From 8eb3aac7b2fbd2c4ff09db22a0dea5dfb6dc3bc0 Mon Sep 17 00:00:00 2001 From: Loren McIntyre Date: Fri, 19 Jun 2026 17:52:54 -0700 Subject: [PATCH] atproto: verify noisebridge.net handle via DNS instead of m3/caddy --- files/coredns/zones/noisebridge.net | 5 ++++- group_vars/noisebridge_net/caddy.yml | 1 - group_vars/noisebridge_net/vault | 22 +++++++++------------- templates/caddy/m3/Caddyfile.j2 | 3 --- 4 files changed, 13 insertions(+), 18 deletions(-) diff --git a/files/coredns/zones/noisebridge.net b/files/coredns/zones/noisebridge.net index 3ad9df52..e4becb8d 100644 --- a/files/coredns/zones/noisebridge.net +++ b/files/coredns/zones/noisebridge.net @@ -4,7 +4,7 @@ $TTL 3600 noisebridge.net. IN SOA ns1.noisebridge.net. hostmaster.noisebridge.net. ( - 2026061701 ; Serial + 2026070700 ; Serial 3600 ; Refresh 300 ; Retry 604800 ; Expire @@ -23,6 +23,9 @@ noisebridge.net. IN SOA ns1.noisebridge.net. hostmaster.noisebri spf 86400 IN TXT "v=spf1 mx a:lists.noisebridge.net a:m3.noisebridge.net a:m5.noiesbridge.net a:m6.noisebridge.net ~all" ; Google Domain Verification @ 86400 IN TXT "google-site-verification=ic9UzBw_VXfHokfo7hREQaDHisGig7TcfI-GvaRuRaU" +; atproto / Bluesky handle verification for noisebridge.net +; Replaces the m3/caddy /.well-known/atproto-did HTTP handler (was #417). +_atproto 86400 IN TXT "did=did:plc:4fn5ffs6txnxxozezxio3v7o" ; DKIM keys mail._domainkey IN TXT ( "v=DKIM1; h=sha256; k=rsa; t=y; " diff --git a/group_vars/noisebridge_net/caddy.yml b/group_vars/noisebridge_net/caddy.yml index f6ae7b5a..ca157d7a 100644 --- a/group_vars/noisebridge_net/caddy.yml +++ b/group_vars/noisebridge_net/caddy.yml @@ -18,5 +18,4 @@ noisebridge_mailman_cgi_scripts: - roster - subscribe -noisebridge_atproto_did: "{{ vault_noisebridge_atproto_did }}" noisebridge_goaccess_basic_auth: "{{ vault_noisebridge_goaccess_basic_auth }}" diff --git a/group_vars/noisebridge_net/vault b/group_vars/noisebridge_net/vault index e40ff57f..af7eacbe 100644 --- a/group_vars/noisebridge_net/vault +++ b/group_vars/noisebridge_net/vault @@ -1,14 +1,10 @@ $ANSIBLE_VAULT;1.1;AES256 -64356466366231626364333066653666623434353137626633386631363764613566633366336137 -6531383634306639363934646136363132613833623132630a643731353363643564393436313461 -64396539653465373633306333376662663437343737396461663466336437643466343934643635 -6561666161343333620a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a633461666130643634393863343238 +35383033313466346630646336386237376465366566323537326137333538356133386633393639 +6130313964303263350a386663643065626636663530663864656564363031633964643735373165 +36653966396161636666643434646263373537383962323539616132636239623161303236623331 +33386662333233363436346138643038656134323765663333616133646534356466306565363631 +64383732663265646463373332663563613065663131346264343762663831316133343039306263 +34613739333530343763333830336264306162333862336430346130633231623330363832363330 +65636138653830376137393163393835393966613733353162663965643463656432 diff --git a/templates/caddy/m3/Caddyfile.j2 b/templates/caddy/m3/Caddyfile.j2 index b35cbd3c..be0b126e 100644 --- a/templates/caddy/m3/Caddyfile.j2 +++ b/templates/caddy/m3/Caddyfile.j2 @@ -86,9 +86,6 @@ noisebridge.net { } {{ noisebridge_caddy_log_filter }} } - handle /.well-known/atproto-did { - respond "{{ noisebridge_atproto_did }}" 200 - } redir https://www.noisebridge.net{uri} }