Post #1833096

Numerous technical and security improvements on the infrastructure that supports https://mstdn.dk DNS simplified extensively by migrating public facing secondary nameservers to #NSD using #CatalogZones from PowerDNS + DNSDist.#DNSSEC reenabled#ExternalDNS and #CertManager configuration vastly simplified.#Ingress controller migrated from #Nginx to #TraefikBottom line: https://sikkerpånettet.dk/ now gives the site a 100% #security score. There are still improvements to be made (weirdly enough) - specifically I'm looking into supporting DANE for #TLS certificate signatures in #DNS. Now that's off the TODO-list :-) #mstdndk