From b9a81fb4c090113757015d62a5bdb047d6569980 Mon Sep 17 00:00:00 2001
From: Andrew Stoltz <andrew@flowercore.io>
Date: Mon, 15 Jun 2026 19:07:56 -0500
Subject: [PATCH] deploy(dns): pin DN-1 rate-limit image

---
 apps/fc-dns/fc-dns.yaml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/apps/fc-dns/fc-dns.yaml b/apps/fc-dns/fc-dns.yaml
index 03b795d..c593d18 100644
--- a/apps/fc-dns/fc-dns.yaml
+++ b/apps/fc-dns/fc-dns.yaml
@@ -85,6 +85,13 @@ data:
               "Distribution": "Warn"
             }
           }
+        },
+        "Dns": {
+          "RateLimits": {
+            "PermitLimit": 60,
+            "WindowSeconds": 60,
+            "QueueLimit": 0
+          }
         }
       }
     }
@@ -122,7 +129,7 @@ spec:
         fsGroup: 1654
       containers:
         - name: dns-web
-          image: localhost/fc-dns-web:v20260615-phase0-hybrid-f77fb94
+          image: localhost/fc-dns-web:v20260615-dn1-6bb16e5
           imagePullPolicy: Never
           securityContext:
             readOnlyRootFilesystem: true
@@ -356,7 +363,7 @@ spec:
         fsGroup: 1654
       containers:
         - name: dns-acme-webhook
-          image: localhost/fc-dns-acme-webhook:v20260615-phase0-hybrid-f77fb94
+          image: localhost/fc-dns-acme-webhook:v20260615-dn1-6bb16e5
           imagePullPolicy: Never
           securityContext:
             readOnlyRootFilesystem: true