coredns

Go to file

Ryan Malloy 3d47d67e89 coredns: production port defaults (5353 plain DNS, 8081 health)

Deployed to dell01.mer.idahomuellers.net with firewall NAT'ing
public requests in to host:5353/tcp+udp.

Port changes baked in as new defaults so future hosts inherit them:
- DNS_PORT: 1053 -> 5353 (dev was 1053 because avahi-daemon owns
  5353 on Arch desktops; production hosts typically don't run avahi
  and 5353 is the conventional non-privileged DNS port — mDNS uses
  multicast 224.0.0.251:5353 which never conflicts with a unicast bind)
- HEALTH_PORT: 8080 -> 8081 (8080 collided with a python3 service
  on dell01; 8081 is less commonly contested)

2026-05-16 13:59:33 -06:00

caddy

coredns: production Let's Encrypt cert via Caddy sidecar (DNS-01 + Vultr)

2026-05-14 01:34:57 -06:00

scripts

coredns: DoT (:853) + DoH (:443) listeners with self-signed cert

2026-05-14 01:12:25 -06:00

zones

coredns: docker compose stack with Vultr zone import

2026-05-12 01:51:09 -06:00

.env

coredns: production port defaults (5353 plain DNS, 8081 health)