nixos-servers/nixos/modules/networking/dmz/zones/geokunis2.nl.nix

{ config, dns, ... }:
with dns.lib.combinators;
let
  inherit (config.lab.networking) publicIPv4 dmzServicesIPv6 dockerSwarmIPv6;
in
{
  SOA = {
    nameServer = "ns";
    adminEmail = "hostmaster@geokunis2.nl";
    serial = 2024011401;
  };

  NS = [
    "ns.geokunis2.nl."
    "ns0.transip.net."
    "ns1.transip.nl."
    "ns2.transip.eu."
  ];

  MX = [ (mx.mx 10 "mail.geokunis2.nl.") ];

  A = [ publicIPv4 ];
  AAAA = [ dockerSwarmIPv6 ];
  CAA = letsEncrypt "caa@geokunis2.nl";

  subdomains = {
    "*" = {
      A = [ publicIPv4 ];
      AAAA = [ dockerSwarmIPv6 ];
    };

    ns = {
      A = [ publicIPv4 ];
      AAAA = [ dmzServicesIPv6 ];
    };

    ns1 = {
      A = [ publicIPv4 ];
      AAAA = [ dmzServicesIPv6 ];
    };

    ns2 = {
      A = [ publicIPv4 ];
      AAAA = [ dmzServicesIPv6 ];
    };

    # Override because we don't support IPv6 for KMS.
    kms = {
      A = [ publicIPv4 ];
      AAAA = [ ];
    };

    wg = {
      A = [ publicIPv4 ];
      AAAA = [ "2a0d:6e00:1a77::1" ];
    };

    wg4 = {
      A = [ publicIPv4 ];
      AAAA = [ ];
    };

    wg6 = {
      A = [ ];
      AAAA = [ "2a0d:6e00:1a77::1" ];
    };
  };
}