fix(dns): remove the unused mail.jfraeys.com record (Cloudflare 526) #90

Merged

jfraeys merged 1 commit from jfraeys/fix/remove-unused-mail-record into main 2026-10-12 23:52:18 -04:00

Conversation 0 Commits 1 Files changed 1 -1

jfraeys commented 2026-10-12 23:16:49 -04:00

Owner

Copy link

mail.jfraeys.com is a proxied A/AAAA record pointing at the web node (carried over from the original monolithic main.tf, commit f6bcf73). Nothing serves it: the web host has no nginx until an app deploys, and no role, template or doc references the hostname, so Cloudflare answers 526 (invalid origin SSL).

Mail does not use this name: inbound is Cloudflare Email Routing (MX route*.mx.cloudflare.net), outbound is the Zedmail relay set up on the apex domain (scripts/cloudflare-migration-setup-wizard.sh), and the SPF/DKIM/DMARC records are separate resources that are not touched.

scripts/plan-prod.sh plan on this branch: web_a["mail"] and web_aaaa["mail"] destroyed, nothing else from this change (the vpn updates in the same plan come from #88, not merged when I ran it). Result after apply: mail.jfraeys.com gives NXDOMAIN instead of a 526.

If you want a webmail or mail-host name later, add it back with a real origin behind it. Closes the 'mail.jfraeys.com 526' item.

🤖 Generated with Claude Code

mail.jfraeys.com is a proxied A/AAAA record pointing at the web node (carried over from the original monolithic main.tf, commit f6bcf73). Nothing serves it: the web host has no nginx until an app deploys, and no role, template or doc references the hostname, so Cloudflare answers 526 (invalid origin SSL). Mail does not use this name: inbound is Cloudflare Email Routing (MX route*.mx.cloudflare.net), outbound is the Zedmail relay set up on the apex domain (scripts/cloudflare-migration-setup-wizard.sh), and the SPF/DKIM/DMARC records are separate resources that are not touched. scripts/plan-prod.sh plan on this branch: web_a["mail"] and web_aaaa["mail"] destroyed, nothing else from this change (the vpn updates in the same plan come from #88, not merged when I ran it). Result after apply: mail.jfraeys.com gives NXDOMAIN instead of a 526. If you want a webmail or mail-host name later, add it back with a real origin behind it. Closes the 'mail.jfraeys.com 526' item. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

jfraeys added 1 commit 2026-10-12 23:16:50 -04:00

fix(dns): remove the unused mail record (returns Cloudflare 526) ... c95a61b603

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

jfraeys merged commit fd9ef851ac into main 2026-10-12 23:52:18 -04:00

jfraeys referenced this pull request from a commit 2026-10-12 23:52:19 -04:00

Merge pull request 'fix(dns): remove the unused mail.jfraeys.com record (Cloudflare 526)' (#90) from jfraeys/fix/remove-unused-mail-record into main

jfraeys referenced this pull request 2026-10-13 15:34:05 -04:00

Next: immediate steps (merge, deploy, verify) after the 2026-10-13 session #116

jfraeys referenced this pull request 2026-10-13 15:34:06 -04:00

Roadmap: remaining infra and secrets work (tracker) #122

jfraeys referenced this pull request 2026-10-13 15:57:49 -04:00

Infra backlog: capacity, CI verification, alerts, older loose ends #121

jfraeys referenced this pull request from a commit 2026-10-17 20:00:57 -04:00

fix(dns): deSEC drops the removed mail host; parity test for the two DNS modules

jfraeys referenced this pull request 2026-10-17 20:00:57 -04:00

feat(dns): web-ssh, a DNS-only name for the web host #275

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

jfraeys/infra!90

No description provided.