# DNS Entries Completion Status Report

**Last Updated:** 2026-02-05  
**Document Version:** 1.1  
**Status:** Active Documentation

**Summary:** DNS is managed in Cloudflare for all public hostnames. The **recommended** public path is **Fastly** (Option A) or **direct to 76.53.10.36** (Option C), not Cloudflare Tunnel. See [EDGE_PORT_VERIFICATION_RUNBOOK.md](EDGE_PORT_VERIFICATION_RUNBOOK.md) and [CLOUDFLARE_ROUTING_MASTER.md](CLOUDFLARE_ROUTING_MASTER.md).

---

## Recommended DNS Target (Fastly or Direct)

| Option | DNS target | When to use |
|--------|------------|-------------|
| **A** | CNAME to Fastly hostname (e.g. `*.global.ssl.fastly.net` or custom) | 76.53.10.36:80/443 open from internet; want CDN/cache |
| **C** | A record to **76.53.10.36** (proxy on or off) | 76.53.10.36:80/443 open; want simplicity, no Fastly |

For web/api do not use CNAME to `*.cfargotunnel.com` as primary ingress (502 when used for all traffic). **Option B:** The 6 RPC HTTP hostnames use CNAME to tunnel; see [OPTION_B_RPC_VIA_TUNNEL_RUNBOOK.md](OPTION_B_RPC_VIA_TUNNEL_RUNBOOK.md).

---

## Domains to Configure (d-bis.org, mim4u.org, defi-oracle.io)

### d-bis.org (RPC, Explorer, DBIS)

| Domain | Purpose | NPMplus backend |
|--------|---------|-----------------|
| rpc-http-pub.d-bis.org | Public HTTP RPC | 192.168.11.221:8545 |
| rpc-ws-pub.d-bis.org | Public WebSocket RPC | 192.168.11.221:8546 |
| rpc-http-prv.d-bis.org | Private HTTP RPC | 192.168.11.211:8545 |
| rpc-ws-prv.d-bis.org | Private WebSocket RPC | 192.168.11.211:8546 |
| dbis-admin.d-bis.org | DBIS Admin | 192.168.11.130:80 |
| dbis-api.d-bis.org | DBIS API Primary | 192.168.11.155:3000 |
| dbis-api-2.d-bis.org | DBIS API Secondary | 192.168.11.156:3000 |
| explorer.d-bis.org | Blockscout | 192.168.11.140:80, :4000 |
| secure.d-bis.org | DBIS Secure | 192.168.11.130:80 |

### mim4u.org

| Domain | Purpose | NPMplus backend |
|--------|---------|-----------------|
| mim4u.org | MIM4U main | 192.168.11.37:80 |
| www.mim4u.org | Redirect to mim4u.org | (redirect) |

### defi-oracle.io (RPC)

| Domain | Purpose | NPMplus backend |
|--------|---------|-----------------|
| rpc.defi-oracle.io | HTTP RPC | 192.168.11.221:8545 |
| wss.defi-oracle.io | WebSocket RPC | 192.168.11.221:8546 |

All of the above route through **NPMplus** (192.168.11.167) once traffic reaches 76.53.10.36 (or Fastly → 76.53.10.36).

---

## Completion Status

- **DNS:** Cloudflare remains the DNS provider for all public hostnames.
- **Target:** Point records to **Fastly** (CNAME) or **76.53.10.36** (A), per option chosen after [EDGE_PORT_VERIFICATION_RUNBOOK.md](EDGE_PORT_VERIFICATION_RUNBOOK.md).
- **Tunnel:** For web/api use Fastly or A 76.53.10.36. Option B: 6 RPC hostnames use CNAME to tunnel; see [OPTION_B_RPC_VIA_TUNNEL_RUNBOOK.md](OPTION_B_RPC_VIA_TUNNEL_RUNBOOK.md).

---

## Scripts

- **scripts/create-missing-dns-records.sh** – Creates or updates DNS records (update to use Fastly or 76.53.10.36 as target).
- **scripts/verify-dns-and-services.sh** – Verifies DNS and service accessibility.

---

**Last Updated:** 2026-02-05  
**See also:** [CLOUDFLARE_ROUTING_MASTER.md](CLOUDFLARE_ROUTING_MASTER.md), [RPC_ENDPOINTS_MASTER.md](../04-configuration/RPC_ENDPOINTS_MASTER.md)