From 0f679439cc805fa94faacd7e8e7f131c59cae724 Mon Sep 17 00:00:00 2001 From: dev_agent Date: Mon, 5 Oct 2026 20:09:59 -0400 Subject: [PATCH] State the exact Cloudflare record in the runbook DNS section Co-Authored-By: Claude Opus 5.5 --- deploy/RUNBOOK.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deploy/RUNBOOK.md b/deploy/RUNBOOK.md index 522500b..4f4cca3 100644 --- a/deploy/RUNBOOK.md +++ b/deploy/RUNBOOK.md @@ -283,7 +283,7 @@ curl -s -o /dev/null -w "%{http_code}\n" https://mealquest.cubecraftlabs.com/hea | Where | Record | | --- | --- | -| Cloudflare, zone `cubecraftlabs.com` | `A mealquest` (`mealquest.cubecraftlabs.com`), **proxied** (orange cloud), pointing at the site's public origin address. Because it is proxied, public resolvers answer with Cloudflare's anycast addresses, A and AAAA (AAAA on 2026-10-05: `2606:4700:3032::6815:34ed`, `2606:4700:3035::ac43:cd75`), never the origin. The origin address itself is not recorded in this runbook or in CTXD; read it from the Cloudflare dashboard | +| Cloudflare, zone `cubecraftlabs.com` | `CNAME mealquest.cubecraftlabs.com` → `cubecraftlabs.com`, **proxied = true** (orange cloud). Because it is proxied, public resolvers answer with Cloudflare's anycast addresses, A and AAAA (AAAA on 2026-10-05: `2606:4700:3032::6815:34ed`, `2606:4700:3035::ac43:cd75`), never the origin | | Pi-hole primary 10.60.1.101 (`dns.ccl`), Local DNS records | `A mealquest.cubecraftlabs.com` → `10.60.1.33` (Traefik) | | Pi-hole secondary 10.60.1.85 (`dns2.ccl`), Local DNS records | `A mealquest.cubecraftlabs.com` → `10.60.1.33` (Traefik) |