Powered by rgbdns

Authoritative DNS,
without the wishful thinking.

A quiet control plane running on rgbdns—an innovative Rust reincarnation of djbdns with reviewable changes, ANAME, and scoped Let's Encrypt automation.

Plan your first domainSee the publishing path →
2independent authorities
1consolidated source
0private keys uploaded
wishful.ly / domains
Your domains

Everything is answering.

fieldnotes.esServing
SOA serial2026072902
CertificateReady
›
foto.gsServing
SOA serial2026073101
CertificateDNS only
›
chiefscientist.orgChecking delegation
SOA serial2026073101
CertificateWaiting
›
One dependable path

From intent to authoritative DNS.

Wishfully turns each customer domain into a small manifest. The compiler combines every approved manifest into deterministic state that rgbdns deploys atomically across its authorities.

01

Prove ownership

Add one TXT value at the current provider. Wishfully verifies it before accepting the zone.

02

Review the plan

Choose an address or ANAME target. A pull request shows the exact zone records and serial.

03

Delegate

After every authority answers identically, Wishfully gives you the delegation details to enter at your registrar.

04

Automate TLS

Download a scoped RFC 2136 credential. Certbot handles Let's Encrypt DNS-01 without exposing your key.

Try the compiler

Plan a zone before signing up.

This preview uses the same validation and tinydns record generator as the API. No DNS changes are made.

Pricing

Small enough to understand.

Seed

$0 / month

For a personal domain that deserves real secondary DNS.

  • 1 zone, 25 records
  • A, CNAME, MX, TXT
  • Auditable zone publishing
  • Community support
Start with Seed
Most useful

Maker

$9 / month

For portfolios, publications, and independent products.

  • 10 zones, unlimited records
  • ANAME apex flattening
  • Scoped Certbot credentials
  • Change history and rollback
  • Email support
Choose Maker

Business

$39 / month

For teams managing a serious domain portfolio.

  • 100 zones
  • Team roles and audit log
  • Bulk import and API
  • Configurable AXFR peers
  • Delegated ACME validation zones
  • Priority support
Talk to us
The same control plane, from your shell

Automate without bypassing review.

The CLI submits the same domain manifests as the web app and waits for authoritative convergence.

$ npx wishfully domains add example.com --aname site.vercel.app
✓ ownership challenge created
$ wishfully domains verify example.com
✓ ready to delegate to a.ns.cron.sh, b.ns.cron.sh
$ wishfully certbot run example.com
✓ certificate saved locally; private key never uploaded