infrastructure/modules/dgn-dns/zones/_dgnum.eu.nix
2023-10-04 09:23:48 +02:00

96 lines
2 KiB
Nix

{ lib, meta, dns, ... }:
let
inherit (lib.extra)
fuseAttrs
mapSingleFuse;
inherit (dns.lib.combinators)
mx
spf
ttl;
mkCNAME = host: { CNAME = [ host ]; };
mkRecord = host:
let net = meta.network.${host}; in
{
A = net.addresses.publicV4;
AAAA = net.addresses.publicV6;
};
mkNS = { A, AAAA, ... }: { inherit A AAAA; };
mkHosted = server: mapSingleFuse (_: mkCNAME "${server}.${meta.nodes.${server}.zone}.infra");
hosted = fuseAttrs (builtins.attrValues
(builtins.mapAttrs mkHosted {
compute01 = [
"social"
];
storage01 = [
"cloud"
"git"
"s3"
"video"
];
web01 = [
"analytics"
];
})
);
infra.subdomains = builtins.mapAttrs
(_: nodes: { subdomains = mapSingleFuse mkRecord nodes; })
meta.infra;
kurisuDKIM = [{
selector = "kurisu";
k = "rsa";
s = [ "email" ];
p = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDa5KuK6ry+Ss2VsKL0FsDpoBlc7dcXZyp62fGqFJFJv4/GEivPWiwbr2o5oLKjQVI4kIYjIZsyQJFtI/Xcu4BrtDdBknb5WvCN8V9EvIMh3pfXOBLVx4oqw4BR7wF8Rw1J9xyfgsfK+m2n0M39XlMHH0Nuy6kU48jH9vYpZs17ZQIDAQAB";
}];
in
{
# Primary DNS servers
NS = [
"ns01.dgnum.eu."
];
# dgnum.codeberg.pages
# ALIAS = [ "codeberg.page" ];
A = [ "217.197.91.145" ];
AAAA = [ "2001:67c:1401:20f0::1" ];
MX = map (ttl 3600) [
(mx.mx 10 "kurisu.lahfa.xyz.")
];
TXT = [
"dgnum.codeberg.page"
(spf.strict [ "a:kurisu.lahfa.xyz" ])
];
DMARC = [{ p = "none"; }];
DKIM = kurisuDKIM;
subdomains = hosted // {
ns01 = mkNS infra.subdomains.par01.subdomains.compute01;
} // {
infra = infra // {
MX = map (ttl 3600) [
(mx.mx 10 "kurisu.lahfa.xyz.")
];
TXT = [ (spf.strict [ "a:kurisu.lahfa.xyz" ]) ];
DMARC = [{ p = "none"; }];
DKIM = kurisuDKIM;
};
dev.CNAME = [ "dev.pages.codeberg.page." ];
irc.CNAME = [ "public.p.lahfa.xyz." ];
webmail.CNAME = [ "kurisu.dual.lahfa.xyz." ];
};
}