Commit graph

9 commits

Author SHA1 Message Date
2db9a1a37e
dnscontrol: Add monitor sub domain for monitoring metrics 2023-01-23 14:53:47 +05:30
bfb7b25fa6
dnscontrol: Add back the A record
Without an IPv4 address we seem to have trouble with some networks
being able to resolve our domain. We are not ready for IPv6 only
setting. This might also be creating problem of federating our
mastodon instance with other networks.

Would have loved to save 0.6 Euro on Hetzner by being IPv6 only.
2023-01-23 08:51:49 +05:30
54c13168f7
dnscontrol: Add TXT record for verification with keyoxide 2022-12-17 11:20:17 +05:30
64bcce439f dnscontrol: Add our public key as a TXT record 2022-12-16 17:01:14 +05:30
cb058dd515 dnscontrol: Use keys.openpgpkey.org for WKD as a service
keys.openpgp.org can act as a WKD server, with a CNAME record for
the subdomain ‘openpgpkey’ to their server.

See https://keys.openpgp.org/about/usage#wkd-as-a-service.

This helps us in getting/advertising our public key.

λ: curl 'https://wkd.keys.openpgp.org/status/?domain=openpgpkey.sanchayanmaity.net'
CNAME lookup ok: openpgpkey.sanchayanmaity.net resolves to wkd.keys.openpgp.org

λ: gpg --locate-keys --auto-key-locate clear,nodefault,wkd sanchayanmaity.net
2022-12-16 13:58:29 +05:30
16226ecfde dnscontrol: Add TLSA record
For reference
https://community.letsencrypt.org/t/tlsa-record-changes-with-every-renewal-process-which-breaks-dane/144145
https://gist.github.com/buffrr/609285c952e9cb28f76da168ef8c2ca6
https://www.huque.com/bin/gen_tlsa

Verify with
https://www.huque.com/bin/danecheck
2022-12-14 09:40:13 +05:30
4440f476fc dnscontrol: Use AAAA record
We switched our Hetzner server to use only IPv6 address which saves
us 0.6 euros per month. So switch to the use of AAAA record.
2022-12-12 10:11:20 +05:30
01fb124a49 dnscontrol: .net domain has been migrated to porkbun 2022-12-11 15:04:18 +05:30
49d126e023 dnscontrol: Automate & version control DNS management 2022-12-09 17:41:14 +05:30