DNS: Porkbun + Cloudflare

Overview

The domain is registered at Porkbun and uses Cloudflare as the DNS nameserver. Cloudflare’s nameservers provide DDoS protection, fast global propagation, and a clean dashboard for managing records.

Nameserver Delegation

In Porkbun’s domain settings, replace the default nameservers with Cloudflare’s assigned pair (shown when you add the domain in Cloudflare):

ns1.cloudflare.com
ns2.cloudflare.com

DNS Records

Add these records in the Cloudflare dashboard, pointing to the VPS public IP:

Type	Name	Value	Proxy
A	@	VPS IPv4	DNS only
A	www	VPS IPv4	DNS only
A	*	VPS IPv4	DNS only
AAAA	@	VPS IPv6 (if enabled)	DNS only
AAAA	www	VPS IPv6 (if enabled)	DNS only
AAAA	*	VPS IPv6 (if enabled)	DNS only

Caution

Set records to DNS only (grey cloud), not proxied (orange cloud). Traefik handles TLS termination directly; Cloudflare proxying interferes with Let’s Encrypt HTTP challenges.

Wildcard Record

The * wildcard record means every new subdomain (docs., status., maps., etc.) automatically resolves to the VPS without adding individual records. New apps are live as soon as Docker and Traefik are configured.

Verify Propagation

dig docs.weekendbuilder.io +short

Expected: the VPS IP address. DNS changes can take up to 48 hours globally but typically propagate within minutes via Cloudflare.