From ea3a9e4232eebb8836d4d791880ef469f0cb1050 Mon Sep 17 00:00:00 2001
From: blade <blade@darkness.services>
Date: Tue, 3 Mar 2026 22:24:06 -0500
Subject: [PATCH] perf(dns): add CoreDNS caching across zones

---
 Corefile | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/Corefile b/Corefile
index faf23b2..e075727 100644
--- a/Corefile
+++ b/Corefile
@@ -1,5 +1,6 @@
 ## resolve emerdns
 coin.:53, emc.:53, lib.:53, bazar.:53, enum.:53 {
+  cache 300
   forward . 10.5.0.9:5335
 }
 
@@ -10,6 +11,7 @@ meshname.:53, popura.:53 {
     block
   }
   meshname
+  cache 300
 }
 
 ## Example .popura domain hosting with a simple /etc/hosts like config
@@ -29,6 +31,7 @@ meshname.:53, popura.:53 {
 ## Example .meship support
 meship {
   meship
+  cache 300
 }
 
 ## Resolve Alfis domains
@@ -38,6 +41,7 @@ anon.:53, btn.:53, conf.:53, index.:53, merch.:53, mirror.:53, mob.:53, screen.:
     block
   }
 #  forward . [302:db60::53]:53 [300:6223::53]:53 [302:7991::53]:53
+  cache 300
   forward . 10.5.0.3:53
 }
 
@@ -48,6 +52,7 @@ onion.:53 {
     block
   }
   # tor container listens on 9053 for DNS queries
+  cache 300
   forward . 10.5.0.7:9053
 }
 
@@ -57,6 +62,7 @@ i2p.:53 {
     allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
     block
   }
+  cache 300
   forward . 10.5.0.2:53
 }
 
@@ -66,6 +72,7 @@ eth.:53 {
     allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
     block
   }
+  cache 300
   forward . 10.5.0.11:53
 }
 
@@ -75,6 +82,7 @@ bit.:53 {
     allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
     block
   }
+  cache 300
   forward . 10.5.0.12:53
 }
 
@@ -84,6 +92,7 @@ alt.:53 {
     allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
     block
   }
+  cache 300
   forward . 10.5.0.5:53
 }
 
@@ -93,6 +102,7 @@ loki.:53 {
     allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
     block
   }
+  cache 300
   forward . 10.5.0.14:53
 }
 
@@ -102,6 +112,7 @@ zil.:53 {
     allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
     block
   }
+  cache 300
   forward . 10.5.0.5:53
 }
 
@@ -111,6 +122,7 @@ web3.:53 {
     allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
     block
   }
+  cache 300
   forward . 10.5.0.5:53
 }
 
@@ -120,6 +132,7 @@ exit.:53, onion4.:53, onion6.:53 {
     allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
     block
   }
+  cache 300
   forward . 10.5.0.7:9053
 }
 
@@ -129,6 +142,7 @@ bbs.:53, chan.:53, cyb.:53, dyn.:53, epic.:53, geek.:53, gopher.:53, indy.:53, l
     allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
     block
   }
+  cache 300
   forward . 10.5.0.5:53
 }
 
@@ -142,6 +156,8 @@ bbs.:53, chan.:53, cyb.:53, dyn.:53, epic.:53, geek.:53, gopher.:53, indy.:53, l
     fallthrough
   }
 
+  cache 300
+
   ## Resolve all other DNS queries via AdGuard with DNS-over-TLS encryption
 #  forward . tls://94.140.14.14:853 tls://94.140.15.15:853 {
 #    tls_servername dns.adguard.com