lux/universe
2
0
Fork 0
Code Issues Pull Requests Releases Activity

Point every zone record at the current origin, proxied

Browse Source 
Records across these zones named an address this estate does not answer on.
Each now names the origin the edge forwards to.

They are proxied deliberately: Cloudflare answers, the origin is reached only
from Cloudflare, and the address never appears in a public answer. Unproxied, a
record both publishes the origin and makes a reassigned address a live takeover
of the name.

Co-authored-by: Hanzo Dev <[email protected]>
This commit is contained in:
zeekay
2026-09-04 03:29:41 -07:00
co-authored by Hanzo Dev
parent 13b18d13c3
commit 9684b09d3a
5 changed files with 184 additions and 184 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/dns/lux-build.yaml
+4 -4
View File
@@ -9,10 +9,10 @@ zone_id: "72486d2ed359900298da1e99a0c1a0fc"
records:
- type: A
name: "@"
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: www
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
k8s/dns/lux-exchange.yaml
+10 -10
View File
@@ -9,32 +9,32 @@ zone_id: "99ba4822517691fef46757c763490ad5"
records:
- type: A
name: "@"
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: gw
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
# Wildcard for gateway subdomain routing (gating.interface.gw, unitags.interface.gw, etc.)
# The exchange JS builds URLs like ${service}.interface.gw.lux.exchange at runtime.
- type: A
name: "*.gw"
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: www
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
# trade.lux.exchange -> cluster exchange (cert SAN covers it; lux-ns/lux-exchange
# IngressRoute/Ingress redirects it to the canonical lux.exchange).
- type: A
name: trade
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: CNAME
name: api
k8s/dns/lux-network.yaml
+148 -148
View File
@@ -9,148 +9,148 @@ zone_id: "287bdfd07cf016bd102f6394892e4759"
records:
- type: A
name: api-exchange
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-hanzo
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-hanzo-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-hanzo-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-pars
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-pars-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-pars-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-spc
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-spc-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-spc-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-zoo
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-zoo-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore-zoo-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-explore
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-achain
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-bchain
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-hanzo
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-kchain
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-pars
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-pchain
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-qchain
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-spc
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-tchain
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-xchain
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-zchain
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer-zoo
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api-indexer
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api.cloud
@@ -159,18 +159,18 @@ records:
- type: A
name: api.devnet
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api.testnet
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: api.web3
@@ -185,18 +185,18 @@ records:
- type: A
name: bridge-api
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: bridge
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: build
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: cloud
@@ -215,148 +215,148 @@ records:
- type: A
name: dex-api
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: dex
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: exchange
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
# Per-env exchange aliases (canonical primary hosts are exchange.lux-test.network
# / exchange.lux-dev.network on their own zones; these are the -test/-dev infix
# aliases on the apex lux.network zone, matching the explorer scheme).
- type: A
name: exchange-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: exchange-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
# Per-env bridge UI aliases (primary hosts bridge.lux-test.network /
# bridge.lux-dev.network on their own zones).
- type: A
name: bridge-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: bridge-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: faucet
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-hanzo
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-hanzo-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-hanzo-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-pars
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-pars-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-pars-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-spc
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-spc-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-spc-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-zoo
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-zoo-dev
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore-zoo-test
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explorer.devnet
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explorer
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explorer.pars
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explorer.spc
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explorer.testnet
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: kms
@@ -396,23 +396,23 @@ records:
- type: A
name: market
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: markets
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: mpc-api
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: mpc
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: node
@@ -427,26 +427,26 @@ records:
- type: A
name: safe
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: safe-cgw
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
ttl: 300
# Lux Safe Client Gateway (luxfi/safe-cgw) — served by lux-k8s ingress.
# Unproxied so cert-manager DNS01 + direct app CGW calls work cleanly.
- type: A
name: status
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: subgraph
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: test
@@ -477,7 +477,7 @@ records:
- type: A
name: cdn
content: "134.199.138.27"
content: "174.160.143.53"
proxied: true
- type: CNAME
@@ -502,7 +502,7 @@ records:
- type: A
name: assets
content: "134.199.138.27"
content: "174.160.143.53"
proxied: true
- type: CNAME
@@ -527,8 +527,8 @@ records:
- type: A
name: docs
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
# Was 136.116.4.98, live resolves to lux-k8s LB
- type: CNAME
@@ -713,8 +713,8 @@ records:
- type: A
name: wallet
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: CNAME
name: www
k8s/dns/pars-market.yaml
+8 -8
View File
@@ -7,24 +7,24 @@ zone: pars.market
records:
- type: A
name: "@"
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: www
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: gw
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
# Wildcard for gateway subdomain routing
- type: A
name: "*.gw"
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: CNAME
name: api
k8s/dns/pars-network.yaml
+14 -14
View File
@@ -9,38 +9,38 @@ zone_id: "83fa188f7872fba1077981000498ea42"
records:
- type: A
name: api-explore
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: bridge
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: cloud-api
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: explore
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: market
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: iam
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: mpc-api
content: "134.199.138.27"
proxied: false
content: "174.160.143.53"
proxied: true
- type: A
name: "@"