watcher: follow a watched name's CNAME for port and TLS checks (closes #203) #209

Merged
clawbot merged 1 commits from issue-203-follow-cname into next 2026-10-02 08:26:27 +02:00
1 Commits
Author SHA1 Message Date
sneak f513d7d4c2 watcher: follow a watched name's CNAME for port and TLS checks (closes #203)
check / check (push) Successful in 1m16s
When a watched name's nameservers answer with a CNAME and no address,
the DNS check follows every target they gave with ResolveIPAddresses
and saves all addresses found as cnameAddresses in the hostname state,
so nameservers disagreeing on the target do not change them between
checks. Port and TLS checks use them. A change, also from or to none,
is notified as a CNAME address change; the first check from a state
file without them sends none. When a target cannot be followed, or
none of the name's nameservers answered, the last check's addresses
are kept. The domain check now runs the hostname check for the apex
instead of a copy of it.

Model: opus-5-5
2026-10-02 05:54:25 +00:00