Devops: DNSSEC: berlin.freifunk.net

NetworkCommons / sig0namectl

Open dynamic DNS name management with SIG(0) update delegation.

https://sig0namectl.networkcommons.org

GNU Affero General Public License v3.0

12 stars 3 forks source link

Devops: DNSSEC: berlin.freifunk.net #11

Open adam-burns opened 7 months ago

adam-burns commented 7 months ago

20240419 meeting with DNSSEC admin for berlin.freifunk.net: upstream DNSSEC has settled, berlin could be enabled next week. 20240605 process agreed at FF Berlin monthly meeting

adam-burns commented 3 months ago

FF DNS admin hopes to configure DNSSEC on berlin.freifunk.net this evening. :)

adam-burns commented 3 months ago

FF DNS admin hopes to configure DNSSEC on berlin.freifunk.net this evening. :)

Did not finish last night, hopes to enable today.

adam-burns commented 2 months ago

DNSSEC now enabled. Awaiting DoH CORS proxy deployment.

adam-burns commented 1 month ago

DoH CORS proxy deployed. Now in testing.

adam-burns commented 1 month ago

After adding beta.berlin.freifunk.net as drop down domain option, registering new domain under beta.berlin.freifunk.net in domain-manager web application does not work.

application does not list new requested key name in beta.berlin.freifunk.net

NOTE: beta.berlin.freifunk.net is a separate DNS authoritative server to both zenr.io & beta.freifunk.net

Suspect that application does not yet handle/respect SVCB lookups for a new domain that is primaried on a distinct server.

This will be documented in new issue ...