c93388441d
The "Architecture" diagram and section 5 ("Cloudflare: staging
subdomain") both implied that `*.staging.moleculesai.app` is a wildcard
DNS record. It is not. The control plane writes a per-tenant CNAME at
provision time (see `internal/provisioner/ec2.go` ->
`Tunnel.CreateTunnelDNS`), and unknown slugs correctly return NXDOMAIN.
This rewrite:
- Replaces `*.staging.moleculesai.app` / `*.moleculesai.app` in the
ASCII diagram with `<slug>.<env-domain>` plus a "no wildcard" note.
- Renames section 5 to "Cloudflare: per-tenant CNAMEs (no wildcard)"
and explains that NXDOMAIN on unknown slugs is correct, that
`getaddrinfo ENOTFOUND` in tests means the slug is unprovisioned
(not an infra bug), and that the same model applies to both
staging and production.
|
||
|---|---|---|
| .github/workflows | ||
| app | ||
| audio | ||
| content | ||
| docs/marketing | ||
| lib | ||
| marketing/demos/snapshot-scrub | ||
| .gitignore | ||
| mdx-components.tsx | ||
| next.config.mjs | ||
| package-lock.json | ||
| package.json | ||
| postcss.config.mjs | ||
| source.config.ts | ||
| tsconfig.json | ||