinets.com
@ 300 IN A 74.91.22.234
* 300 IN CNAME powdercotedcabinets.com.
@ 300 IN MX 10 powdercotedcabinets.com.

30
zones/prezhub.com.zone
View File

@ -1,27 +1,11 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for prezhub.com
; Source: zones/prezhub.com.zone ; Generated by mcp-vultr
$ORIGIN prezhub.com. $ORIGIN prezhub.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.prezhub.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 149.248.39.194
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 149.248.39.194
dev 300 IN A 45.77.214.114 dev 300 IN A 45.77.214.114
cloud 3600 IN A 104.156.237.74 cloud 3600 IN A 104.156.237.74
dev2 300 IN A 149.248.33.94 dev2 300 IN A 149.248.33.94
@ -31,5 +15,5 @@ hspres 3600 IN A 172.30.10.11
hspres-dev 3600 IN A 172.30.30.10 hspres-dev 3600 IN A 172.30.30.10
upgrade 3600 IN A 45.32.230.148 upgrade 3600 IN A 45.32.230.148
python3 3600 IN A 66.42.65.192 python3 3600 IN A 66.42.65.192
* 300 IN CNAME prezhub.com. * 300 IN CNAME prezhub.com
@ 300 IN MX 10 prezhub.com. 300 IN MX 10 prezhub.com

32
zones/reviewr.guru.zone
View File

@ -1,28 +1,12 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for reviewr.guru
; Source: zones/reviewr.guru.zone ; Generated by mcp-vultr
$ORIGIN reviewr.guru. $ORIGIN reviewr.guru.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.reviewr.guru. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME reviewr.guru
@ 3600 IN NS ns5.he.net. 300 IN MX 10 reviewr.guru
@ 300 IN A 74.91.22.234
* 300 IN CNAME reviewr.guru.
@ 300 IN MX 10 reviewr.guru.
_acme-challenge 300 IN TXT "fGfh9Hq2rjOu_QM6xeU19akab6kBTU2d1hWVrJLyowY" _acme-challenge 300 IN TXT "fGfh9Hq2rjOu_QM6xeU19akab6kBTU2d1hWVrJLyowY"
_acme-challenge 300 IN TXT "Wpjy1LvjA94-LpIsp5PpyrXK-ZVQ-zlAoIhu2XR2gAg" _acme-challenge 300 IN TXT "Wpjy1LvjA94-LpIsp5PpyrXK-ZVQ-zlAoIhu2XR2gAg"

30
zones/rsvp-for.de.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for rsvp-for.de
; Source: zones/rsvp-for.de.zone ; Generated by mcp-vultr
$ORIGIN rsvp-for.de. $ORIGIN rsvp-for.de.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.rsvp-for.de. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME rsvp-for.de
@ 3600 IN NS ns5.he.net. 300 IN MX 10 rsvp-for.de
@ 300 IN A 74.91.22.234
* 300 IN CNAME rsvp-for.de.
@ 300 IN MX 10 rsvp-for.de.

42
zones/ryanmalloy.com.zone
View File

@ -1,33 +1,19 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for ryanmalloy.com
; Source: zones/ryanmalloy.com.zone ; Generated by mcp-vultr
$ORIGIN ryanmalloy.com. $ORIGIN ryanmalloy.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.ryanmalloy.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN NS ns.supported.systems
@ 3600 IN NS ns4.he.net. 300 IN A 108.61.23.129
@ 3600 IN NS ns5.he.net. l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
* 300 IN CNAME ryanmalloy.com
@ 300 IN NS ns.supported.systems. 300 IN MX 10 mail.supported.systems
@ 300 IN A 108.61.23.129 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
* 300 IN CNAME ryanmalloy.com.
@ 300 IN MX 10 mail.supported.systems.
@ 300 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
_dmarc 3600 IN TXT "v=DMARC1; p=quarantine; rua=mailto:reports@ryanmalloy.com; adkim=s; aspf=s;" _dmarc 3600 IN TXT "v=DMARC1; p=quarantine; rua=mailto:reports@ryanmalloy.com; adkim=s; aspf=s;"
_acme-challenge.c4ai 300 IN TXT "sjdm_4JFJfjMQL2ZFb6k-S99gKOnxloIlDrAj15uNkQ" _acme-challenge.c4ai 300 IN TXT "sjdm_4JFJfjMQL2ZFb6k-S99gKOnxloIlDrAj15uNkQ"
c4ai 300 IN CNAME ryanmalloy.com. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
; (parent name has _acme-challenge children, so wildcard would skip it)
c4ai 300 IN CNAME ryanmalloy.com

30
zones/screencast.systems.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for screencast.systems
; Source: zones/screencast.systems.zone ; Generated by mcp-vultr
$ORIGIN screencast.systems. $ORIGIN screencast.systems.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.screencast.systems. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME screencast.systems
@ 3600 IN NS ns5.he.net. 300 IN MX 10 screencast.systems
@ 300 IN A 74.91.22.234
* 300 IN CNAME screencast.systems.
@ 300 IN MX 10 screencast.systems.

38
zones/septic.report.zone
View File

@ -1,30 +1,14 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for septic.report
; Source: zones/septic.report.zone ; Generated by mcp-vultr
$ORIGIN septic.report. $ORIGIN septic.report.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.septic.report. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 108.61.23.129
@ 3600 IN NS ns4.he.net. *.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
@ 3600 IN NS ns5.he.net. l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
* 300 IN CNAME septic.report
permits 300 IN CNAME docker-2.supportedsystems.net
@ 300 IN A 108.61.23.129 *.permits 300 IN CNAME permits.septic.report
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net. 300 IN MX 10 septic.report
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
* 300 IN CNAME septic.report.
permits 300 IN CNAME docker-2.supportedsystems.net.
*.permits 300 IN CNAME permits.septic.report.
@ 300 IN MX 10 septic.report.

38
zones/sidejob.pro.zone
View File

@ -1,32 +1,18 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for sidejob.pro
; Source: zones/sidejob.pro.zone ; Generated by mcp-vultr
$ORIGIN sidejob.pro. $ORIGIN sidejob.pro.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.sidejob.pro. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 108.61.23.129
@ 3600 IN NS ns4.he.net. *.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
@ 3600 IN NS ns5.he.net. l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
* 300 IN CNAME sidejob.pro
300 IN MX 10 sidejob.pro
@ 300 IN A 108.61.23.129
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
* 300 IN CNAME sidejob.pro.
@ 300 IN MX 10 sidejob.pro.
_acme-challenge.api 300 IN TXT "a1zkQ7ukvloDCOuB5kCsxC1TWH2rRXKCCI88GJrwV84" _acme-challenge.api 300 IN TXT "a1zkQ7ukvloDCOuB5kCsxC1TWH2rRXKCCI88GJrwV84"
_acme-challenge.api 300 IN TXT "UIKc6hzCSLphH1kQtdGMspvWKcG-k4hXcPOOV6HrydA" _acme-challenge.api 300 IN TXT "UIKc6hzCSLphH1kQtdGMspvWKcG-k4hXcPOOV6HrydA"
_acme-challenge.api 300 IN TXT "GySOUk0DnGhgDKXDgUM-ggQudeENlQIi6jBPtb2O0EE" _acme-challenge.api 300 IN TXT "GySOUk0DnGhgDKXDgUM-ggQudeENlQIi6jBPtb2O0EE"
api 300 IN CNAME sidejob.pro. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
; (parent name has _acme-challenge children, so wildcard would skip it)
api 300 IN CNAME sidejob.pro

32
zones/spencernewbolt.com.zone
View File

@ -1,29 +1,13 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for spencernewbolt.com
; Source: zones/spencernewbolt.com.zone ; Generated by mcp-vultr
$ORIGIN spencernewbolt.com. $ORIGIN spencernewbolt.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.spencernewbolt.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME spencernewbolt.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 spencernewbolt.com
@ 300 IN A 74.91.22.234
* 300 IN CNAME spencernewbolt.com.
@ 300 IN MX 10 spencernewbolt.com.
_acme-challenge 300 IN TXT "7LRHziqmBhlugdqQkYZXApqUvxiBge0778ytQD1tpTE" _acme-challenge 300 IN TXT "7LRHziqmBhlugdqQkYZXApqUvxiBge0778ytQD1tpTE"
_acme-challenge 300 IN TXT "jLCV5ppfiEtaQgi1gJhrz3wjJxToz-K3rvipV1V15VA" _acme-challenge 300 IN TXT "jLCV5ppfiEtaQgi1gJhrz3wjJxToz-K3rvipV1V15VA"
_acme-challenge 300 IN TXT "xAopkrs3dtpclwG4xsFxJel0bonXEaik4AO2V45H7CE" _acme-challenge 300 IN TXT "xAopkrs3dtpclwG4xsFxJel0bonXEaik4AO2V45H7CE"
@ -35,4 +19,4 @@ _acme-challenge 300 IN TXT "i73WUBm7JxVmoIMS4U-b0MIKIYsM0O-XVCQWOj2dJrU"
_acme-challenge 300 IN TXT "HZ-VtFzV2KqB2o4cIcxI2Z-Hg2f39I1YtuhsKIreEZY" _acme-challenge 300 IN TXT "HZ-VtFzV2KqB2o4cIcxI2Z-Hg2f39I1YtuhsKIreEZY"
_acme-challenge 300 IN TXT "OZvWikr-Q0gDjAW0o5Ka-vDKO7DwLPjLsn_SiKx3rXc" _acme-challenge 300 IN TXT "OZvWikr-Q0gDjAW0o5Ka-vDKO7DwLPjLsn_SiKx3rXc"
_acme-challenge 300 IN TXT "YbWH161Cf4IWHhjeBg0E0iZsLZiIaxABS-dnz9KhCYE" _acme-challenge 300 IN TXT "YbWH161Cf4IWHhjeBg0E0iZsLZiIaxABS-dnz9KhCYE"
_acme-challenge 300 IN TXT "-2-QqVRhx86FWbMlO-3e3Dasv_hadKc4sbOpX_9V_eg" _acme-challenge 300 IN TXT "-2-QqVRhx86FWbMlO-3e3Dasv_hadKc4sbOpX_9V_eg"

127
zones/supported.systems.zone
View File

@ -1,37 +1,24 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for supported.systems
; Source: zones/supported.systems.zone ; Generated by mcp-vultr
$ORIGIN supported.systems. $ORIGIN supported.systems.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.supported.systems. (
2026052103 ; serial — bump per change (CalVer YYYYMMDDNN; bumped manually post-retirement of make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.he.net
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.he.net
@ 3600 IN NS ns3.he.net. 300 IN NS ns3.he.net
@ 3600 IN NS ns4.he.net. 300 IN NS ns4.he.net
@ 3600 IN NS ns5.he.net. 300 IN NS ns5.he.net
300 IN A 108.61.23.129
@ 300 IN A 108.61.23.129
ns 300 IN AAAA 2001:19f0:5c00:4daa:5400:06ff:fe2d:38fa ns 300 IN AAAA 2001:19f0:5c00:4daa:5400:06ff:fe2d:38fa
ns 300 IN A 64.177.113.227 ns 300 IN A 64.177.113.227
mail 300 IN A 155.138.160.10 mail 300 IN A 155.138.160.10
old-mailu 300 IN A 66.42.75.247 old-mailu 300 IN A 66.42.75.247
ssh 300 IN A 149.28.207.111 ssh 300 IN A 45.77.1.152
git 300 IN CNAME git.supportedsystems.net. git 300 IN CNAME git.supportedsystems.net
* 60 IN A 108.61.23.129 * 60 IN A 108.61.23.129
up 300 IN A 45.63.92.95 up 300 IN A 45.63.92.95
vpn 300 IN CNAME ssh.supported.systems. vpn 300 IN A 45.77.1.152
web-bmh-servicedesk.bmh 300 IN CNAME ssh.supported.systems. web-bmh-servicedesk.bmh 300 IN A 45.77.1.152
cdn 300 IN A 155.138.192.181 cdn 300 IN A 155.138.192.181
server1 300 IN A 45.76.231.166 server1 300 IN A 45.76.231.166
docker-1 300 IN A 108.61.229.209 docker-1 300 IN A 108.61.229.209
@ -87,59 +74,59 @@ ollama-a40ls-1 300 IN A 96.30.196.136
ollama-gh200-1 300 IN A 155.138.192.146 ollama-gh200-1 300 IN A 155.138.192.146
ollama-gh200-2 300 IN A 155.138.229.176 ollama-gh200-2 300 IN A 155.138.229.176
ollama-gh200-3 300 IN A 144.202.23.41 ollama-gh200-3 300 IN A 144.202.23.41
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net. l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net. *.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
twilio.sip 300 IN A 108.61.23.129 twilio.sip 300 IN A 108.61.23.129
cucm-pub.phones 300 IN A 192.168.1.128 cucm-pub.phones 300 IN A 192.168.1.128
cucm-sub1.phones 300 IN A 192.168.1.129 cucm-sub1.phones 300 IN A 192.168.1.129
ccx-pub.phones 300 IN A 192.168.1.130 ccx-pub.phones 300 IN A 192.168.1.130
ccx-sub1.phones 300 IN A 192.168.1.131 ccx-sub1.phones 300 IN A 192.168.1.131
autoconfig 3600 IN CNAME mail.supported.systems. autoconfig 3600 IN CNAME mail.supported.systems
autodiscover 300 IN CNAME mail.supported.systems. autodiscover 300 IN CNAME mail.supported.systems
imap 300 IN CNAME mail.supported.systems. imap 300 IN CNAME mail.supported.systems
smtp 300 IN CNAME mail.supported.systems. smtp 300 IN CNAME mail.supported.systems
pop 300 IN CNAME mail.supported.systems. pop 300 IN CNAME mail.supported.systems
webmail 300 IN CNAME mail.supported.systems. webmail 300 IN CNAME mail.supported.systems
*.vpn 300 IN CNAME vpn.supported.systems. *.vpn 300 IN CNAME vpn.supported.systems
app.mcpmc-1.l 300 IN CNAME mpmc-1.l.supported.systems. app.mcpmc-1.l 300 IN CNAME mpmc-1.l.supported.systems
auth.llm-fusion-mcp.l 300 IN CNAME llm-fusion-mcp.l.supported.systems. auth.llm-fusion-mcp.l 300 IN CNAME llm-fusion-mcp.l.supported.systems
*.llm-fusion-mcp.l 300 IN CNAME llm-fusion-mcp.l.supported.systems. *.llm-fusion-mcp.l 300 IN CNAME llm-fusion-mcp.l.supported.systems
*.mcpmc-1.l 300 IN CNAME mcpmc-1.l.supported.systems. *.mcpmc-1.l 300 IN CNAME mcpmc-1.l.supported.systems
*.unger-todo.l 300 IN CNAME unger-todo.l.supported.systems. *.unger-todo.l 300 IN CNAME unger-todo.l.supported.systems
*.tigerstyle.l 300 IN CNAME tigerstyle.l.supported.systems. *.tigerstyle.l 300 IN CNAME tigerstyle.l.supported.systems
*.marcia.l 300 IN CNAME marcia.l.supported.systems. *.marcia.l 300 IN CNAME marcia.l.supported.systems
*.mcp-vultr.l 300 IN CNAME mcp-vultr.l.supported.systems. *.mcp-vultr.l 300 IN CNAME mcp-vultr.l.supported.systems
*.room-scanner.l 300 IN CNAME room-scanner.l.supported.systems. *.room-scanner.l 300 IN CNAME room-scanner.l.supported.systems
*.pages.l 300 IN CNAME pages.l.supported.systems. *.pages.l 300 IN CNAME pages.l.supported.systems
*.mcp-client-test.l 300 IN CNAME mcp-client-test.l.supported.systems. *.mcp-client-test.l 300 IN CNAME mcp-client-test.l.supported.systems
*.magicplan.l 300 IN CNAME magicplan.l.supported.systems. *.magicplan.l 300 IN CNAME magicplan.l.supported.systems
*.whereis.l 300 IN CNAME l.supported.systems. *.whereis.l 300 IN CNAME l.supported.systems
*.leads.l 300 IN CNAME l.supported.systems. *.leads.l 300 IN CNAME l.supported.systems
*.portal.l 300 IN CNAME portal.l.supported.systems. *.portal.l 300 IN CNAME portal.l.supported.systems
*.www.l 300 IN CNAME www.l.supported.systems. *.www.l 300 IN CNAME www.l.supported.systems
*.matrix.l 300 IN CNAME matrix.l.supported.systems. *.matrix.l 300 IN CNAME matrix.l.supported.systems
ollama 300 IN CNAME gpu-1.supported.systems. ollama 300 IN CNAME gpu-1.supported.systems
speech 300 IN CNAME gpu-2.supported.systems. speech 300 IN CNAME gpu-2.supported.systems
chat.ollama 300 IN CNAME gpu-1.supported.systems. chat.ollama 300 IN CNAME gpu-1.supported.systems
*.hure 300 IN CNAME hure.supported.systems. *.hure 300 IN CNAME hure.supported.systems
dafuk 300 IN CNAME hure.supported.systems. dafuk 300 IN CNAME hure.supported.systems
*.tigerstyle 300 IN CNAME tigerstyle.supported.systems. *.tigerstyle 300 IN CNAME tigerstyle.supported.systems
ei.l 300 IN CNAME idx.l.supported.systems. ei.l 300 IN CNAME idx.l.supported.systems
vllm 300 IN CNAME gpu-0.supported.systems. vllm 300 IN CNAME gpu-0.supported.systems
*.gpu-0 300 IN CNAME gpu-0.supported.systems. *.gpu-0 300 IN CNAME gpu-0.supported.systems
llm 300 IN CNAME lb.gpu.supported.systems. llm 300 IN CNAME lb.gpu.supported.systems
*.sip 300 IN CNAME sip.supported.systems. *.sip 300 IN CNAME sip.supported.systems
s120 300 IN CNAME docker-2.supportedsystems.net. s120 300 IN CNAME docker-2.supportedsystems.net
docs 300 IN CNAME docker-2.supportedsystems.net. docs 300 IN CNAME docker-2.supportedsystems.net
*.docs 300 IN CNAME docker-2.supportedsystems.net. *.docs 300 IN CNAME docker-2.supportedsystems.net
mcbluetooth 300 IN CNAME docker-2.supportedsystems.net. mcbluetooth 300 IN CNAME docker-2.supportedsystems.net
@ 300 IN MX 10 mail.supported.systems. 300 IN MX 10 mail.supported.systems
@ 3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all" 3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
@ 3600 IN TXT "google-site-verification=15bc_L-lCtt0kqBDSaxT92-ftzENYEfMuHv3g7yVNS8" 3600 IN TXT "google-site-verification=15bc_L-lCtt0kqBDSaxT92-ftzENYEfMuHv3g7yVNS8"
_dmarc 3600 IN TXT "v=DMARC1; p=reject; rua=mailto:reports@supported.systems; adkim=s; aspf=s;" _dmarc 3600 IN TXT "v=DMARC1; p=reject; rua=mailto:reports@supported.systems; adkim=s; aspf=s;"
dkim._domainkey 3600 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGPt3zH0RxxDUW1Wg+3FOKIYNQy5vo/hvbPB/U6O7hh5K/SnQ2MDPfnL3B+Ur3kKmYFcSTdVMotr9Ds7wRJWFv49oK4f4VKxfoBD8Sh9GrJDNDM+g86h8M1v3cWKLdeRa+UczJDLRb9wwW8eRR17OQafqGupN0ZbsazbZwTrC5z/RZlLBtEMsIceWwHP hR+H3Bl9rH2t1RQSjbD2A9fM5EPXeVvzn9SwDpxgfMRfs7/k/prPASxW0/8Bun3k2BOzOjP/H4v509xTJOn/6S5eC2QJ47hw5XsjOu1j9Fy2YqUkgDpcrqLiS5K/7E+BSWURitfuxAamv+vkTfrbU3D0lQIDAQAB" dkim._domainkey 3600 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGPt3zH0RxxDUW1Wg+3FOKIYNQy5vo/hvbPB/U6O7hh5K/SnQ2MDPfnL3B+Ur3kKmYFcSTdVMotr9Ds7wRJWFv49oK4f4VKxfoBD8Sh9GrJDNDM+g86h8M1v3cWKLdeRa+UczJDLRb9wwW8eRR17OQafqGupN0ZbsazbZwTrC5z/RZlLBtEMsIceWwHP hR+H3Bl9rH2t1RQSjbD2A9fM5EPXeVvzn9SwDpxgfMRfs7/k/prPASxW0/8Bun3k2BOzOjP/H4v509xTJOn/6S5eC2QJ47hw5XsjOu1j9Fy2YqUkgDpcrqLiS5K/7E+BSWURitfuxAamv+vkTfrbU3D0lQIDAQAB"
supported.systems._report._dmarc.mail 3600 IN TXT "v=DMARC1;" supported.systems._report._dmarc.mail 3600 IN TXT "v=DMARC1;"
@ 3600 IN TXT "openai-domain-verification=dv-U5gJT4fmfg0LnrKfBgmv5vt6" 3600 IN TXT "openai-domain-verification=dv-U5gJT4fmfg0LnrKfBgmv5vt6"
_25._tcp.mail 86400 IN TXT "2 1 1 0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3" _25._tcp.mail 86400 IN TXT "2 1 1 0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3"
qubeseptic.com._report._dmarc.mail 300 IN TXT "v=DMARC1;" qubeseptic.com._report._dmarc.mail 300 IN TXT "v=DMARC1;"
_twilio 300 IN TXT "twilio-domain-verification=efffc13bf1b402210d9d2b65e3532a48" _twilio 300 IN TXT "twilio-domain-verification=efffc13bf1b402210d9d2b65e3532a48"

32
zones/supportedsystems.com.zone
View File

@ -1,27 +1,11 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for supportedsystems.com
; Source: zones/supportedsystems.com.zone ; Generated by mcp-vultr
$ORIGIN supportedsystems.com. $ORIGIN supportedsystems.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.supportedsystems.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME supported.systems
@ 3600 IN NS ns5.he.net. 3600 IN MX 10 mail.supported.systems
3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
@ 300 IN A 74.91.22.234
* 300 IN CNAME supported.systems.
@ 3600 IN MX 10 mail.supported.systems.
@ 3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"

30
zones/supportedsystems.net.zone
View File

@ -1,31 +1,15 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for supportedsystems.net
; Source: zones/supportedsystems.net.zone ; Generated by mcp-vultr
$ORIGIN supportedsystems.net. $ORIGIN supportedsystems.net.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.supportedsystems.net. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 74.91.22.234
docker-1 300 IN A 108.61.23.129 docker-1 300 IN A 108.61.23.129
docker-1 300 IN AAAA 2001:19f0:0:39a2:5400:6ff:fe2d:a42 docker-1 300 IN AAAA 2001:19f0:0:39a2:5400:6ff:fe2d:a42
docker-2 300 IN A 64.177.113.31 docker-2 300 IN A 64.177.113.31
docker-2 300 IN AAAA 2001:19f0:5c00:4bab:5400:6ff:fe2d:1f52 docker-2 300 IN AAAA 2001:19f0:5c00:4bab:5400:6ff:fe2d:1f52
git 300 IN A 64.177.112.188 git 300 IN A 64.177.112.188
* 300 IN CNAME supportedsystems.net. * 300 IN CNAME supportedsystems.net
@ 3600 IN MX 1 mail.supported.systems. 3600 IN MX 1 mail.supported.systems

30
zones/syslog.chat.zone
View File

@ -1,26 +1,10 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for syslog.chat
; Source: zones/syslog.chat.zone ; Generated by mcp-vultr
$ORIGIN syslog.chat. $ORIGIN syslog.chat.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.syslog.chat. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.226
@ 3600 IN NS ns4.he.net. * 300 IN CNAME syslog.chat
@ 3600 IN NS ns5.he.net. 300 IN MX 10 syslog.chat
@ 300 IN A 74.91.22.226
* 300 IN CNAME syslog.chat.
@ 300 IN MX 10 syslog.chat.

36
zones/tatemalloy.com.zone
View File

@ -1,31 +1,15 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for tatemalloy.com
; Source: zones/tatemalloy.com.zone ; Generated by mcp-vultr
$ORIGIN tatemalloy.com. $ORIGIN tatemalloy.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.tatemalloy.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME tatemalloy.com
@ 3600 IN NS ns5.he.net. mail 300 IN CNAME mail.supported.systems
300 IN MX 10 mail.supported.systems
3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
@ 300 IN A 74.91.22.234
* 300 IN CNAME tatemalloy.com.
mail 300 IN CNAME mail.supported.systems.
@ 300 IN MX 10 mail.supported.systems.
@ 3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
_acme-challenge 300 IN TXT "zoUmIIDLDdYsMwc-o_q89XJqguhxdh-GG2f1Ry35Mzg" _acme-challenge 300 IN TXT "zoUmIIDLDdYsMwc-o_q89XJqguhxdh-GG2f1Ry35Mzg"
_acme-challenge 300 IN TXT "GR_EICKHgxOHXGzU26ZrmuqES-RQk4KTRbT9ackqIIQ" _acme-challenge 300 IN TXT "GR_EICKHgxOHXGzU26ZrmuqES-RQk4KTRbT9ackqIIQ"
_acme-challenge 300 IN TXT "E1znurfm5S4wzw9xP6OXRIyJ3qqOnyivRkqcBdB5i0k" _acme-challenge 300 IN TXT "E1znurfm5S4wzw9xP6OXRIyJ3qqOnyivRkqcBdB5i0k"
@ -38,4 +22,4 @@ _acme-challenge 300 IN TXT "U4lSaBVa8-UIBwQ5zS3_YuozLTWZ6KRrkdP2RWF0INM"
_acme-challenge 300 IN TXT "ima5uh3kXccKFf35ZCLfalZT4XbQJB05GnyvtAIqYTw" _acme-challenge 300 IN TXT "ima5uh3kXccKFf35ZCLfalZT4XbQJB05GnyvtAIqYTw"
_acme-challenge 300 IN TXT "LWUF146g8xiEiWdYY6pWb2iwCm5bE4i1vLjt2w9Mx2U" _acme-challenge 300 IN TXT "LWUF146g8xiEiWdYY6pWb2iwCm5bE4i1vLjt2w9Mx2U"
_acme-challenge 300 IN TXT "SHktbBbFNl-03DimuwNBin1NyL7x7GD5vN7jNlhs0wU" _acme-challenge 300 IN TXT "SHktbBbFNl-03DimuwNBin1NyL7x7GD5vN7jNlhs0wU"
_acme-challenge 300 IN TXT "5yvO_8LolWXqsy8PxrqBL-RWaWzKnccWN0L4XiFWwgE" _acme-challenge 300 IN TXT "5yvO_8LolWXqsy8PxrqBL-RWaWzKnccWN0L4XiFWwgE"

32
zones/tateorrtot.games.zone
View File

@ -1,27 +1,11 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for tateorrtot.games
; Source: zones/tateorrtot.games.zone ; Generated by mcp-vultr
$ORIGIN tateorrtot.games. $ORIGIN tateorrtot.games.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.tateorrtot.games. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 162.43.207.251
@ 3600 IN NS ns4.he.net. 300 IN AAAA 2605:21c0:1000:53:250:56ff:fe91:5415
@ 3600 IN NS ns5.he.net. * 300 IN CNAME tateorrtot.games
300 IN MX 10 mail.supported.system
@ 300 IN A 162.43.207.251
@ 300 IN AAAA 2605:21c0:1000:53:250:56ff:fe91:5415
* 300 IN CNAME tateorrtot.games.
@ 300 IN MX 10 mail.supported.system.

34
zones/timber.ink.zone
View File

@ -1,30 +1,14 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for timber.ink
; Source: zones/timber.ink.zone ; Generated by mcp-vultr
$ORIGIN timber.ink. $ORIGIN timber.ink.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.timber.ink. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 74.91.22.234
l 300 IN A 127.0.0.1 l 300 IN A 127.0.0.1
* 300 IN CNAME timber.ink. * 300 IN CNAME timber.ink
*.l 300 IN CNAME l.timber.ink. *.l 300 IN CNAME l.timber.ink
@ 300 IN MX 10 timber.ink. 300 IN MX 10 timber.ink
_acme-challenge.l 300 IN TXT "Zf92MXoRMCkCDinlu7yQ31Cp7gGg30Kilc9lVbF-l8w" _acme-challenge.l 300 IN TXT "Zf92MXoRMCkCDinlu7yQ31Cp7gGg30Kilc9lVbF-l8w"
_acme-challenge.api.l 300 IN TXT "IJy9QiaLG4tJ_-T5X7VMVdFftTRRH7R_zKdoQRr8IGs" _acme-challenge.api.l 300 IN TXT "IJy9QiaLG4tJ_-T5X7VMVdFftTRRH7R_zKdoQRr8IGs"

34
zones/trackfeeds.cloud.zone
View File

@ -1,31 +1,15 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for trackfeeds.cloud
; Source: zones/trackfeeds.cloud.zone ; Generated by mcp-vultr
$ORIGIN trackfeeds.cloud. $ORIGIN trackfeeds.cloud.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.trackfeeds.cloud. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
@ 300 IN A 74.91.22.234
l 300 IN A 10.20.0.38 l 300 IN A 10.20.0.38
* 300 IN CNAME trackfeeds.cloud. * 300 IN CNAME trackfeeds.cloud
*.l 300 IN CNAME l.trackfeeds.cloud. *.l 300 IN CNAME l.trackfeeds.cloud
@ 300 IN MX 10 trackfeeds.cloud. 300 IN MX 10 trackfeeds.cloud
_acme-challenge 300 IN TXT "sKMvgTw0q22DS6SWpYXtuuaawKlkhlQZS4VDoBCnA5M" _acme-challenge 300 IN TXT "sKMvgTw0q22DS6SWpYXtuuaawKlkhlQZS4VDoBCnA5M"
_acme-challenge 300 IN TXT "tHTPgG3uSXwoBu6ulChvsyxzOn4wCb0IVrdfz9PUiwg" _acme-challenge 300 IN TXT "tHTPgG3uSXwoBu6ulChvsyxzOn4wCb0IVrdfz9PUiwg"
_acme-challenge 300 IN TXT "J7ggXe7lmq6zbL3nKfMUbOi8PPDeJDiIgsBsO36Cd2Q" _acme-challenge 300 IN TXT "J7ggXe7lmq6zbL3nKfMUbOi8PPDeJDiIgsBsO36Cd2Q"
@ -40,4 +24,4 @@ _acme-challenge 300 IN TXT "4azVDm_9EH1QheQbbM1WPmtdhlZzPBNDp7QseCBmrsY"
_acme-challenge 300 IN TXT "WpsM92QpKO-BEpe46sSvYAjsFeCRyj0rQYNvQOMDapo" _acme-challenge 300 IN TXT "WpsM92QpKO-BEpe46sSvYAjsFeCRyj0rQYNvQOMDapo"
_acme-challenge 300 IN TXT "FstZtHdbdkmUKZRc4XF7YTYXw4IOYZDjpR9awQio3NI" _acme-challenge 300 IN TXT "FstZtHdbdkmUKZRc4XF7YTYXw4IOYZDjpR9awQio3NI"
_acme-challenge 300 IN TXT "997TMR_EEeDQlWaaFkefhMVBfjGSurhm4UZhWPrfeR8" _acme-challenge 300 IN TXT "997TMR_EEeDQlWaaFkefhMVBfjGSurhm4UZhWPrfeR8"
_acme-challenge 300 IN TXT "QuLiHfwQDjatKUV_y0AmKx5lqhtTcUTxCgBA35BRZgg" _acme-challenge 300 IN TXT "QuLiHfwQDjatKUV_y0AmKx5lqhtTcUTxCgBA35BRZgg"

32
zones/tuckermalloy.com.zone
View File

@ -1,29 +1,13 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for tuckermalloy.com
; Source: zones/tuckermalloy.com.zone ; Generated by mcp-vultr
$ORIGIN tuckermalloy.com. $ORIGIN tuckermalloy.com.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.tuckermalloy.com. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. * 300 IN CNAME tuckermalloy.com
@ 3600 IN NS ns5.he.net. 300 IN MX 10 tuckermalloy.com
@ 300 IN A 74.91.22.234
* 300 IN CNAME tuckermalloy.com.
@ 300 IN MX 10 tuckermalloy.com.
_acme-challenge 300 IN TXT "TDRs9UeCuV_oxivongFlJSHA5A9ky0epe4_yC5ACUyI" _acme-challenge 300 IN TXT "TDRs9UeCuV_oxivongFlJSHA5A9ky0epe4_yC5ACUyI"
_acme-challenge 300 IN TXT "ig-bSaPcTscjbFlEo3yK7PXDbrps99TEnqgwjaN-D0U" _acme-challenge 300 IN TXT "ig-bSaPcTscjbFlEo3yK7PXDbrps99TEnqgwjaN-D0U"
_acme-challenge 300 IN TXT "7JP0aoiLiaRC0dnMemCSe2mqJltAfaJukPXFfLG37-w" _acme-challenge 300 IN TXT "7JP0aoiLiaRC0dnMemCSe2mqJltAfaJukPXFfLG37-w"
@ -35,4 +19,4 @@ _acme-challenge 300 IN TXT "Q_WAPa_6yO46D9EgS5U9qRXCSw8FdTuKeSvpsemE79M"
_acme-challenge 300 IN TXT "qc0BcwZ6TNegvZ9Ymq4ymmBbbuBPJquzLq3mwMpnRQA" _acme-challenge 300 IN TXT "qc0BcwZ6TNegvZ9Ymq4ymmBbbuBPJquzLq3mwMpnRQA"
_acme-challenge 300 IN TXT "fguL4374pHh2OmuWOFr5dbR3kGgQ6GVHyOSXxgO5WvY" _acme-challenge 300 IN TXT "fguL4374pHh2OmuWOFr5dbR3kGgQ6GVHyOSXxgO5WvY"
_acme-challenge 300 IN TXT "RXUofc6dg3bYPndu75PEN8agJQase92ZIv0FwOt9u-A" _acme-challenge 300 IN TXT "RXUofc6dg3bYPndu75PEN8agJQase92ZIv0FwOt9u-A"
_acme-challenge 300 IN TXT "a-o_fe9bHrENho0_jeiwrZ1o0X3ZW_a-Gxq1XD5Qs78" _acme-challenge 300 IN TXT "a-o_fe9bHrENho0_jeiwrZ1o0X3ZW_a-Gxq1XD5Qs78"

58
zones/upc.llc.zone
View File

@ -1,40 +1,24 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for upc.llc
; Source: zones/upc.llc.zone ; Generated by mcp-vultr
$ORIGIN upc.llc. $ORIGIN upc.llc.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.upc.llc. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net.
@ 3600 IN NS ns2.he.net.
@ 3600 IN NS ns3.he.net.
@ 3600 IN NS ns4.he.net.
@ 3600 IN NS ns5.he.net.
300 IN NS ns1.vultr.com
300 IN NS ns2.vultr.com
l 300 IN A 127.0.0.1 l 300 IN A 127.0.0.1
@ 300 IN A 108.61.23.129 300 IN A 108.61.23.129
* 300 IN A 108.61.23.129 * 300 IN A 108.61.23.129
@ 300 IN AAAA 2001:19f0:5c01:12ca:5400:5ff:fe35:a427 300 IN AAAA 2001:19f0:5c01:12ca:5400:5ff:fe35:a427
* 300 IN AAAA 2001:19f0:5c01:12ca:5400:5ff:fe35:a427 * 300 IN AAAA 2001:19f0:5c01:12ca:5400:5ff:fe35:a427
*.l 300 IN CNAME l.upc.llc. *.l 300 IN CNAME l.upc.llc
mail 300 IN CNAME mail.supported.systems. mail 300 IN CNAME mail.supported.systems
autoconfig 600 IN CNAME mail.upc.llc. autoconfig 600 IN CNAME mail.upc.llc
*.portal.l 300 IN CNAME portal.l.upc.llc. *.portal.l 300 IN CNAME portal.l.upc.llc
*.s3 300 IN CNAME s3.upc.llc. *.s3 300 IN CNAME s3.upc.llc
*.report.l 300 IN CNAME report.l.upc.llc. *.report.l 300 IN CNAME report.l.upc.llc
*.report 300 IN CNAME report.upc.llc. *.report 300 IN CNAME report.upc.llc
@ 300 IN MX 10 upc.llc. 300 IN MX 10 upc.llc
@ 300 IN MX 10 mail.supported.systems. 300 IN MX 10 mail.supported.systems
_acme-challenge.l 300 IN TXT "LZGNwW9DGUuN2ly0vm5czSrRIG20lqx--6Gd4j1x71w" _acme-challenge.l 300 IN TXT "LZGNwW9DGUuN2ly0vm5czSrRIG20lqx--6Gd4j1x71w"
_acme-challenge.l 300 IN TXT "sSIwSVfZ2ceW8ie8aYXrzf73iEWMZSXl9e6ogxFQNCc" _acme-challenge.l 300 IN TXT "sSIwSVfZ2ceW8ie8aYXrzf73iEWMZSXl9e6ogxFQNCc"
_acme-challenge.l 300 IN TXT "Z4fh4rHw8d-GR-L3cnocj8o-8OpI5GccMwWRQiUnPd0" _acme-challenge.l 300 IN TXT "Z4fh4rHw8d-GR-L3cnocj8o-8OpI5GccMwWRQiUnPd0"
@ -42,7 +26,7 @@ _acme-challenge.l 300 IN TXT "8kd2q8Ib7DFvq8SAGsKTtxU2qLV7L8E_ePD8Ww2MVfA"
_acme-challenge.l 300 IN TXT "q-aWCBE1lMD0_xcNzwWydAW7bk3tLzMIWYi2z0WapWE" _acme-challenge.l 300 IN TXT "q-aWCBE1lMD0_xcNzwWydAW7bk3tLzMIWYi2z0WapWE"
_acme-challenge.l 300 IN TXT "p3G13Tmd-S47IDPo2Zjq4NJjQZ9qJyZw_izjte3Y9ps" _acme-challenge.l 300 IN TXT "p3G13Tmd-S47IDPo2Zjq4NJjQZ9qJyZw_izjte3Y9ps"
_acme-challenge.www.l 300 IN TXT "9vR7zAbgH0Tbfhmz5Mi94XtjS1St8r7ZOulkgn1Jo_s" _acme-challenge.www.l 300 IN TXT "9vR7zAbgH0Tbfhmz5Mi94XtjS1St8r7ZOulkgn1Jo_s"
@ 300 IN TXT "v=spf1 include:mail.supported.systems ~all" 300 IN TXT "v=spf1 include:mail.supported.systems ~all"
_acme-challenge.s3 300 IN TXT "e_fyF4DWbCUGErurD1HxCWY67I5868wAODGSbqR2CKE" _acme-challenge.s3 300 IN TXT "e_fyF4DWbCUGErurD1HxCWY67I5868wAODGSbqR2CKE"
_acme-challenge.oscar-admin.l 300 IN TXT "CuCSK7VwXgrIkFCniISQTysR9YasyYZGGR_npvLkvTM" _acme-challenge.oscar-admin.l 300 IN TXT "CuCSK7VwXgrIkFCniISQTysR9YasyYZGGR_npvLkvTM"
_acme-challenge.or 300 IN TXT "sZUOOMwyY7i0iBeGJDvT770cbxYBZ1YTcJhVSgAm8PM" _acme-challenge.or 300 IN TXT "sZUOOMwyY7i0iBeGJDvT770cbxYBZ1YTcJhVSgAm8PM"
@ -59,7 +43,9 @@ _autodiscover._tcp 600 IN SRV 10 0 443 mail.upc.llc.
_submissions._tcp 600 IN SRV 10 0 465 mail.upc.llc. _submissions._tcp 600 IN SRV 10 0 465 mail.upc.llc.
_imaps._tcp 600 IN SRV 10 0 993 mail.upc.llc. _imaps._tcp 600 IN SRV 10 0 993 mail.upc.llc.
_pop3s._tcp 600 IN SRV 10 0 995 mail.upc.llc. _pop3s._tcp 600 IN SRV 10 0 995 mail.upc.llc.
catalog 300 IN CNAME upc.llc. ; Explicit CNAMEs added to fix RFC 4592 empty-non-terminal cases
minio.or 300 IN CNAME upc.llc. ; (parent name has _acme-challenge children, so wildcard would skip it)
or 300 IN CNAME upc.llc. catalog 300 IN CNAME upc.llc
s3 300 IN CNAME upc.llc. minio.or 300 IN CNAME upc.llc
or 300 IN CNAME upc.llc
s3 300 IN CNAME upc.llc

38
zones/warehack.ing.zone
View File

@ -1,30 +1,14 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for warehack.ing
; Source: zones/warehack.ing.zone ; Generated by mcp-vultr
$ORIGIN warehack.ing. $ORIGIN warehack.ing.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.warehack.ing. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 64.177.113.31
@ 3600 IN NS ns4.he.net. l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
@ 3600 IN NS ns5.he.net. *.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
* 300 IN CNAME warehack.ing
git 300 IN CNAME idahomuellers.fortiddns.com
@ 300 IN A 64.177.113.31 juliet 300 IN CNAME rpm-bullet.mer.idahomuellers.net
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net. 300 IN MX 10 warehack.ing
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
* 300 IN CNAME warehack.ing.
git 300 IN CNAME idahomuellers.fortiddns.com.
juliet 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
@ 300 IN MX 10 warehack.ing.

36
zones/westboise.org.zone
View File

@ -1,31 +1,15 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for westboise.org
; Source: zones/westboise.org.zone ; Generated by mcp-vultr
$ORIGIN westboise.org. $ORIGIN westboise.org.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.westboise.org. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 74.91.22.234
@ 3600 IN NS ns4.he.net. 300 IN AAAA 2001:19f0:5:4dab:3eec:efff:feb9:f65e
@ 3600 IN NS ns5.he.net. * 300 IN CNAME westboise.org
300 IN MX 10 mail.supported.systems
3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
@ 300 IN A 74.91.22.234
@ 300 IN AAAA 2001:19f0:5:4dab:3eec:efff:feb9:f65e
* 300 IN CNAME westboise.org.
@ 300 IN MX 10 mail.supported.systems.
@ 3600 IN TXT "v=spf1 mx a:mail.supported.systems ~all"
_acme-challenge 300 IN TXT "05EbsyARBzLskBoEHUwM99Togj1S-p0KEjeU6qnuR7E" _acme-challenge 300 IN TXT "05EbsyARBzLskBoEHUwM99Togj1S-p0KEjeU6qnuR7E"
_acme-challenge 300 IN TXT "hk4LRncjXHz7HfpRM5euUNJjoj8i8srHZhoKoy6T36M" _acme-challenge 300 IN TXT "hk4LRncjXHz7HfpRM5euUNJjoj8i8srHZhoKoy6T36M"
_acme-challenge 300 IN TXT "SHz7RNa2PcPyJvCqhTsQlGzIq1zZsjbqP-sifMoUsck" _acme-challenge 300 IN TXT "SHz7RNa2PcPyJvCqhTsQlGzIq1zZsjbqP-sifMoUsck"
@ -37,4 +21,4 @@ _acme-challenge 300 IN TXT "5C_jASC_w_Dl-8H0VeKTPQWneH4HY4ZFbzgUV9EuwJs"
_acme-challenge 300 IN TXT "1SgYQJScXjkWRdST4WxXrjp8dSFxI-NWxhRkJDn1BfA" _acme-challenge 300 IN TXT "1SgYQJScXjkWRdST4WxXrjp8dSFxI-NWxhRkJDn1BfA"
_acme-challenge 300 IN TXT "B00-RbjOp-mGxX_WkFng6tEoyxzhGe334bclADHMb-Y" _acme-challenge 300 IN TXT "B00-RbjOp-mGxX_WkFng6tEoyxzhGe334bclADHMb-Y"
_acme-challenge 300 IN TXT "du82JOyEWbbRXlyVSqPpl38uGzJ-ZfLin3cZ2oeuPEY" _acme-challenge 300 IN TXT "du82JOyEWbbRXlyVSqPpl38uGzJ-ZfLin3cZ2oeuPEY"
_acme-challenge 300 IN TXT "sYmya4OTlYsdu8b3X1k1es5GivxqKddOH52g2mGAfy4" _acme-challenge 300 IN TXT "sYmya4OTlYsdu8b3X1k1es5GivxqKddOH52g2mGAfy4"

40
zones/zmesh.systems.zone
View File

@ -1,34 +1,18 @@
; Auto-prepared by scripts/prepare-zones.sh on 2026-05-21T11:12:50-06:00 ; Zone file for zmesh.systems
; Source: zones/zmesh.systems.zone ; Generated by mcp-vultr
$ORIGIN zmesh.systems. $ORIGIN zmesh.systems.
$TTL 3600 $TTL 3600
@ 3600 IN SOA ns1.he.net. admin.zmesh.systems. (
2026052102 ; serial — bump per change (SERIAL=YYYYMMDDNN make prep)
300 ; refresh (5 min) — slaves poll us this often;
; tightened from 3600 to nudge HE's internal
; puller→anycast replication
120 ; retry (2 min) — kept < refresh per RFC 1912
604800 ; expire (1 week)
60 ; minimum (1 min) — negative-cache TTL on public
; resolvers; shrinks the window when an old
; NXDOMAIN keeps showing after we add a name
)
@ 3600 IN NS ns1.he.net. 300 IN NS ns1.vultr.com
@ 3600 IN NS ns2.he.net. 300 IN NS ns2.vultr.com
@ 3600 IN NS ns3.he.net. 300 IN A 64.177.113.31
@ 3600 IN NS ns4.he.net. l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
@ 3600 IN NS ns5.he.net. *.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net
* 300 IN CNAME zmesh.systems
300 IN MX 10 zmesh.systems
@ 300 IN A 64.177.113.31 300 IN MX 5 mail.supported.systems
l 300 IN CNAME rpm-bullet.mer.idahomuellers.net. 3600 IN TXT "Hey Hacker! Get Meshed!"
*.l 300 IN CNAME rpm-bullet.mer.idahomuellers.net.
* 300 IN CNAME zmesh.systems.
@ 300 IN MX 10 zmesh.systems.
@ 300 IN MX 5 mail.supported.systems.
@ 3600 IN TXT "Hey Hacker! Get Meshed!"
_acme-challenge.mcbladerf.l 300 IN TXT "IgoOIhuVXLkIkZNJ33oKvBw9tILVCoYxEowmYQEIw78" _acme-challenge.mcbladerf.l 300 IN TXT "IgoOIhuVXLkIkZNJ33oKvBw9tILVCoYxEowmYQEIw78"
_acme-challenge.mcbladerf.l 300 IN TXT "pufwOaC6xoP2aKScyhAiaip5_cpTIpeYnctX97lkq3Y" _acme-challenge.mcbladerf.l 300 IN TXT "pufwOaC6xoP2aKScyhAiaip5_cpTIpeYnctX97lkq3Y"
_acme-challenge.esp32.l 300 IN TXT "hZphEA1D26kvK-okdIU0Z8eqBTQs5WxoVVIPwt16Z58" _acme-challenge.esp32.l 300 IN TXT "hZphEA1D26kvK-okdIU0Z8eqBTQs5WxoVVIPwt16Z58"
_acme-challenge.astrolock.l 300 IN TXT "bxJ5IOYNkE8WCoyA0fLm7bMBQaOOU4NzZZg0WT0dy2g" _acme-challenge.astrolock.l 300 IN TXT "bxJ5IOYNkE8WCoyA0fLm7bMBQaOOU4NzZZg0WT0dy2g"