panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

建立统一 DNS 清单并接管 Samba 静态记录 #49

Merged
panxiao81 merged 3 commits from feat/dns-source-of-truth into main 2026-09-13 15:42:13 +00:00
Conversation 1 Commits 3 Files Changed 14
+324 -35
panxiao81 commented 2026-09-10 17:25:18 +00:00
Owner
Copy Link
Copy Source

内容

  • 新增 infrastructure/dns/records.yml，作为公网、AD 与 split-horizon 视图的统一声明清单
  • 将 Samba 自定义模块整理为 repository-local ddupan.homelab collection
  • 使用完整 RRset 语义接管 7 个现有 AD A 记录，不触碰 Samba 自动维护的 AD/Kerberos 记录
  • CI 新增 ansible-test sanity 与 units
  • 记录 Cloudflare、Blocky、CoreDNS 后续接管边界

验证

  • ansible-test sanity：24 项通过
  • ansible-test units：2 项通过
  • ansible-playbook --syntax-check provision-dc.yml：通过
  • 对真实 dc1 执行 --check --diff --tags dns：7 个 RRset 全部 ok，changed=0

本 PR 不修改 DHCP、Cloudflare、Blocky、CoreDNS 或任何线上 DNS 记录。

## 内容 - 新增 infrastructure/dns/records.yml，作为公网、AD 与 split-horizon 视图的统一声明清单 - 将 Samba 自定义模块整理为 repository-local ddupan.homelab collection - 使用完整 RRset 语义接管 7 个现有 AD A 记录，不触碰 Samba 自动维护的 AD/Kerberos 记录 - CI 新增 ansible-test sanity 与 units - 记录 Cloudflare、Blocky、CoreDNS 后续接管边界 ## 验证 - ansible-test sanity：24 项通过 - ansible-test units：2 项通过 - ansible-playbook --syntax-check provision-dc.yml：通过 - 对真实 dc1 执行 --check --diff --tags dns：7 个 RRset 全部 ok，changed=0 本 PR 不修改 DHCP、Cloudflare、Blocky、CoreDNS 或任何线上 DNS 记录。
panxiao81 added 1 commit 2026-09-10 17:25:18 +00:00
feat(dns): 建立统一清单并接管 Samba 静态记录
yaml / yaml (pull_request) Successful in 39s
Details
ansible / lint (pull_request) Failing after 3m5s
Details
97021109ac
panxiao81 added 1 commit 2026-09-10 17:48:20 +00:00
ci(ansible): 并行测试本地 collection
yaml / yaml (pull_request) Successful in 16s
Details
ansible / collection-test (pull_request) Successful in 54s
Details
ansible / lint (pull_request) Successful in 2m40s
Details
b390565146
infrastructure/dns/records.yml Outdated
@@ -0,0 +25,4 @@
public:
# Names expected at Cloudflare. Terraform adoption is a separate change;
# listing them here makes the current ownership gap explicit.
tunnel_names:
panxiao81 commented 2026-09-10 18:00:22 +00:00
Author
Owner
Copy Link
Copy Source

这里其实就应该是cname到tunnel的域名来着吧

这里其实就应该是cname到tunnel的域名来着吧
panxiao81 commented 2026-09-10 18:05:03 +00:00
Author
Owner
Copy Link
Copy Source

已修正：public 视图现在声明完整的 CNAME RRset、cfargotunnel.com 目标和 proxied=true，不再只是名称列表。对应提交 e2be2ca。

已修正：public 视图现在声明完整的 CNAME RRset、cfargotunnel.com 目标和 proxied=true，不再只是名称列表。对应提交 e2be2ca。
panxiao81 marked this conversation as resolved
panxiao81 added 1 commit 2026-09-10 18:04:04 +00:00
fix(dns): 声明公网隧道 CNAME 目标
yaml / yaml (pull_request) Successful in 18s
Details
ansible / collection-test (pull_request) Successful in 54s
Details
ansible / lint (pull_request) Successful in 5m13s
Details
e2be2ca045
panxiao81 merged commit d256682d11 into main 2026-09-13 15:42:13 +00:00
panxiao81 deleted branch feat/dns-source-of-truth 2026-09-13 15:42:14 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
panxiao81
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#49