Files
zeekayandHanzo Dev 8c6119f357 Lux zones match the live DNS; KMS scripts name their endpoint; explorer rollouts keep a pod serving
k8s/dns is re-exported from the live zones: bridge.lux.network, the ACME TXT
left for bridge, bridge-api, mpc and api.mpc, lux.chat's Azure asuid records and
the GoDaddy _domainconnect CNAMEs on lux.review and lux.training are gone, and
lux.build lists the AWS ingress it has pointed at since 2026-09-19.

kms.lux.cloud has no AWS backend: Lux's own KMS (lux-kms-go) runs on no cluster
here. kms-gen-validator-keys.sh and kms-seed.sh no longer default to it; they
require KMS_API_URL, because a default that does not resolve turned every key
push into a "SKIP" line. NETWORKS.yaml stops listing mpc-api.lux.network,
mpc.lux.network and kms.lux.cloud for the MPC topology.

explore-fe-lux and explore-fe-zoo run one replica each; with maxUnavailable 1 a
rollout stopped the only pod before its replacement was Ready, and the explorer
answered 503 until it was. maxUnavailable is 0 now, as applied live.

Co-authored-by: Hanzo Dev <[email protected]>
2026-09-23 19:45:42 -07:00

68 lines
1.3 KiB
YAML

# lux-chat.yaml — Cloudflare zone config for lux.chat
# Zone ID: 604fe4223d967eb7c22f6c3729e6b119
# Exported from the live zone 2026-09-23; proxied A records name the AWS ingress (100.24.244.37).
---
zone: lux.chat
zone_id: "604fe4223d967eb7c22f6c3729e6b119"
records:
- type: A
name: "app"
content: "100.24.244.37"
proxied: true
- type: A
name: "@"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "www"
content: "100.24.244.37"
proxied: true
- type: MX
name: "@"
content: "alt1.aspmx.l.google.com"
priority: 5
ttl: 3600
- type: MX
name: "@"
content: "alt2.aspmx.l.google.com"
priority: 5
ttl: 3600
- type: MX
name: "@"
content: "alt3.aspmx.l.google.com"
priority: 10
ttl: 3600
- type: MX
name: "@"
content: "alt4.aspmx.l.google.com"
priority: 10
ttl: 3600
- type: MX
name: "@"
content: "aspmx.l.google.com"
priority: 1
ttl: 3600
- type: TXT
name: "@"
content: "\"google-site-verification=0jeYQXi-NhuyIsg12pEc3orDQgwiUVMB3D2C4oGqzy4\""
ttl: 3600
- type: TXT
name: "@"
content: "\"v=spf1 include:_spf.google.com -all\""
ttl: 3600
- type: TXT
name: "@"
content: "facebook-domain-verification=nxoasow0uww703d5zfv6djtbo261y2"