Everything important for the builder lives here
This page focuses on builder-specific settings: Codex connectivity, Traefik routing, DNS/wildcard, access protection, Research search providers, and builder-scoped system health.
Handle the most important settings work first
Codex connectivity
App routing and TLS mode
Confirm wildcard and resolver state
Shows results from both System resolver and Public DoH, which helps diagnose propagation and NXDOMAIN negative caching.
DNS records table
| Item | Name | System A | System AAAA | DoH A | DoH AAAA |
|---|---|---|---|---|---|
| Apex | beast-builder.marklo.de | 152.53.153.72 | 152.53.153.72 | ||
| Wildcard | bb-dns-1781632458-787.beast-builder.marklo.de | 152.53.153.72 | 152.53.153.72 | ||
| Sample | zip-create-test-2.beast-builder.marklo.de | 152.53.153.72 | 152.53.153.72 | ||
| Sample | zip-create-test.beast-builder.marklo.de | 152.53.153.72 | 152.53.153.72 | ||
| Sample | test-app.beast-builder.marklo.de | 152.53.153.72 | 152.53.153.72 |
DNS-01 / Netcup wildcard certificate
Goal: obtain a single certificate for beast-builder.marklo.de + *.beast-builder.marklo.de, so each new slug does not need a separate Let’s Encrypt request.
Certificate details
| Key | Value |
|---|---|
| subject_cn | TRAEFIK DEFAULT CERT |
| issuer | TRAEFIK DEFAULT CERT |
| not_before | Jun 16 15:10:47 2026 GMT |
| not_after | Jun 16 15:10:47 2027 GMT |
| expected_wildcard_san | *.beast-builder.marklo.de |
Access protection (Traefik Basic Auth)
This site is protected by the Traefik middleware secure-auth. Updates write to /traefik-dynamic/auth.yml (bcrypt hash only; never stores plaintext).
Web search providers (Research + Generate Brief)
Because VPS/data-center IPs are often blocked by DuckDuckGo, prefer external providers (e.g. self-hosted SearXNG or a paid SERP API).
Builder-scoped resource snapshot only
Loaded asynchronously so docker.info() / docker.api.df() don’t slow down first paint.