wild-central

Go to file

Paul Payne ed0691d56f feat: Split DNS with correct IPs per service type

Fix dnsmasq reconciliation to use the correct DNS target IP:
- tcp-passthrough (k8s instances): DNS → k8s LB IP (LAN direct)
- http/static (Central apps): DNS → Central IP (HAProxy terminates)

Also handle ExtraDomains properly:
- Internal domains (internal.cloud.payne.io) get local=/ entries
  to prevent upstream DNS forwarding
- Extra domains get their own dnsmasq address= entries
- HAProxy already propagated ExtraDomains for SNI ACLs

Verified: cloud.payne.io → 192.168.8.240 (direct to k8s),
cloud2.payne.io → 192.168.8.80, central.payne.io → 192.168.8.151.
SNI routing through HAProxy works for both instances.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-07-09 15:46:35 +00:00

internal

feat: Split DNS with correct IPs per service type

2026-07-09 15:46:35 +00:00

web

feat: Per-service certs with opt-in wildcard provisioning

2026-07-09 14:47:00 +00:00

.air.toml

feat: Add dev environment config (.envrc + .air.toml)

2026-07-09 04:13:58 +00:00

.envrc

fix: Add WILD_CENTRAL_ENV=development to .envrc