This is an old revision of the document!
Table of Contents
DNS, TLS, and public sites
DNS and Caddy routes
An authoritative DNS check at 2026-10-25 15:10 UTC queried both registrar name servers. batbox.isnotreal.site and mnemosyne.isnotreal.site each returned A 71.112.215.60; those exact checks returned no AAAA answer. A random *.isnotreal.site probe also resolved to that address, supporting a wildcard A record at the time of the check. This is a dated DNS observation, not proof that every hostname or record type is configured identically.
The live /etc/caddy/Caddyfile matched the validated candidate byte-for-byte at the 15:15 UTC deployment record. Caddy serves batbox.isnotreal.site from /var/www/batbox and mnemosyne.isnotreal.site from /var/www/batbox/mnemosyne. The apex isnotreal.site and www.isnotreal.site redirect to the Batbox home. An authenticated wild.isnotreal.site route forwards model requests to the local router; a /cve-kb/ path forwards to the CVE service. Caddy also has a local credential-gated route on port 8000. No credentials are recorded here.
TLS and live checks
At 2026-10-25 15:17 UTC, certificate verification reported trusted Let's Encrypt certificates for batbox.isnotreal.site, mnemosyne.isnotreal.site, isnotreal.site, and www.isnotreal.site; observed expiry was 2027-01-23. Live HEAD checks at 16:22 UTC returned HTTPS 200 for the two site roots and HTTPS 301 for the apex, redirecting to the Batbox home. This confirms the observed routes at those times; it does not establish the TLS or public DNS state of the wild API hostname.
The future wiki should be published only after its intended hostname, access policy, and DokuWiki route are recorded separately. These current routes serve static site files; no DokuWiki service is represented in this snapshot.
Recheck
Inspect routes with rg -n '(^[^#].*\.site \{|^space*(root|file_server|redir|reverse_proxy|handle_path))' /etc/caddy/Caddyfile. Check DNS using dig @dns1.registrar-servers.com +norecurse +time=3 +tries=1 batbox.isnotreal.site A and repeat for the other host and AAAA. Check pages with curl -I https://batbox.isnotreal.site/ and curl -I https://mnemosyne.isnotreal.site/. Source records: /home/isnotreal/.batbox/diagnostics/reference-deep-dives-20261025/current-dns.json, tls-verification.json, and /home/isnotreal/.batbox/diagnostics/letsencrypt-20261025T151528Z/.