lux/universe
2
0
Fork 0
Code Issues Pull Requests Releases Activity
Files
main
universe/k8s/dns/lux-network.yaml
T
zeekayandHanzo Dev 8c6119f357 Lux zones match the live DNS; KMS scripts name their endpoint; explorer rollouts keep a pod serving 
k8s/dns is re-exported from the live zones: bridge.lux.network, the ACME TXT
left for bridge, bridge-api, mpc and api.mpc, lux.chat's Azure asuid records and
the GoDaddy _domainconnect CNAMEs on lux.review and lux.training are gone, and
lux.build lists the AWS ingress it has pointed at since 2026-09-19.

kms.lux.cloud has no AWS backend: Lux's own KMS (lux-kms-go) runs on no cluster
here. kms-gen-validator-keys.sh and kms-seed.sh no longer default to it; they
require KMS_API_URL, because a default that does not resolve turned every key
push into a "SKIP" line. NETWORKS.yaml stops listing mpc-api.lux.network,
mpc.lux.network and kms.lux.cloud for the MPC topology.

explore-fe-lux and explore-fe-zoo run one replica each; with maxUnavailable 1 a
rollout stopped the only pod before its replacement was Ready, and the explorer
answered 503 until it was. maxUnavailable is 0 now, as applied live.

Co-authored-by: Hanzo Dev <[email protected]>
2026-09-23 19:45:42 -07:00

565 lines
12 KiB
YAML
Raw Permalink Blame History

# lux-network.yaml — Cloudflare zone config for lux.network
# Zone ID: 287bdfd07cf016bd102f6394892e4759
# Exported from the live zone 2026-09-23; proxied A records name the AWS ingress (100.24.244.37).
---
zone: lux.network
zone_id: "287bdfd07cf016bd102f6394892e4759"
records:
- type: A
name: "admin.pay"
content: "100.24.244.37"
proxied: true
- type: A
name: "api-exchange"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "api-explore-hanzo"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "api-explore-test"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "api-explore-zoo-test"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "api-explore-zoo"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "api-explore"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "api-indexer-hanzo"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "api-indexer-zoo"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "api-indexer"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "api-testnet"
content: "100.24.244.37"
proxied: true
- type: A
name: "api"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "app"
content: "100.24.244.37"
proxied: true
- type: A
name: "bitcoin"
content: "100.24.244.37"
proxied: true
- type: A
name: "blog"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "build"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "cdn"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "cloud"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "coin"
content: "100.24.244.37"
proxied: true
- type: A
name: "consensus"
content: "100.24.244.37"
proxied: true
- type: A
name: "dashboard.pay"
content: "100.24.244.37"
proxied: true
- type: A
name: "dex"
content: "100.24.244.37"
proxied: true
- type: A
name: "discover"
content: "100.24.244.37"
proxied: true
- type: A
name: "docs"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "exchange"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "explore-cchain-test"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "explore-cchain"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "explore-hanzo"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "explore-test"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "explore-zoo-test"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "explore-zoo"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "explore"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "explorer"
content: "100.24.244.37"
proxied: true
- type: A
name: "font"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "game"
content: "100.24.244.37"
proxied: true
comment: "lux-apps/game on the Sites plane (universe static-sites.yaml lux-game)"
- type: A
name: "graph"
content: "100.24.244.37"
proxied: true
- type: A
name: "graphs"
content: "100.24.244.37"
proxied: true
- type: A
name: "id"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "invest"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "login"
content: "100.24.244.37"
proxied: true
- type: A
name: "lps"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "@"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "main"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "mainnet"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "market"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "markets"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "node"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "os"
content: "100.24.244.37"
proxied: true
- type: A
name: "paas"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "papers"
content: "100.24.244.37"
proxied: true
- type: A
name: "pay"
content: "100.24.244.37"
proxied: true
- type: A
name: "precompile"
content: "100.24.244.37"
proxied: true
- type: A
name: "proofs"
content: "100.24.244.37"
proxied: true
- type: A
name: "safe-cgw"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "safe"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "standard"
content: "100.24.244.37"
proxied: true
comment: "AWS ingress; sites plane s3://hanzo-sites/lux/standard"
- type: A
name: "status"
content: "100.24.244.37"
proxied: true
comment: "AWS ingress; status-lux"
- type: A
name: "subgraph"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "support"
content: "100.24.244.37"
proxied: true
- type: A
name: "test"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "testnet"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "tokens"
content: "100.24.244.37"
proxied: true
- type: A
name: "vote"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "wallet"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "work"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: A
name: "www"
content: "100.24.244.37"
proxied: true
comment: "hanzo AWS balancer (was the LAN tunnel)"
- type: CNAME
name: "40343208"
content: "sendgrid.net"
proxied: false
- type: CNAME
name: "dao"
content: "lux.vote"
proxied: true
- type: CNAME
name: "em940"
content: "u40343208.wl209.sendgrid.net"
proxied: false
- type: CNAME
name: "mte1._domainkey"
content: "dkim1.mandrillapp.com"
proxied: false
- type: CNAME
name: "mte2._domainkey"
content: "dkim2.mandrillapp.com"
proxied: false
- type: CNAME
name: "rpc"
content: "api.lux.network"
proxied: true
- type: CNAME
name: "s1._domainkey"
content: "s1.domainkey.u40343208.wl209.sendgrid.net"
proxied: false
- type: CNAME
name: "s2._domainkey"
content: "s2.domainkey.u40343208.wl209.sendgrid.net"
proxied: false
- type: CNAME
name: "url4690"
content: "sendgrid.net"
proxied: false
- type: CNAME
name: "url9026"
content: "sendgrid.net"
proxied: false
- type: MX
name: "@"
content: "alt1.aspmx.l.google.com"
priority: 5
- type: MX
name: "@"
content: "alt2.aspmx.l.google.com"
priority: 5
- type: MX
name: "@"
content: "alt3.aspmx.l.google.com"
priority: 10
- type: MX
name: "@"
content: "alt4.aspmx.l.google.com"
priority: 10
- type: MX
name: "@"
content: "aspmx.l.google.com"
priority: 1
- type: TXT
name: "_dmarc"
content: "v=DMARC1; p=none;"
- type: TXT
name: "_vercel"
content: "\"vc-domain-verify=bridge3.lux.network,271bd6aea4eb7ff4fa1c\""
- type: TXT
name: "_vercel"
content: "vc-domain-verify=assets.lux.network,557001ffd7fe2b65ca17"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=bridge.lux.network,b35d55c66c28256b7fee"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=cdn.lux.network,dc18ed420b1fde00730a"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=explore.bridge.lux.network,9de7f337fed3d4b8a9a8"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=explore.lux.network,6c56d6e7d77c706a9224"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=explorer.lux.network,72d49b8f045ef709ba77"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=ico.lux.network,252fb8b238ba223df967"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=login.lux.network,fe25a8855a0e5a9f021a"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=lux.network,e8cc1c90e40f86bf6918"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=mint.lux.network,903b6a65ea2205feb986"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=safe.lux.network,a9daf4609d8ba7441e60"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=tokens.lux.network,c08d887cd4921dc0ecd3"
- type: TXT
name: "_vercel"
content: "vc-domain-verify=wallet.lux.network,5bea8ffdd93b814f1fa4"
- type: TXT
name: "default._domainkey"
content: "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKPseVLV8uvvGpxtx8++x22AUPPOY1zdQtSxAFKMDOQiT1RhnWxBStbLNuwfcPhctmwhw4b2gWJjFGyIDXwSMwkCbjoeUrQ2SHAHJY9kCpSVCtMHGBLeDbHCyYXkQrIfD9EeTSUn/FT1YoXkOhSSnUAHRzGISvK/mGVz88BjjSbTuhbnqkSJqoZDzIR0sgV3IaFEszDnxDhA5el7jyUvFZbLP4E7YM5LYQjogIYXHX4s6LB033f6vuuGnPDkAcBxBNe+cfP7A4DSakCypgx7bAPSpYCpMSLK9wNca5G1ZHUn3V4aJEarr2ANi3StJ7MOHZAAH3ht2tUxfCIzhafPlwIDAQAB;"
- type: TXT
name: "@"
content: "53012de8b0b79984cd7c6667e5d6a1f9d5c91ed6"
- type: TXT
name: "@"
content: "afternic-verification-Qvn3p7PuRqTYub6hbPxp9L"
- type: TXT
name: "@"
content: "dan-ownership-verification=bea7f800"
- type: TXT
name: "@"
content: "fa967d91-f436-46a6-bf49-698558be8ee6=f90a8712dc1eaddd82ca1259ed4c7ff03daf5a7d53d32e53c55dbddd0e15bc16"
- type: TXT
name: "@"
content: "facebook-domain-verification=lvra5mnh2j90jj7amh2nvnfqkdko50"
- type: TXT
name: "@"
content: "godaddyverification=2gbh+ndX7gWL70Ex3Jvgow=="
- type: TXT
name: "@"
content: "google-site-verification=-7wFlJqPSp7H59im0mMEnpe40p1gjLnavIUODewnPzE"
ttl: 3600
- type: TXT
name: "@"
content: "google-site-verification=F-uX3GEV6LpQVD5tSlhX5jAVS8ourdfzgXTZUQu9nY4"
ttl: 3600
- type: TXT
name: "@"
content: "openai-domain-verification=dv-s6L3mYvgXGxF1HEvihKQpyqS"
- type: TXT
name: "@"
content: "v=spf1 include:_spf.google.com +a +mx +ip4:104.238.186.14 ~all"
Reference in New Issue View Git Blame Copy Permalink