a11099fd1c
Also include tvix.{store,systems}, they might still be used in some
places.
Change-Id: I90085d7488f94c8764e61e3d99d8f03459c6f9f0
Reviewed-on: https://cl.snix.dev/c/snix/+/30501
Reviewed-by: Ryan Lahfa <ryan@lahfa.xyz>
Autosubmit: Florian Klink <flokli@flokli.de>
Tested-by: besadii
127 lines
3.6 KiB
HCL
127 lines
3.6 KiB
HCL
# DNS configuration for snix.dev
|
|
|
|
resource "digitalocean_domain" "snix_dev" {
|
|
name = "snix.dev"
|
|
}
|
|
|
|
# Infrastructure records
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_gerrit01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "gerrit01.infra"
|
|
value = var.gerrit01_ipv6
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_public01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "public01.infra"
|
|
value = var.public01_ipv6
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_build01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "build01.infra"
|
|
value = var.build01_ipv6
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_meta01_v4" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "A"
|
|
name = "meta01.infra"
|
|
value = var.meta01_ipv4
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_meta01_v6" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "meta01.infra"
|
|
value = var.meta01_ipv6
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_gerrit01_v4" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "A"
|
|
name = "gerrit01.infra"
|
|
value = var.gerrit01_ipv4
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_gerrit01_v6" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "gerrit01.infra"
|
|
value = var.gerrit01_ipv6
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_public01_v4" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "A"
|
|
name = "public01.infra"
|
|
value = var.public01_ipv4
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_infra_public01_v6" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
name = "public01.infra"
|
|
value = var.public01_ipv6
|
|
}
|
|
|
|
# Explicit records for all services running on public01
|
|
resource "digitalocean_record" "snix_dev_public01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "CNAME"
|
|
value = "public01.infra.snix.dev."
|
|
name = each.key
|
|
for_each = toset(local.public01_services)
|
|
}
|
|
|
|
# A snix.dev pointing to public01
|
|
resource "digitalocean_record" "snix_dev_public01_apex_a" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "A"
|
|
value = var.public01_ipv4
|
|
name = "@"
|
|
}
|
|
# AAAA for snix.dev pointing to public01
|
|
resource "digitalocean_record" "snix_dev_public01_apex_aaaa" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "AAAA"
|
|
value = var.public01_ipv6
|
|
name = "@"
|
|
}
|
|
|
|
# Explicit records for all services running on gerrit01
|
|
resource "digitalocean_record" "snix_dev_gerrit01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "CNAME"
|
|
value = "gerrit01.infra.snix.dev."
|
|
name = each.key
|
|
for_each = toset(local.gerrit01_services)
|
|
}
|
|
|
|
# Explicit records for all services running on gerrit01
|
|
resource "digitalocean_record" "snix_dev_meta01" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "CNAME"
|
|
value = "meta01.infra.snix.dev."
|
|
name = each.key
|
|
for_each = toset(local.meta01_services)
|
|
}
|
|
|
|
# DNS Records for Email (Postmark)
|
|
resource "digitalocean_record" "snix_dev_dkim" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "TXT"
|
|
value = "k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDkF965mvnDqDnHpMX1NdRkYfDTAPMb3ovMQAefFtAWiZPVQDkZ+LPGObVaZb+6eQakFROz7wc2nG5pn/8KLcnKdGCQ0Glllr516EKF6oeGtqP9MwMslkmfOJ1FG5oDyDCIXOf7J+GcgYjs3K6j/4sw0q9lljXgzoHWdNbS0AuQBQIDAQAB"
|
|
name = "20250320170729pm._domainkey"
|
|
}
|
|
|
|
resource "digitalocean_record" "snix_dev_pm_bounces" {
|
|
domain = digitalocean_domain.snix_dev.id
|
|
type = "CNAME"
|
|
value = "pm.mtasv.net."
|
|
name = "pm-bounces"
|
|
}
|