ssh repointed to new host. vpn and web-bmh-servicedesk.bmh now CNAME at ssh so future host moves only require one record change. SOA serial bumped manually (2026052103) since prepare-zones.sh no longer in the loop after the Phase 2a migration.
Description
Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.
Languages
Shell
49.7%
Makefile
21.5%
Python
16.6%
Dockerfile
12.2%