From 40eac49ea3d25864f12217e81e9caf889ecdf5b4 Mon Sep 17 00:00:00 2001
From: N0Ball <mail@n0ball.tw>
Date: Tue, 10 Mar 2026 22:12:27 +0800
Subject: [PATCH] Revert authoritative DNS changes, keep only internal CoreDNS
 CI

---
 .gitea/workflows/deploy.yaml | 19 +++----------------
 generate-zone.sh             | 33 ---------------------------------
 svc-records.yaml             |  7 -------
 3 files changed, 3 insertions(+), 56 deletions(-)
 delete mode 100755 generate-zone.sh
 delete mode 100644 svc-records.yaml

diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index e88e7e9..6ad7f06 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -2,9 +2,7 @@ name: Deploy DNS Records
 on:
   push:
     branches: [main]
-    paths:
-      - records.yaml
-      - svc-records.yaml
+    paths: [records.yaml]
 
 jobs:
   deploy:
@@ -30,7 +28,7 @@ jobs:
             sudo install kubectl /usr/local/bin/kubectl
           fi
 
-      - name: Apply internal CoreDNS records
+      - name: Generate and apply CoreDNS configmap
         run: |
           cd dns-records
           chmod +x generate.sh
@@ -39,15 +37,4 @@ jobs:
           kubectl apply -f /tmp/coredns-custom.yaml
           kubectl rollout restart deployment/coredns -n kube-system
           kubectl rollout status deployment/coredns -n kube-system --timeout=60s
-          echo "Internal DNS records applied"
-
-      - name: Apply authoritative zone records
-        run: |
-          cd dns-records
-          chmod +x generate-zone.sh
-          ./generate-zone.sh svc-records.yaml > /tmp/coredns-auth-zone.yaml
-          cat /tmp/coredns-auth-zone.yaml
-          kubectl apply -f /tmp/coredns-auth-zone.yaml
-          kubectl rollout restart deployment/coredns-auth -n authoritative-dns
-          kubectl rollout status deployment/coredns-auth -n authoritative-dns --timeout=60s
-          echo "Authoritative zone records applied"
+          echo "DNS records applied successfully"
diff --git a/generate-zone.sh b/generate-zone.sh
deleted file mode 100755
index 367dfd6..0000000
--- a/generate-zone.sh
+++ /dev/null
@@ -1,33 +0,0 @@
-#!/bin/sh
-# Generates authoritative zone ConfigMap for svc.n0ball.tw from svc-records.yaml
-# Usage: ./generate-zone.sh svc-records.yaml > coredns-auth-zone.yaml
-set -e
-
-RECORDS_FILE="${1:-svc-records.yaml}"
-SERIAL=$(date +%Y%m%d%H)
-
-cat <<EOF
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: coredns-auth-zone
-  namespace: authoritative-dns
-data:
-  svc.n0ball.tw.zone: |
-    \$ORIGIN svc.n0ball.tw.
-    @   3600 IN SOA ns1.n0ball.tw. admin.n0ball.tw. (
-        ${SERIAL} ; serial
-        3600       ; refresh
-        600        ; retry
-        86400      ; expire
-        60         ; minimum
-    )
-    @   3600 IN NS ns1.n0ball.tw.
-    @   3600 IN NS ns2.n0ball.tw.
-EOF
-
-awk '
-/^[a-zA-Z0-9]/ && / IN / {
-  printf "    %s\n", $0
-}
-' "$RECORDS_FILE"
diff --git a/svc-records.yaml b/svc-records.yaml
deleted file mode 100644
index c4e2248..0000000
--- a/svc-records.yaml
+++ /dev/null
@@ -1,7 +0,0 @@
-## External DNS Records for svc.n0ball.tw zone
-## Format: name: IP
-## These are served authoritatively to the internet.
-## Push to main to apply changes automatically.
-
-# Example:
-# test 60 IN A 140.115.16.135