27 records across 15 zones converted from direct A records pointing at the Tailscale endpoint (100.79.95.190) to CNAMEs pointing at the Tailscale-named alias. Now if the underlying Tailscale node's IP changes, only the rpm-bullet record needs updating instead of chasing 27 zones. Affected zones (all *.l labels + a handful of dev / dev.mary names): acrazy.org copper-springs.online demostar.io flonhoney.com homestar.ink kg7q.cc malloys.us ourjob.site qubeseptic.com ryanmalloy.com septic.report sidejob.pro supported.systems warehack.ing zmesh.systems No CNAME collisions: none of the converted names had other records (MX/TXT/SRV/CAA/AAAA) at the same exact name. _acme-challenge.<sub>.l records sit at distinct subdomains and continue to resolve independently (verified: TXT lookups for known _acme-challenge.l.* names still return the original values). Also fixed prepare-zones.sh: added `|| true` after the serial-detection grep so a zero-match (first run of a new day) doesn't trip `set -e` and abort the whole prep.
Description
Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.
Languages
Shell
49.7%
Makefile
21.5%
Python
16.6%
Dockerfile
12.2%