DNS Issues
Authentication & permissions
Section titled “Authentication & permissions”| Error | Fix |
|---|---|
"Authentication error" |
Regenerate token in Cloudflare Dashboard; auberge config set cloudflare_dns_api_token <token>; verify with auberge dns status |
"Insufficient permissions" |
Recreate token with DNS Edit + Zone Read permissions |
"Zone not found" |
auberge config get domain; auberge config set domain example.com; confirm domain exists in Cloudflare |
"Multiple zones found" |
Scope token to a specific zone |
"DNS-01 challenge failed" |
Token invalid or missing DNS edit permission — verify with auberge dns status |
Record operations
Section titled “Record operations”| Error | Cause | Fix |
|---|---|---|
"Record already exists" |
N/A — commands are idempotent | Safe to retry; record updates in place |
"Invalid IP address" |
Non-IPv4 value (hostname, IPv6, IP:port) | auberge dns set --subdomain cal --ip 203.0.113.10 |
"Rate limit exceeded" |
Rapid repeated calls | Wait 60s; prefer auberge dns set-all over individual sets in loops |
Propagation
Section titled “Propagation”New record not resolving or old IP still showing — work through in order:
# 1. Query Cloudflare's authoritative resolver directlydig @1.1.1.1 subdomain.example.com +short
# 2. Flush local cachesudo systemd-resolve --flush-caches # Linuxsudo dscacheutil -flushcache # macOS
# 3. Confirm record stateauberge dns list --subdomain calMigration
Section titled “Migration”"Some records failed to migrate"
Section titled “"Some records failed to migrate"”Re-run — dns migrate is idempotent:
auberge dns migrate --ip 10.0.0.1Unexpected records migrated
Section titled “Unexpected records migrated”dns migrate updates all records pointing at the old IP. Use dns set to target specific subdomains instead:
auberge dns set --subdomain cal --ip 10.0.0.1auberge dns set --subdomain rss --ip 10.0.0.1Batch operations
Section titled “Batch operations”| Error | Fix |
|---|---|
"No subdomain environment variables found" |
auberge config list | grep subdomain — set missing *_subdomain keys |
| DNS records exist but apps unreachable | Deploy apps (auberge ansible run --host vps --tags apps); check sudo ufw status and sudo systemctl status caddy |
| App deployed but subdomain missing | Some roles (Blocky, Calibre) don’t include dns_record integration — create manually: auberge dns set --subdomain <sub> --ip <ip> |
Verification
Section titled “Verification”auberge dns list # all recordsdig subdomain.example.com +short # live resolutiondig @8.8.8.8 subdomain.example.com # bypass local cache