81 lines
1.5 KiB
Nix
81 lines
1.5 KiB
Nix
{ config, dns, ... }:
|
|
with dns.lib.combinators;
|
|
let
|
|
cfg = config.lab.networking;
|
|
in
|
|
{
|
|
CAA = letsEncrypt "caa@kun.is";
|
|
|
|
SOA = {
|
|
nameServer = "ns1";
|
|
adminEmail = "webmaster@kun.is";
|
|
serial = 2024021702;
|
|
};
|
|
|
|
NS = [
|
|
"ns1.kun.is."
|
|
"ns2.kun.is."
|
|
];
|
|
|
|
MX = [
|
|
(mx.mx 10 "mail.kun.is.")
|
|
];
|
|
|
|
TXT = [
|
|
(with spf; soft [ "include:spf.glasnet.nl" ])
|
|
];
|
|
|
|
subdomains = {
|
|
"*" = {
|
|
A = [ cfg.public.ipv4.router ];
|
|
AAAA = [ cfg.dmz.ipv6.dockerSwarm ];
|
|
};
|
|
|
|
ns = {
|
|
A = [ cfg.public.ipv4.router ];
|
|
AAAA = [ cfg.dmz.ipv6.services ];
|
|
};
|
|
|
|
ns1 = {
|
|
A = [ cfg.public.ipv4.router ];
|
|
AAAA = [ cfg.dmz.ipv6.services ];
|
|
};
|
|
|
|
ns2 = {
|
|
A = [ cfg.public.ipv4.router ];
|
|
AAAA = [ cfg.dmz.ipv6.services ];
|
|
};
|
|
|
|
# Override because we don't support IPv6 for Git SSH.
|
|
git = {
|
|
A = [ cfg.public.ipv4.router ];
|
|
AAAA = [ ];
|
|
};
|
|
|
|
# Override because we don't support IPv6 for KMS.
|
|
kms = {
|
|
A = [ cfg.public.ipv4.router ];
|
|
AAAA = [ ];
|
|
};
|
|
|
|
# Override because wg is on opnsense so ipv6 differs from "cfg.dmz.ipv6.services"
|
|
wg = {
|
|
A = [ cfg.public.ipv4.router ];
|
|
AAAA = [ cfg.dmz.ipv6.router ];
|
|
};
|
|
|
|
#for SMTP2GO to be able send emails from kun.is domain
|
|
em670271 = {
|
|
CNAME = [ "return.smtp2go.net." ];
|
|
};
|
|
|
|
"s670271._domainkey" = {
|
|
CNAME = [ "dkim.smtp2go.net." ];
|
|
};
|
|
|
|
link = {
|
|
CNAME = [ "track.smtp2go.net." ];
|
|
};
|
|
|
|
};
|
|
}
|