# All Cloudflare Domains Analysis

## Domains in Cloudflare Account

| Domain | Status | Plan | Unique Visitors | Notes |
|--------|--------|------|-----------------|-------|
| `commcourts.org` | Active | Free | 842 | ⚠️ Not analyzed |
| `d-bis.org` | Active | Free | 1.94k | ✅ Analyzed - Main domain |
| `defi-oracle.io` | Active | Free | 0 | ⚠️ Not analyzed |
| `ibods.org` | Active | Free | 1.15k | ⚠️ Not analyzed |
| `mim4u.org` | Active | Free | 2 | ⚠️ Separate domain (not subdomain) |
| `sankofa.nexus` | Active | Free | 1 | ⚠️ Not analyzed |

## Critical Discovery: mim4u.org Domain Conflict

### Issue Identified ⚠️

In the DNS zone file for `d-bis.org`, we saw:
- `mim4u.org.d-bis.org` (subdomain of d-bis.org)
- `www.mim4u.org.d-bis.org` (subdomain of d-bis.org)

But `mim4u.org` is also a **separate domain** in Cloudflare!

**Problem**: 
- `mim4u.org.d-bis.org` is a subdomain of d-bis.org
- `mim4u.org` is a separate root domain
- These are different entities but could cause confusion

**Impact**: 
- Users might expect `mim4u.org` to work, but it's configured as `mim4u.org.d-bis.org`
- DNS routing confusion
- Potential SSL certificate issues

## d-bis.org Domain Analysis (Complete)

### Tunnel Configurations

| Tunnel ID | Hostnames | Status | Location |
|-----------|-----------|--------|----------|
| `ccd7150a-9881-4b8c-a105-9b4ead6e69a2` | ml110-01.d-bis.org | ✅ Active | VMID 102 |
| `4481af8f-b24c-4cd3-bdd5-f562f4c97df4` | r630-01.d-bis.org | ✅ Active | VMID 102 |
| `0876f12b-64d7-4927-9ab3-94cb6cf48af9` | r630-02.d-bis.org | ✅ Healthy | VMID 102 |
| `10ab22da-8ea3-4e2e-a896-27ece2211a05` | 9 hostnames (RPC, API, Admin, MIM4U) | ⚠️ DOWN | VMID 102 |
| `b02fe1fe-cb7d-484e-909b-7cc41298ebe8` | explorer.d-bis.org | ✅ Healthy | VMID 102 |

### Issues on d-bis.org

1. **Shared Tunnel Down**: `10ab22da-8ea3-4e2e-a896-27ece2211a05` needs configuration
2. **Low TTL**: All CNAME records have TTL=1 second
3. **MIM4U Subdomain**: `mim4u.org.d-bis.org` conflicts with separate `mim4u.org` domain

## Other Domains - Analysis Needed

### commcourts.org
- **Status**: Active, 842 visitors
- **Analysis**: Not yet reviewed
- **Action**: Check for tunnel configurations, DNS records

### defi-oracle.io
- **Status**: Active, 0 visitors
- **Analysis**: Not yet reviewed
- **Note**: Referenced in d-bis.org DNS (monetary-policies.d-bis.org → defi-oracle-tooling.github.io)
- **Action**: Check for tunnel configurations

### ibods.org
- **Status**: Active, 1.15k visitors
- **Analysis**: Not yet reviewed
- **Action**: Check for tunnel configurations, DNS records

### mim4u.org
- **Status**: Active, 2 visitors
- **Analysis**: ⚠️ **CONFLICT** - Separate domain but also subdomain of d-bis.org
- **Action**: 
  - Verify DNS records
  - Check if `mim4u.org` (root) should point to same services as `mim4u.org.d-bis.org`
  - Resolve naming conflict

### sankofa.nexus
- **Status**: Active, 1 visitor
- **Analysis**: Not yet reviewed
- **Note**: Matches infrastructure naming (sankofa.nexus)
- **Action**: Check for tunnel configurations, DNS records

## Recommended Actions

### Priority 1: Fix d-bis.org Issues

1. **Fix shared tunnel** (already scripted):
   ```bash
   ./fix-shared-tunnel.sh
   ```

2. **Update TTL values** in Cloudflare Dashboard:
   - DNS → d-bis.org → Records
   - Change all CNAME TTL from 1 to 300

3. **Resolve MIM4U conflict**:
   - Decide: Use `mim4u.org` (root) or `mim4u.org.d-bis.org` (subdomain)?
   - Update DNS accordingly
   - Update tunnel configuration

### Priority 2: Analyze Other Domains

For each domain, check:
- [ ] DNS records
- [ ] Tunnel configurations
- [ ] SSL/TLS settings
- [ ] Security settings
- [ ] Page Rules
- [ ] Workers (if any)

### Priority 3: Domain Consolidation Review

Consider:
- Are all domains necessary?
- Can some be consolidated?
- Are there duplicate services across domains?

## Domain-Specific Recommendations

### mim4u.org
**Decision needed**: 
- Option A: Use `mim4u.org` as primary, remove `mim4u.org.d-bis.org`
- Option B: Use `mim4u.org.d-bis.org` as primary, redirect `mim4u.org` to it
- Option C: Keep both but ensure they point to same services

### sankofa.nexus
**Potential use**: 
- Infrastructure management domain
- Could host Proxmox access (alternative to d-bis.org)
- Could use for internal services

## Summary

✅ **d-bis.org**: Analyzed, issues identified, fix script ready  
⚠️  **mim4u.org**: Conflict with d-bis.org subdomain - needs resolution  
❓ **Other domains**: Need analysis  

**Next Steps**:
1. Run `./fix-shared-tunnel.sh` for d-bis.org
2. Resolve mim4u.org conflict
3. Analyze remaining domains
4. Update TTL values across all domains