coredns

Go to file

Ryan Malloy b78cfb0b45 coredns: fix silently-broken healthcheck (distroless image has no wget)

The original healthcheck `wget -qO- http://127.0.0.1:8080/health` has
been failing since day one because the CoreDNS image is distroless —
no shell, no HTTP client. The container has been running in
"(unhealthy)" status the whole time without anyone noticing because
nothing depends_on it.

Replace with `/coredns -version`, which is the thinnest honest check
the image can support. For deeper liveness/readiness, scrape
:8081/health from outside the container.

2026-05-16 14:01:22 -06:00

caddy

coredns: production Let's Encrypt cert via Caddy sidecar (DNS-01 + Vultr)

2026-05-14 01:34:57 -06:00

scripts

coredns: DoT (:853) + DoH (:443) listeners with self-signed cert

2026-05-14 01:12:25 -06:00

zones

coredns: docker compose stack with Vultr zone import

2026-05-12 01:51:09 -06:00

.env

coredns: production port defaults (5353 plain DNS, 8081 health)