DNS as Code with DNSControl
How the zones for inf3.ch, inf3.xyz and schwery.me are declared with DNSControl, kept in Git and deployed to Route53 on merge.
Field notes since 2010
I’m Thomas, a software engineer in Switzerland. When a project takes me a few weekends to figure out, like a WireGuard hub, a Talos cluster or a laser-cut panorama, I write it up here.
Skyline from Bellalui, traced by Panowood
How the zones for inf3.ch, inf3.xyz and schwery.me are declared with DNSControl, kept in Git and deployed to Route53 on merge.
Nine years after the first cluster, the home lab runs on Talos Linux, everything above the nodes is deployed by ArgoCD, and storage comes from TrueNAS.
All my sites dial out to a small public server acting as a WireGuard hub, with frp for public ingress. This is how its Ansible repository is organised.
Scanning the bow grip we customised at the club with only a camera, rebuilding it with photogrammetry, and 3D printing improved versions.
Old encrypted drives full of rsync and hard-link backups from 2006 to 2014, and how they were moved into Borg.