{ publicIpv4, dns }:
with dns.lib.combinators;

{
  SOA = {
    nameServer = "ns";
    adminEmail = "hostmaster@geokunis2.nl";
    serial = 1704580936;
  };

  NS = [
    "ns.geokunis2.nl."
    "ns0.transip.net."
    "ns1.transip.nl."
    "ns2.transip.eu."
  ];

  MX = [ (mx.mx 10 "mail.geokunis2.nl.") ];

  A = [ publicIpv4 ];
  AAAA = [ "2a0d:6e00:1a77:30:b62e:99ff:fe77:1bda" ];
  CAA = letsEncrypt "caa@geokunis2.nl";

  subdomains = {
    mail.A = [ publicIpv4 ];
    wg4.A = [ publicIpv4 ];
    wg6.AAAA = [ "2a0d:6e00:1a77::1" ];
    tuindersweijde.A = [ publicIpv4 ];
    inbucket.A = [ publicIpv4 ];
    kms.A = [ publicIpv4 ];

    wg = {
      A = [ publicIpv4 ];
      AAAA = [ "2a0d:6e00:1a77::1" ];
    };

    ns = {
      A = [ publicIpv4 ];
      AAAA = [ "2a0d:6e00:1a77:30:c8fe:c0ff:feff:ee07" ];
    };

    cyberchef = {
      A = [ publicIpv4 ];
      AAAA = [ "2a0d:6e00:1a77:30:c8fe:c0ff:feff:ee03" ];
    };
  };
}