Add a DNS records support article

src/nixos/chroot.md

@@ -0,0 +1,19 @@
+# Entering nixos chroot from rescue
+
+```
+mount /dev/sda1 /mnt
+
+mount -o bind /dev /mnt/dev
+
+mount -o bind /proc /mnt/proc
+
+mount -o bind /sys /mnt/sys
+
+chroot /mnt /nix/var/nix/profiles/system/activate
+
+cp /etc/resolv.conf /mnt/etc/
+
+chroot /mnt /run/current-system/sw/bin/bash
+```
+
+Use `--option sandbox false` when `nixos-rebuild`

src/support/dns.md

@@ -0,0 +1,14 @@
+# Certificate expired
+## How to diagnose
+Given the domain is `domain.tld` get the logs of ACME.
+```bash
+journalctl -r -u acme-domain.tld
+# Jitsi has a different cert
+journalctl -r -u acme-meet.domain.tld
+```
+
+## Deleting certs
+If current certs broken, you may delete certs by nuking `/val/lib/acme`. After reboot, ACME will try to get certs again.
+
+## Cloudflare token
+Required to obtain certs. Make sure it's valid. Located in `/etc/nixos/userdata/userdata.json`