kevinveenbirkenbachandClaude Opus 5 c7d162fa88 fix(coredns): derive the domain regex from INFINITO_DOMAIN when rendering ...

INFINITO_DOMAIN_RE carried an already escaped regex through the env
chain: EnvBuilder.setdefault prefers a value already in the process env,
quote_for_dotenv escapes every backslash, and load.sh unescapes it again.
One inherited value with a doubled backslash was enough to write
"infinito\\\\.test" into .env, the rendered Corefile then matched a
literal backslash, and getent hosts test.infinito.test failed with rc 2.

The renderer now substitutes DOMAIN_RE = re.escape(INFINITO_DOMAIN) at
render time, so no backslash travels through the env or .env at all. The
template placeholder is renamed because it is a derived render value, not
an env key, and INFINITO_DOMAIN_RE is removed from default.env and the
passthrough keys, leaving INFINITO_DOMAIN as the single source.

A renderer test renders the real template and requires a single-escaped
match with no doubled backslash and no leftover placeholder. Verified
live: the Corefile renders ^infinito\.test\.$, test.infinito.test
resolves to 172.30.0.10 and test.infinitoXtest does not.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-11 20:53:19 +02:00

..

cli

fix(coredns): derive the domain regex from INFINITO_DOMAIN when rendering

2026-09-11 20:53:19 +02:00

group_vars

fix(litellm): gate consumers on a served model, not on the gateway being deployed

2026-09-04 19:48:32 +02:00

library

…

plugins

refactor(sso): compute the app logout target once in the sso lookup

2026-09-11 13:06:19 +02:00

roles

fix(bluesky): notify the compose rebuild only after the backend renders the stack

2026-09-11 20:46:10 +02:00

scripts

fix(diagnostics): let the in-zone probes read the drop-in that holds the zone

2026-09-03 12:50:58 +02:00

utils

fix(litellm): let the database follow the inventory and keep the network a dedicated one is reached on

2026-09-11 13:32:36 +02:00

__init__.py

…