Moving mail
The new MX lands first. The old one goes only after Spaceship confirms it.
MX 10 mx.oldhost.net.MX 1 smtp.google.com.
Every record,on the record.
Every domain in your Spaceship account and every record in it, on one screen. Self-hosted, so the API key never leaves your server.
Try it · paperplane.io
Touches no real DNS§ 01When it matters
Built for the night something has to change.
Launch day
Point the apex at the new server. One field, one TTL, done before standup.
A @ 203.0.113.10A @ 198.51.100.7 1m
The one about to lapse
Expired, in grace, or close with auto-renew off. Top of the list until it isn't.
oddjobs.dev · grace§ 02The portfolio
Sorted by what needs you.
Expired and expiring domains with auto-renew off rise to the top. Drag the date and watch what falls due.
4 of 8 due by 1 Feb 2027. 4 won’t renew on their own.
- ledgerline.co20 Sep 2026Lapsed
- oddjobs.dev22 Oct 2026Lapsed
- northwind.studio14 Nov 2026Lapses
- kitchenrota.app19 Dec 2026Lapses
§ 03Nameservers
Switch providers. See the consequence first.
- 01 Resolver asks fornorthwind.studio
- 02 Registry points tolaunch1.spaceship.net
- 03 Records in this dashboardLive
Spaceship answers, so the records you edit here are the ones the world sees.
§ 04Records
All 13 types. Filed properly.
Each type gets its own fields, checked before it leaves the page. Export the whole zone as a BIND file.
- A
- IPv4 address
- AAAA
- IPv6 address
- ALIAS
- Apex alias to a host
- CAA
- Who may issue certificates
- CNAME
- Alias to another name
- HTTPS
- Service binding for HTTPS
- MX
- Mail servers, by priority
- NS
- Delegate a subdomain
- PTR
- Reverse pointer
- SRV
- Service, port and target
- SVCB
- General service binding
- TLSA
- Certificate pinning for DANE
- TXT
- SPF, DKIM, verification
- $ORIGIN
- Copy Zone File, ready for BIND.
§ 05Safety
DNS mistakes take mail down. So the defaults are boring.
.01
No sign-up page
Accounts are created on the server, from the command line.
.02
The key stays put
The Spaceship secret is encrypted at rest and never sent to a browser.
.03
Sign-in is rate limited
Repeated failures lock the door for a few minutes. Errors never confirm an email exists.
.04
Add first, remove second
An edit writes the new record before deleting the old. No gap where the name answers nothing.
§ 06Self-host
Three commands. Your server.
One Compose file: the app, automatic HTTPS, health checks, and a monitor that emails you when it stops answering.
- 1
cp .env.example .env # domain, keys, alert email - 2
docker compose up -d - 3
docker compose run --rm tools npx tsx scripts/create-user.ts you@example.com app · proxy · monitor healthy