{ publicIpv4, dns }:
with dns.lib.combinators;

{
  CAA = letsEncrypt "caa@kun.is";

  SOA = {
    nameServer = "ns1";
    adminEmail = "webmaster@kun.is";
    serial = 1704580936;
  };

  NS = [
    "ns1.kun.is."
    "ns2.kun.is."
  ];

  MX = [
    (mx.mx 10 "mail.kun.is.")
  ];

  subdomains = {
    ns.A = [ publicIpv4 ];
    ns1.A = [ publicIpv4 ];
    ns2.A = [ publicIpv4 ];
    "*".A = [ publicIpv4 ];
  };
}