From 68bcd67f4b7b8706662da080153a9da73b2838aa Mon Sep 17 00:00:00 2001
From: Andrei Jiroh Halili <ajhalili2006@andreijiroh.dev>
Date: Sun, 26 Oct 2025 00:44:51 +0800
Subject: [PATCH] chore(hackclub.community): move Alumni Society DNS records
 from dino.icu (#2154)

Alongside the DNS records migration, we also adding a DNS
TXT record for GitHub Pages domain verification to prevent subdomain takeover risks.
---
 dino.icu.yaml           | 11 +++++------
 hackclub.community.yaml | 18 ++++++++++++++++++
 2 files changed, 23 insertions(+), 6 deletions(-)

diff --git a/dino.icu.yaml b/dino.icu.yaml
index 2af85fd..4e16a68 100644
--- a/dino.icu.yaml
+++ b/dino.icu.yaml
@@ -81,14 +81,13 @@ _acme-challenge.andreijiroh:
 # Alumni Society (https://github.com/hackclub-alumni/meta/issues/1)
 # Records are primarily managed by @ajhalili2006 (U07CAPBB9B5), although other alums
 # can manage them by coordinating at #alums channel or https://github.com/hackclub-alumni/meta.
-alumni: 
-  - ttl: 600
-    type: CNAME
-    value: hackclub-alumni.github.io.
-_atproto.alumni:
+# Note that we have moved to hackclub.community, although we keep GH Pages
+# domain verification record below to prevent domain takeovers if we do wildcard
+# CNAME records at *.alumni.dino.icu in future.
+_github-pages-challenge-hackclub-alumni.alumni:
   - ttl: 600
     type: TXT
-    value: "did=did:plc:yi5ewii4xerodl6ljn3fwga6"
+    value: "3777bf5f9b6076520d8bbcebb90d45"
 
 arjav: #by https://github.com/arjav0703
   - ttl: 600
diff --git a/hackclub.community.yaml b/hackclub.community.yaml
index ed97d53..6dcb74c 100644
--- a/hackclub.community.yaml
+++ b/hackclub.community.yaml
@@ -1 +1,19 @@
 ---
+
+# Alumni Society (https://github.com/hackclub-alumni/meta/issues/1)
+# Records are primarily managed by @ajhalili2006 (U07CAPBB9B5), although other alums
+# can manage them by coordinating at #alums channel or https://github.com/hackclub-alumni/meta.
+alumni: 
+  - ttl: 600
+    type: CNAME
+    value: hackclub-alumni.github.io.
+_atproto.alumni:
+  - ttl: 600
+    type: TXT
+    value: "did=did:plc:yi5ewii4xerodl6ljn3fwga6"
+# GH Pages domain verification to prevent domain takeovers if we do
+# wildcard CNAME records at *.alumni.hackclub.community
+_github-pages-challenge-hackclub-alumni.alumni:
+  - ttl: 600
+    type: TXT
+    value: "62688903c020be82f48ace03d54467"
\ No newline at end of file