PowerDNS API port 8081 (not 8053), bound on 10.10.0.1:8081 (WireGuard interface only). Authoritative nameservers: ns1.house-of-trae.com / ns2.house-of-trae.com.
house-of-trae.com, securenexus.net, byrne-accounts.org, stratus-digital.com, discreet-elite.uk, emerald-markets.net, privatenexus.net, tresemme.space, namevault.co.uk, dickson-supplies.com, evilrabbitart.com, rubyosiris.com, cloud-architects.online (legacy).
tresemme.space — legacy domain from the retired pn-test/Cosmos era. Only pn/notes subdomains still live (plain redirects to real services). Not planned for further use unless a future personal-services project explicitly picks it back up.privatenexus.net — apex + www only. A wildcard A record and a batch of Cosmos-era dead subdomains (cloud, nextcloud, vault, photos, etc.) were found and removed 2026-08-10 — see Group Entities & Domains for the decommission rule this was found breaking.Changes go through the PowerDNS API (or PowerDNS-Admin's UI at dns-admin.house-of-trae.com) — never hand-edit zone files directly. See Operational Rules for the wg0/loopback-IP gotcha that once took the PowerDNS API down fleet-wide after an unrelated tunnel teardown.