Files
proxmox/docs/05-network/DNS_ENTRIES_COMPLETE_STATUS.md
defiQUG fbda1b4beb
Some checks failed
Deploy to Phoenix / deploy (push) Has been cancelled
docs: Ledger Live integration, contract deploy learnings, NEXT_STEPS updates
- ADD_CHAIN138_TO_LEDGER_LIVE: Ledger form done; public code review repo bis-innovations/LedgerLive; init/push commands
- CONTRACT_DEPLOYMENT_RUNBOOK: Chain 138 gas price 1 gwei, 36-addr check, TransactionMirror workaround
- CONTRACT_*: AddressMapper, MirrorManager deployed 2026-02-12; 36-address on-chain check
- NEXT_STEPS_FOR_YOU: Ledger done; steps completable now (no LAN); run-completable-tasks-from-anywhere
- MASTER_INDEX, OPERATOR_OPTIONAL, SMART_CONTRACTS_INVENTORY_SIMPLE: updates
- LEDGER_BLOCKCHAIN_INTEGRATION_COMPLETE: bis-innovations/LedgerLive reference

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-12 15:46:57 -08:00

73 lines
3.2 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# DNS Entries Completion Status Report
**Last Updated:** 2026-02-05
**Document Version:** 1.1
**Status:** Active Documentation
**Summary:** DNS is managed in Cloudflare for all public hostnames. The **recommended** public path is **Fastly** (Option A) or **direct to 76.53.10.36** (Option C), not Cloudflare Tunnel. See [EDGE_PORT_VERIFICATION_RUNBOOK.md](EDGE_PORT_VERIFICATION_RUNBOOK.md) and [CLOUDFLARE_ROUTING_MASTER.md](CLOUDFLARE_ROUTING_MASTER.md).
---
## Recommended DNS Target (Fastly or Direct)
| Option | DNS target | When to use |
|--------|------------|-------------|
| **A** | CNAME to Fastly hostname (e.g. `*.global.ssl.fastly.net` or custom) | 76.53.10.36:80/443 open from internet; want CDN/cache |
| **C** | A record to **76.53.10.36** (proxy on or off) | 76.53.10.36:80/443 open; want simplicity, no Fastly |
For web/api do not use CNAME to `*.cfargotunnel.com` as primary ingress (502 when used for all traffic). **Option B:** The 6 RPC HTTP hostnames use CNAME to tunnel; see [OPTION_B_RPC_VIA_TUNNEL_RUNBOOK.md](OPTION_B_RPC_VIA_TUNNEL_RUNBOOK.md).
---
## Domains to Configure (d-bis.org, mim4u.org, defi-oracle.io)
### d-bis.org (RPC, Explorer, DBIS)
| Domain | Purpose | NPMplus backend |
|--------|---------|-----------------|
| rpc-http-pub.d-bis.org | Public HTTP RPC | 192.168.11.221:8545 |
| rpc-ws-pub.d-bis.org | Public WebSocket RPC | 192.168.11.221:8546 |
| rpc-http-prv.d-bis.org | Private HTTP RPC | 192.168.11.211:8545 |
| rpc-ws-prv.d-bis.org | Private WebSocket RPC | 192.168.11.211:8546 |
| dbis-admin.d-bis.org | DBIS Admin | 192.168.11.130:80 |
| dbis-api.d-bis.org | DBIS API Primary | 192.168.11.155:3000 |
| dbis-api-2.d-bis.org | DBIS API Secondary | 192.168.11.156:3000 |
| explorer.d-bis.org | Blockscout | 192.168.11.140:80, :4000 |
| secure.d-bis.org | DBIS Secure | 192.168.11.130:80 |
### mim4u.org
| Domain | Purpose | NPMplus backend |
|--------|---------|-----------------|
| mim4u.org | MIM4U main | 192.168.11.37:80 |
| www.mim4u.org | Redirect to mim4u.org | (redirect) |
### defi-oracle.io (RPC)
| Domain | Purpose | NPMplus backend |
|--------|---------|-----------------|
| rpc.defi-oracle.io | HTTP RPC | 192.168.11.221:8545 |
| wss.defi-oracle.io | WebSocket RPC | 192.168.11.221:8546 |
All of the above route through **NPMplus** (192.168.11.167) once traffic reaches 76.53.10.36 (or Fastly → 76.53.10.36).
---
## Completion Status
- **DNS:** Cloudflare remains the DNS provider for all public hostnames.
- **Target:** Point records to **Fastly** (CNAME) or **76.53.10.36** (A), per option chosen after [EDGE_PORT_VERIFICATION_RUNBOOK.md](EDGE_PORT_VERIFICATION_RUNBOOK.md).
- **Tunnel:** For web/api use Fastly or A 76.53.10.36. Option B: 6 RPC hostnames use CNAME to tunnel; see [OPTION_B_RPC_VIA_TUNNEL_RUNBOOK.md](OPTION_B_RPC_VIA_TUNNEL_RUNBOOK.md).
---
## Scripts
- **scripts/create-missing-dns-records.sh** Creates or updates DNS records (update to use Fastly or 76.53.10.36 as target).
- **scripts/verify-dns-and-services.sh** Verifies DNS and service accessibility.
---
**Last Updated:** 2026-02-05
**See also:** [CLOUDFLARE_ROUTING_MASTER.md](CLOUDFLARE_ROUTING_MASTER.md), [RPC_ENDPOINTS_MASTER.md](../04-configuration/RPC_ENDPOINTS_MASTER.md)