cfe842effa
This configures the DNS records necessary to send emails from Postmark. Change-Id: I2e55151f40c4f5e54f6d7f06ae24f2e863b7c656 Reviewed-on: https://cl.snix.dev/c/snix/+/30204 Reviewed-by: Ryan Lahfa <masterancpp@gmail.com> Autosubmit: Florian Klink <flokli@flokli.de> Tested-by: besadii
127 lines
3.6 KiB
HCL
127 lines
3.6 KiB
HCL
# DNS configuration for snix.dev
|
|
|
|
resource "digitalocean_domain" "snix_dev" {
|
|
name = "snix.dev"
|
|
}
|
|
|
|
# Infrastructure records
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_gerrit01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "gerrit01.infra"
|
|
value = var.gerrit01_ipv6
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_public01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "public01.infra"
|
|
value = var.public01_ipv6
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_build01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "build01.infra"
|
|
value = var.build01_ipv6
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_meta01_v4" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "A"
|
|
name = "meta01.infra"
|
|
value = var.meta01_ipv4
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_meta01_v6" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "meta01.infra"
|
|
value = var.meta01_ipv6
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_gerrit01_v4" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "A"
|
|
name = "gerrit01.infra"
|
|
value = var.gerrit01_ipv4
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_gerrit01_v6" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "gerrit01.infra"
|
|
value = var.gerrit01_ipv6
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_public01_v4" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "A"
|
|
name = "public01.infra"
|
|
value = var.public01_ipv4
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_public01_v6" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "public01.infra"
|
|
value = var.public01_ipv6
|
|
}
|
|
|
|
# Explicit records for all services running on public01
|
|
resource "digitalocean_record" "snix_dev_public01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "CNAME"
|
|
value = "public01.infra.snix.dev."
|
|
name = each.key
|
|
for_each = toset(local.public01_services)
|
|
}
|
|
|
|
# A snix.dev pointing to public01
|
|
resource "digitalocean_record" "snix_dev_public01_apex_a" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "A"
|
|
value = var.public01_ipv4
|
|
name = "@"
|
|
}
|
|
# AAAA for snix.dev pointing to public01
|
|
resource "digitalocean_record" "snix_dev_public01_apex_aaaa" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
value = var.public01_ipv6
|
|
name = "@"
|
|
}
|
|
|
|
# Explicit records for all services running on gerrit01
|
|
resource "digitalocean_record" "snix_dev_gerrit01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "CNAME"
|
|
value = "gerrit01.infra.snix.dev."
|
|
name = each.key
|
|
for_each = toset(local.gerrit01_services)
|
|
}
|
|
|
|
# Explicit records for all services running on gerrit01
|
|
resource "digitalocean_record" "snix_dev_meta01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "CNAME"
|
|
value = "meta01.infra.snix.dev."
|
|
name = each.key
|
|
for_each = toset(local.meta01_services)
|
|
}
|
|
|
|
# DNS Records for Email (Postmark)
|
|
resource "digitalocean_record" "snix_dev_dkim" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "TXT"
|
|
value = "k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDkF965mvnDqDnHpMX1NdRkYfDTAPMb3ovMQAefFtAWiZPVQDkZ+LPGObVaZb+6eQakFROz7wc2nG5pn/8KLcnKdGCQ0Glllr516EKF6oeGtqP9MwMslkmfOJ1FG5oDyDCIXOf7J+GcgYjs3K6j/4sw0q9lljXgzoHWdNbS0AuQBQIDAQAB"
|
|
name = "20250320170729pm._domainkey"
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_pm_bounces" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "CNAME"
|
|
value = "pm.mtasv.net."
|
|
name = "pm-bounces"
|
|
}
|