Files
dns/zones/hanzo-ai.yaml
zeekay f33a5ef0f4 zones/hanzo-ai: proxy sign + dataroom + add esign
Three records updated to align with the live infra:

- sign.hanzo.ai: content 134.199.138.27 -> 129.212.164.5 (hanzo-k8s
  ingress LB), proxied false -> true. The old IP pointed at a
  defunct droplet; ingress terminates on the DOKS LB now and CF
  proxy fronts it so customers see a publicly-trusted cert.
- dataroom.hanzo.ai: same flip; dataroom deploy backs it once the
  CI image lands.
- esign.hanzo.ai: NEW (will become the canonical eSign URL per the
  AGPL-containment plan in ARCHITECTURE.md). Routes to the same
  sign service while the deeper rename + Documenso host config
  lands.
2026-06-07 11:38:51 -07:00

491 lines
11 KiB
YAML

# hanzo-ai.yaml — Cloudflare zone config for hanzo.ai
# Zone ID: bac51c3900e73fd28aa75a59898bcee0
# Source of truth for hanzo.ai DNS records
# Last synced: 2026-03-12
---
zone: hanzo.ai
zone_id: "bac51c3900e73fd28aa75a59898bcee0"
records:
- type: A
name: "*"
content: "134.199.138.27"
proxied: false
- type: A
name: api-explore
content: "134.199.138.27"
proxied: false
- type: A
name: api.cloud
content: "134.199.138.27"
proxied: false
- type: A
name: api.web3
content: "134.199.136.205"
proxied: false
ttl: 300
- type: A
name: bridge
content: "134.199.138.27"
proxied: false
- type: A
name: captable
content: "134.199.138.27"
proxied: false
- type: A
name: commerce-admin
content: "134.199.138.27"
proxied: false
- type: A
name: commerce-api
content: "134.199.138.27"
proxied: false
- type: A
name: commerce
content: "134.199.138.27"
proxied: false
- type: A
name: dataroom
content: "129.212.164.5"
proxied: true
- type: A
name: explore
content: "134.199.138.27"
proxied: false
- type: A
name: explorer
content: "134.199.138.27"
proxied: false
- type: A
name: iam
content: "134.199.138.27"
proxied: false
- type: A
name: mail
content: "165.227.92.111"
proxied: false
- type: A
name: pay
content: "129.212.164.5"
proxied: true
- type: A
name: sign
content: "129.212.164.5"
proxied: true
- type: A
name: esign
content: "129.212.164.5"
proxied: true
- type: A
name: staging.platform
content: "165.227.92.111"
proxied: false
- type: A
name: web3
content: "134.199.136.205"
proxied: false
ttl: 300
- type: A
name: ws.web3
content: "134.199.136.205"
proxied: false
ttl: 300
- type: A
name: zap
content: "64.225.88.110"
proxied: false
ttl: 60
- type: AAAA
name: cdn
content: "100::"
proxied: true
- type: CNAME
name: admin
content: "59ec23c3-bd7b-4648-9b9e-89ed68c03456.cfargotunnel.com"
proxied: true
- type: CNAME
name: app.insights
content: "app-insights-redirect.pages.dev"
proxied: true
- type: CNAME
name: auth
content: "hanzo-id.pages.dev"
proxied: true
- type: CNAME
name: bridge-dev
content: "59ec23c3-bd7b-4648-9b9e-89ed68c03456.cfargotunnel.com"
proxied: true
- type: CNAME
name: cloud-dev
content: "59ec23c3-bd7b-4648-9b9e-89ed68c03456.cfargotunnel.com"
proxied: true
- type: CNAME
name: dev
content: "dev-docs-22b.pages.dev"
proxied: true
- type: CNAME
name: docs-insights
content: "insights-docs.pages.dev"
proxied: true
# Hanzo World — real-time global intelligence dashboard.
# Served by a Cloudflare Worker (name: `world`, route world.hanzo.ai/*).
# Proxied ON so traffic reaches the Workers runtime at the CF edge
# — without proxy the Worker route never matches.
# 192.0.2.1 is RFC 5737 TEST-NET-1; the placeholder origin IP is
# irrelevant because the Worker intercepts every request before any
# origin connection is attempted.
- type: A
name: world
content: "192.0.2.1"
proxied: true
- type: CNAME
name: docs
content: "hanzo-docs.pages.dev"
proxied: true
- type: CNAME
name: download
content: "public.r2.dev"
proxied: true
- type: CNAME
name: edge
content: "hanzoai.github.io"
proxied: false
- type: CNAME
name: engine
content: "hanzoai.github.io"
proxied: false
- type: CNAME
name: erp
content: "59ec23c3-bd7b-4648-9b9e-89ed68c03456.cfargotunnel.com"
proxied: true
- type: CNAME
name: faucet
content: "hanzoai.github.io"
proxied: true
- type: CNAME
name: gallery
content: "hanzoai.github.io"
proxied: true
- type: CNAME
name: "@"
content: "hanzoai.github.io"
proxied: true
- type: CNAME
name: help
content: "reamaze.lida.clearalias.com"
proxied: true
- type: CNAME
name: hips
content: "hanzoai.github.io"
proxied: true
- type: CNAME
name: iam-dev
content: "59ec23c3-bd7b-4648-9b9e-89ed68c03456.cfargotunnel.com"
proxied: true
- type: CNAME
name: identity
content: "hanzoai.github.io"
proxied: true
- type: CNAME
name: kratom
content: "59ec23c3-bd7b-4648-9b9e-89ed68c03456.cfargotunnel.com"
proxied: true
- type: CNAME
name: operative-app
content: "59ec23c3-bd7b-4648-9b9e-89ed68c03456.cfargotunnel.com"
proxied: true
- type: CNAME
name: operative-vnc
content: "59ec23c3-bd7b-4648-9b9e-89ed68c03456.cfargotunnel.com"
proxied: true
- type: CNAME
name: operative
content: "59ec23c3-bd7b-4648-9b9e-89ed68c03456.cfargotunnel.com"
proxied: true
- type: CNAME
name: papers
content: "hanzoai.github.io"
proxied: false
- type: CNAME
name: store
content: "hanzoai.github.io"
proxied: true
- type: CNAME
name: team
content: "59ec23c3-bd7b-4648-9b9e-89ed68c03456.cfargotunnel.com"
proxied: true
- type: CNAME
name: ui
content: "hanzoai.github.io"
proxied: true
- type: CNAME
name: www
content: "hanzoai.github.io"
proxied: true
- type: CNAME
name: zen-live
content: "814d5cd2-0a53-4408-9dae-002bfc8eeb15.cfargotunnel.com"
proxied: true
- type: CNAME
name: zerotrust
content: "zt-docs.pages.dev"
proxied: true
- type: MX
name: "@"
content: "alt2.aspmx.l.google.com"
- type: MX
name: "@"
content: "alt1.aspmx.l.google.com"
- type: MX
name: "@"
content: "alt4.aspmx.l.google.com"
- type: MX
name: "@"
content: "alt3.aspmx.l.google.com"
- type: MX
name: "@"
content: "aspmx.l.google.com"
- type: TXT
name: "_acme-challenge.api-explore"
content: '3H6dqcZgiyPrWhsFLT19lWhpOJekzsnoiVBPXkqWahg'
ttl: 120
- type: TXT
name: "_acme-challenge.api.commerce"
content: 'z7_FH-mUDrccAhXoSnxkzczN7Iut5o897nh8SZXsRuI'
ttl: 120
- type: TXT
name: "_acme-challenge.auto"
content: 'qDq09FgEz82YfCpAuLBx7aKNM7QaWdg-FE7Ieg41aVo'
ttl: 120
- type: TXT
name: "_acme-challenge.auto"
content: '_wfO8zOwmuF5p6LdPV_Wjdm3GFZBvmuX_vJdz3SvkSA'
ttl: 120
- type: TXT
name: "_acme-challenge.billing"
content: '5IvdcWKZ5jgYanMGTqcF7T-Zyqx8dREOUzv7-eVDe2M'
ttl: 120
- type: TXT
name: "_acme-challenge.bot"
content: 'TYkw9JiavxXla6UwZc1pf7RH11ygb6i91WIG6WE5REo'
ttl: 120
- type: TXT
name: "_acme-challenge.chat"
content: '5P9nS980bclqHHd7yrtYawUwAACWhTijbXiBlaOwRUw'
ttl: 120
- type: TXT
name: "_acme-challenge.chat"
content: 'fQgfc4SK8KEpom_IZZ3dHmcjJBu3JoXrKUHM2_Dt2aA'
ttl: 120
- type: TXT
name: "_acme-challenge.cloud-api"
content: 'kTce9_UZdYstA3abqK_Obt0e5VMO98OBAHK7PMV38uY'
ttl: 120
- type: TXT
name: "_acme-challenge.cloud"
content: 'lUEHSJ8bqXq6xbiJn_jXAZwJ-VP7N5maXsPqJ5-jv8k'
ttl: 120
- type: TXT
name: "_acme-challenge.commerce"
content: 'Q7wuxz5gMT2N1ETL8bTD48Idlc-jYlilFTy1oapvzP4'
ttl: 120
- type: TXT
name: "_acme-challenge.explore"
content: 'lXiPeoaDCvQNEq9mSh9EoWLlrKfFPGMAm1mQstGjTG4'
ttl: 120
- type: TXT
name: "_acme-challenge.explore"
content: 'yOIRJLUQczAoVEmEBew6psvvzVOHaDUgb1DjAoTxgW0'
ttl: 120
- type: TXT
name: "_acme-challenge.flow"
content: 'yLK_MikMoPDYgl8ihNTt73EIpQyHTCAXwVHQ7A0xQ-c'
ttl: 120
- type: TXT
name: "_acme-challenge.iam"
content: 'QmOZLpYmiioPEQttxlq_oemj0vwiXAVcew-itQ3SiNI'
ttl: 120
- type: TXT
name: "_acme-challenge.iam"
content: 'UsNSscWdpl6eGnCCB2P5YMXB49O1i_3ORbr9Z6jatCM'
ttl: 120
- type: TXT
name: "_acme-challenge.kms"
content: 'gSVHiK8c5rKaQSLeNKUYyvJQkhsvGJv8Tv8GhMuYtQU'
ttl: 120
- type: TXT
name: "_acme-challenge.mpc"
content: 'tXPqsQdko6BC3Fb5x1qTB-3wv4mXJlLMsfZM1MpwImM'
ttl: 120
- type: TXT
name: "_acme-challenge.mpc"
content: 'Cwm2y_luBanU0wGIp6E394gb3bN8wMItyLgaDERaFzM'
ttl: 120
- type: TXT
name: "_acme-challenge.oauth.platform"
content: 'p_bCew2oKaqiQxVxpIUrZG3BAaBcGOhnhagWD2byqT0'
ttl: 120
- type: TXT
name: "_acme-challenge.orm"
content: 'gTS81MAqEFUIBm1JbjzZDHCNidVaJ1rk8XPnFsY_hkQ'
ttl: 120
- type: TXT
name: "_acme-challenge.platform"
content: 'uFLNwhtDvnFtSs972oFA48WuMsm7a6remkzPzb8wksk'
ttl: 120
- type: TXT
name: "_acme-challenge.registry"
content: 'EX-3VdiNFWHC4mmFZdsI8SfMQgrX2l6dJQ6R3VuazzE'
ttl: 120
- type: TXT
name: "_acme-challenge.status"
content: '4T4fJ2_ywFdM9H7UyEnLpvdM2c4bHdPGP-UeAq2BRj8'
ttl: 120
- type: TXT
name: "_acme-challenge.studio"
content: 'XjkmYWfUgHW0RlUldGNfhaNsaU-HpLS9bKwQxuhZb4s'
ttl: 120
- type: TXT
name: "_acme-challenge.sync.platform"
content: 'SmO5kPc-1_E5tMI124P_yctgwR8c39byzdXr7lFp2HE'
ttl: 120
- type: TXT
name: "_acme-challenge.vm"
content: '_gZn_k8e0i7r7lVpUAcSCOEKU-DHG42iuGG4uXAltF0'
ttl: 120
- type: TXT
name: "_acme-challenge.webhook.platform"
content: '6YyloVIg9rcyUASdmzX_jmwNtx_06bzFdkFqdS-K3Mc'
ttl: 120
- type: TXT
name: "_acme-challenge.webhook.platform"
content: 'FVsBpkqKl9NAkb6SqyCfwHj4KNGk24Rc75punT4bwKY'
ttl: 120
- type: TXT
name: "_acme-challenge.webhook.platform"
content: 'H5iNB21zeu6l2rp7AAxmVGSRWAVcIJbfGOsdMAKx07k'
ttl: 120
- type: TXT
name: "_acme-challenge.zen"
content: '_esZYUdXThCe62B6HTKcbZ6NoG9gLZs2VHbVjbld-Ws'
ttl: 120
- type: TXT
name: "_acme-challenge.zt-api"
content: '0KqL12ChGXgylLvyYDHHZOrrlvpn_WRaKBF8a-4WHXQ'
ttl: 120
- type: TXT
name: "_acme-challenge.zt-api"
content: 'bJqU-glRv7xrTc9NSZWQmWFrTYwn8CpMd0i8O1Hvsr4'
ttl: 120
- type: TXT
name: "_dmarc"
content: 'v=DMARC1; p=none; rua=mailto:[email protected]'
- type: TXT
name: "_vercel"
content: 'vc-domain-verify=search.hanzo.ai,9a65aea280c25bf37d48,dc'
ttl: 600
- type: TXT
name: google._domainkey
content: 'v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcjNmDBzdQmkkOkZ84I6Wp9V3T086IypNalxJzj98fxc2lE8ryuTPmI7YbOa69G2WZ0biX9BLUB3o3USC69hLKFRuM1os22LhJu9P3cbC43AXOKz/XVob8LpzV6DBnIjkK5bV5wIwpPlXCyOsdOkyZMZcU2n8LSLf2CovQ83jVs8vEuTU9gxPK/oiIPFwuA6f" "6hTaJ9ot1FU3bCfQWmstCtaKl+61DA4MaBfzTpdFFNdfxC+hJXfERDl5efAwM6M3/FI6RyPExRpAna5YtAJqo3yj4zazB6I6wdA+Cpsh3yEiZ1fdQV4yjmkulaBaV0pTNn5pXYVl22Q6iRaejJYhwIDAQAB'
- type: TXT
name: "@"
content: 'v=spf1 include:_spf.google.com ~all'
- type: TXT
name: "@"
content: 'google-site-verification=P4wQKqy1Ec4f0rYdYQlFMH899dUYIMTzCN3ZaCUDTwU'