declare the acme.unkin.net nameservers

The live apex NS and ns1 glue were corrected by hand and exist only in the zone journal; a reseed would republish the primary pod IP.
2026-09-27 00:01:12 +10:00
parent b8a51baac0
commit a440634192
1 changed files with 11 additions and 0 deletions
@@ -17,3 +17,14 @@ spec:
  updateKeyRef: certmanager
  allowTransfer:
    - key certmanager
+  # Published apex NS. acme-ns1 is what the parent delegates to and glues; ns1 is
+  # in-zone, so its address is declared below or a reseed would glue it to the
+  # primary pod IP.
+  nameservers:
+    - acme-ns1.unkin.net.
+    - ns1.acme.unkin.net.
+  records:
+    - name: ns1
+      type: A
+      ttl: 3600
+      values: ["103.216.191.185"]