Production-readiness pass on the Dockerfile after the test stack proved out the build. Three changes: - FROM golang:1.22-alpine → golang:1.25-alpine (plugin's go.mod resolved to go 1.25, base image needed to keep up). - COREDNS_REF v1.12.2 → v1.14.3 (matches what our plugin compiles against; older CoreDNS pulled an outdated quic-go API). - GOPROXY=direct + GOSUMDB=off so go-get talks straight to the Gitea instance hosting our plugin (proxy.golang.org won't proxy private repos). - Dropped the broken GOFLAGS="-ldflags=-w -s" passthrough that miekg parses incorrectly. Resulting binary is ~10MB larger than a stripped build but functionally identical.
Description
Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.
Languages
Shell
49.7%
Makefile
21.5%
Python
16.6%
Dockerfile
12.2%