Technitium DNS

Technitium DNS Server

Technitium is the internal, split-horizon DNS server that lets every OMEGA Core service have a real hostname on the LAN — gitea.internal.omegaproject.ai,core.internal.omegaproject.ai, and so on — without any of those names existing in public DNS.

Public DNS for omegaproject.ai remains entirely separate, managed through Cloudflare and Route 53. Technitium only ever answers queries from inside the network.

Infrastructure

Host

Proxmox LXC — CT 107

Admin console on port 5380

Resolution

Split-horizon

*.internal.omegaproject.ai resolves only for clients on the internal network

Target

npmplus (CT 104)

Internal hostnames resolve to the reverse proxy, which terminates real TLS and routes to each backend

Local + Authentik (optional)

Authentik SSO is an additional login path — local login is never disabled. See Authentik

Role in OMEGA Core

Every other integration on this page depends on Technitium being able to resolve its hostname — Gitea, Authentik, and the reverse proxy itself all sit behind*.internal.omegaproject.ai names rather than bare IP addresses. Nothing about OMEGA Core's internal services needs to be reachable, or even resolvable, from outside the network for this to work.

Security

No Public Footprint

Internal service names are never published to public DNS — there's nothing for an external scan of omegaproject.ai's DNS records to find.

Real TLS Anyway

Internal-only doesn't mean unencrypted — certificates are still issued via Let's Encrypt DNS-01 through Cloudflare, terminated at npmplus.