module.technitium was gated only on the API token being present in
Infisical, so the single way to stop Terraform reconciling DNS was to pull
the token -- which also disables anything else that needs it. This adds an
explicit switch that ANDs with the existing token check, so the token can
stay put.
Set to false for now: DNS is being moved by hand during the domain
migration, and an apply in the middle of that would fight it.
Co-Authored-By: Claude Opus 5 <[email protected]>
Moves the search domain onto a real delegated subdomain and points DNS at
Technitium's new address on the atlashorizon VLAN (192.168.7.2) instead of
1.1.1.1 / its 192.168.0.x address. The S3 state backend endpoint follows
the same rename.
Drops the manual .lan records and the bookstack Caddy proxy along with the
old zone: those hosts are served under the new domain now, and leaving
them would have recreated the retired zone on the next apply.
Co-Authored-By: Claude Opus 5 <[email protected]>
nickandClaude Opus 5