k8s/dns is re-exported from the live zones: bridge.lux.network, the ACME TXT left for bridge, bridge-api, mpc and api.mpc, lux.chat's Azure asuid records and the GoDaddy _domainconnect CNAMEs on lux.review and lux.training are gone, and lux.build lists the AWS ingress it has pointed at since 2026-09-19. kms.lux.cloud has no AWS backend: Lux's own KMS (lux-kms-go) runs on no cluster here. kms-gen-validator-keys.sh and kms-seed.sh no longer default to it; they require KMS_API_URL, because a default that does not resolve turned every key push into a "SKIP" line. NETWORKS.yaml stops listing mpc-api.lux.network, mpc.lux.network and kms.lux.cloud for the MPC topology. explore-fe-lux and explore-fe-zoo run one replica each; with maxUnavailable 1 a rollout stopped the only pod before its replacement was Ready, and the explorer answered 503 until it was. maxUnavailable is 0 now, as applied live. Co-authored-by: Hanzo Dev <[email protected]>
68 lines
1.3 KiB
YAML
68 lines
1.3 KiB
YAML
# lux-chat.yaml — Cloudflare zone config for lux.chat
|
|
# Zone ID: 604fe4223d967eb7c22f6c3729e6b119
|
|
# Exported from the live zone 2026-09-23; proxied A records name the AWS ingress (100.24.244.37).
|
|
---
|
|
zone: lux.chat
|
|
zone_id: "604fe4223d967eb7c22f6c3729e6b119"
|
|
|
|
records:
|
|
- type: A
|
|
name: "app"
|
|
content: "100.24.244.37"
|
|
proxied: true
|
|
|
|
- type: A
|
|
name: "@"
|
|
content: "100.24.244.37"
|
|
proxied: true
|
|
comment: "hanzo AWS balancer (was the LAN tunnel)"
|
|
|
|
- type: A
|
|
name: "www"
|
|
content: "100.24.244.37"
|
|
proxied: true
|
|
|
|
- type: MX
|
|
name: "@"
|
|
content: "alt1.aspmx.l.google.com"
|
|
priority: 5
|
|
ttl: 3600
|
|
|
|
- type: MX
|
|
name: "@"
|
|
content: "alt2.aspmx.l.google.com"
|
|
priority: 5
|
|
ttl: 3600
|
|
|
|
- type: MX
|
|
name: "@"
|
|
content: "alt3.aspmx.l.google.com"
|
|
priority: 10
|
|
ttl: 3600
|
|
|
|
- type: MX
|
|
name: "@"
|
|
content: "alt4.aspmx.l.google.com"
|
|
priority: 10
|
|
ttl: 3600
|
|
|
|
- type: MX
|
|
name: "@"
|
|
content: "aspmx.l.google.com"
|
|
priority: 1
|
|
ttl: 3600
|
|
|
|
- type: TXT
|
|
name: "@"
|
|
content: "\"google-site-verification=0jeYQXi-NhuyIsg12pEc3orDQgwiUVMB3D2C4oGqzy4\""
|
|
ttl: 3600
|
|
|
|
- type: TXT
|
|
name: "@"
|
|
content: "\"v=spf1 include:_spf.google.com -all\""
|
|
ttl: 3600
|
|
|
|
- type: TXT
|
|
name: "@"
|
|
content: "facebook-domain-verification=nxoasow0uww703d5zfv6djtbo261y2"
|