universe/k8s/cf-zones/zoo-ngo.yaml at main

Files

T

zeekayandHanzo Dev e8aa0c89b3 Point every zone record at the current origin, proxied

Records across these zones named an address this estate does not answer on.
Each now names the origin the edge forwards to.

They are proxied deliberately: Cloudflare answers, the origin is reached only
from Cloudflare, and the address never appears in a public answer. Unproxied, a
record both publishes the origin and makes a reassigned address a live takeover
of the name.

Co-authored-by: Hanzo Dev <[email protected]>

2026-09-04 03:32:04 -07:00

283 lines

5.3 KiB

YAML

Raw Permalink Blame History

 # zoo-ngo.yaml — Cloudflare zone config for zoo.ngo
 # Zone ID: 9c6372f69d53e64bc2ba21b96263fceb
 # Source of truth for zoo.ngo DNS records
 # Last synced: 2026-03-12
 ---
 zone: zoo.ngo
 zone_id: "9c6372f69d53e64bc2ba21b96263fceb"
 records:
   - type: A
     name: api-explore
     content: "174.160.143.53"
     proxied: true
   - type: A
     name: api-test
     content: "34.22.245.55"
     proxied: false
   - type: A
     name: api.explore-test
     content: "34.22.245.55"
     proxied: false
   - type: A
     name: api.explore
     content: "34.22.248.74"
     proxied: false
   - type: A
     name: api.web3
     content: "134.199.136.205"
     # NOT proxied: CloudFlare Universal SSL covers *.zoo.ngo but not the
     # second-level *.web3.zoo.ngo, so proxying api.web3 breaks TLS until an
     # Advanced Certificate (ACM) for *.web3.zoo.ngo is provisioned. Served
     # direct from the hanzo-k8s LB with a valid Let's Encrypt cert.
     proxied: false
     ttl: 300
   - type: A
     name: api
     content: "34.22.248.74"
     proxied: false
   - type: A
     name: bridge
     content: "174.160.143.53"
     proxied: true
   - type: A
     name: explore-test
     content: "34.22.245.55"
     proxied: false
   - type: A
     name: explore
     content: "174.160.143.53"
     proxied: true
   - type: A
     name: explorer
     content: "174.160.143.53"
     proxied: true
   - type: A
     name: kms
     content: "174.160.143.53"
     proxied: true
   - type: A
     name: sig.explore-test
     content: "34.22.245.55"
     proxied: false
   - type: A
     name: sig.explore
     content: "34.22.248.74"
     proxied: false
   - type: A
     name: stats.explore-test
     content: "34.22.245.55"
     proxied: false
   - type: A
     name: stats.explore
     content: "34.22.248.74"
     proxied: false
   - type: A
     name: viz.explore-test
     content: "34.22.245.55"
     proxied: false
   - type: A
     name: viz.explore
     content: "34.22.248.74"
     proxied: false
   - type: A
     name: web3
     content: "134.199.136.205"
     proxied: true
     ttl: 300
   - type: A
     name: ws.web3
     content: "134.199.136.205"
     # NOT proxied: same *.web3.zoo.ngo Universal-SSL gap as api.web3.
     proxied: false
     ttl: 300
   - type: A
     name: "@"
     content: "185.199.111.153"
     proxied: false
   - type: A
     name: "@"
     content: "185.199.110.153"
     proxied: false
   - type: A
     name: "@"
     content: "185.199.109.153"
     proxied: false
   - type: A
     name: "@"
     content: "185.199.108.153"
     proxied: false
   - type: AAAA
     name: cdn
     content: "100::"
     proxied: true
   - type: AAAA
     name: "@"
     content: "2606:50c0:8003::153"
     proxied: false
   - type: AAAA
     name: "@"
     content: "2606:50c0:8001::153"
     proxied: false
   - type: AAAA
     name: "@"
     content: "2606:50c0:8000::153"
     proxied: false
   - type: AAAA
     name: "@"
     content: "2606:50c0:8002::153"
     proxied: false
   - type: CNAME
     name: ai
     content: "zooai-chat.pages.dev"
     proxied: true
   - type: CNAME
     name: blog
     content: "zoo-blog.pages.dev"
     proxied: true
   - type: CNAME
     name: chat
     content: "zooai-chat.pages.dev"
     proxied: true
   - type: CNAME
     name: donate
     content: "hosted-checkout.stripecdn.com"
     proxied: false
   - type: CNAME
     name: download
     content: "public.r2.dev"
     proxied: true
   - type: CNAME
     name: foundation
     content: "zoo-apps.github.io"
     proxied: false
   - type: CNAME
     name: gym
     content: "zooai.github.io"
     proxied: false
   - type: CNAME
     name: papers
     content: "zooai.github.io"
     proxied: false
   - type: CNAME
     name: ui
     content: "zoo-labs.github.io"
     proxied: false
   - type: CNAME
     name: vote
     content: "zoo-apps.github.io"
     proxied: false
   - type: CNAME
     name: www
     content: "zoo-apps.github.io"
     proxied: false
   - type: CNAME
     name: zips
     content: "zooai.github.io"
     proxied: true
   - type: MX
     name: "@"
     content: "alt3.aspmx.l.google.com"
     ttl: 3600
   - type: MX
     name: "@"
     content: "aspmx.l.google.com"
     ttl: 3600
   - type: MX
     name: "@"
     content: "alt1.aspmx.l.google.com"
     ttl: 3600
   - type: MX
     name: "@"
     content: "alt2.aspmx.l.google.com"
     ttl: 3600
   - type: MX
     name: "@"
     content: "alt4.aspmx.l.google.com"
     ttl: 3600
   - type: TXT
     name: "_acme-challenge.api-explore"
     content: 'aTIhdbcShrcYpSFE2r_4C6J_11pE89XdKDOpknbv_Os'
     ttl: 120
   - type: TXT
     name: "_acme-challenge.donate"
     content: 'mGXhVquq8VRifQvM3q_x3zYD1yk00RvpmwU_WSroCzQ'
   - type: TXT
     name: "_acme-challenge.explore"
     content: 'p3a8omZVV0qfpdq9YEAJ4uY6nexvzZBJcL5OcCqOP2A'
     ttl: 120
   - type: TXT
     name: "_vercel"
     content: 'vc-domain-verify=ai.zoo.ngo,4b57259b626ea7fedef2'
   - type: TXT
     name: "@"
     content: 'slack-domain-verification=DRNH0gwucEBt7vpjJZWfkMt7rIWmGJRx6aCoz4UF'
   - type: TXT
     name: "@"
     content: 'b3c899da-4a5e-4e4e-ada1-450fdefbb131=fe1b76ad366126398732fc4cd8489b520d01174ceec3fe2a6defa8cdfc84fb26'
   - type: TXT
     name: "@"
     content: 'google-site-verification=PI_SalILhgyYqTKFOoSzV9FkIeaKSsVSOeBwEXT9reI'
     ttl: 3600
   - type: TXT
     name: "@"
     content: 'v=spf1 include:_spf.google.com -all'
     ttl: 3600
   - type: TXT
     name: "@"
     content: 'google-site-verification=YZ6z_uNp6bkHHKxDXnBKSEr6tVMR4mai2q35AJ_Gu-A'
     ttl: 3600

283 lines 5.3 KiB YAML Raw Permalink Blame History

283 lines

5.3 KiB

YAML

Raw Permalink Blame History