Tf
Terraform config
//infra/dns:config_test validates the generated configuration with the pinned
DNSControl check command. It requires no credentials and does not access DNS
providers.
Operational wrappers pass providers.json explicitly. Its environment references
are populated by the AL Vault injector; DNSControl reads the values directly
without a rendered credentials file.
Project landing records live next to their projects in
projects/<project>/dnsconfig.json. Project files own their subdomain CNAMEs, which point directly to
alwaldend.github.io. as required by GitHub Pages custom-domain setup.
Interactive:
bazel run //infra/dns
Just preview:
bazel run //infra/dns:dns.preview
Just deploy:
bazel run //infra/dns:dns.deploy
{{/< readfile file=“zones/dc1/alwaldend.com.zone” code=“true” lang=“zone” >/}}
{{/< readfile file=“zones/global/alwaldend.com.zone” code=“true” lang=“zone” >/}}
Terraform config