use erb templates for zones

1 files changed, 163 insertions, 0 deletions

diff --git a/zones/le-fay.org.zone.erb b/zones/le-fay.org.zone.erb
new file mode 100644
index 0000000..35b787d
--- /dev/null
+++ b/zones/le-fay.org.zone.erb
@@ -0,0 +1,163 @@
+; vim:set ft=eruby.bindzone sw=8 ts=8 sts=8:
+
+$TTL <%= ttl %>
+$ORIGIN <%= zone %>.
+
+@	SOA	<%= soa_mname %> <%= soa_rname %> (
+		<%= soa_serial %>
+		<%= soa_refresh %>
+		<%= soa_retry %>
+		<%= soa_expire %>
+		<%= soa_minimum %>
+	)
+
+<% nameservers.split.each do |ns| %>
+        NS      <%= ns %>.
+<% end %>
+
+	CAA	128 issue "letsencrypt.org;validationmethods=dns-01"
+	TXT	"v=spf1 ip4:81.187.47.195 ip6:2001:8b0:aab5:4::9 ip4:185.73.44.74 ip6:2001:ba8:4015:100::2 ~all"
+
+	MX	20 fuchsia.eden.le-fay.org.
+	MX	30 spamtrap.le-fay.org.
+
+	AAAA	2001:8b0:aab5:4::9	; fuchsia
+	A	81.187.47.195		; fuchsia
+
+; Nameservers
+
+ns1	AAAA	2001:ba8:4015:100::2	; amaranth
+	A	185.73.44.74		; amaranth
+ns2	AAAA	2001:8b0:aab5:4::9	; fuchsia
+	A	81.187.47.195		; fuchsia
+ns3	AAAA	2a00:1098:6b:100::2	; yarrow
+	A	176.126.243.79		; yarrow
+
+; DKIM keys
+fuchsia._domainkey	TXT	"v=DKIM1; h=sha256; k=rsa; p=" "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPpbxRWV3H/WIihqmMxyr/4hrKLn90kcTeqTIaYOMoOgx36Eh/3aYOc+YaIWYoFH2bHF6p+es15IpUzJ+jZr7bbyxjAcNaQA//91TrkTlabxoiOHbQSp7RFarOj9V+xU+53R2PpECIkBVwmBMdX5zyNdH7DUacSe/rLkuWO7CQywIDAQAB"
+
+; Kerberos
+_kerberos		TXT	"LE-FAY.ORG"
+_kerberos.eden		TXT	"LE-FAY.ORG"
+_kerberos._tcp		SRV	1 0 88 witch
+_kerberos._tcp		SRV	1 0 88 turnera.eden
+_kerberos-adm._tcp	SRV	1 0 749 witch
+_kerberos-adm._tcp	SRV	1 0 749 turnera.eden
+_kpasswd._tcp		SRV	1 0 464 turnera.eden
+_ldap._tcp		SRV	10 50 389 witch
+_ldap._tcp		SRV	10 50 389 turnera.eden
+_kerberos._udp		SRV	1 0 88 witch
+_kerberos._udp		SRV	1 0 88 turnera.eden
+_kpasswd._udp		SRV	1 0 464 turnera.eden
+
+; Services
+
+smtp			CNAME	fuchsia.eden
+www			CNAME	fuchsia.eden
+
+ntp			CNAME	ntp1
+ntp1			AAAA	2001:ba8:4015:100::2	; amaranth
+			A	185.73.44.74		; amaranth
+ntp2			AAAA	2001:8b0:aab5:c401::1:5	; hemlock
+			A	81.2.96.162		; hemlock
+ntp.eden		CNAME	ntp
+ntp.svc.eden		CNAME	ntp
+
+; hemlock
+hemlock.eden		AAAA	2001:8b0:aab5:c401::1:5
+			A	81.2.96.162
+			MX	10 fuchsia.eden
+ftp.eden		CNAME	hemlock.eden
+git.eden		CNAME	hemlock.eden
+media.eden		CNAME	hemlock.eden
+mqtt.svc.eden		CNAME	hemlock.eden
+music			CNAME	hemlock.eden
+pkg			CNAME	hemlock.eden
+prometheus		CNAME	hemlock.eden
+qbt			CNAME	hemlock.eden
+status			CNAME	hemlock.eden
+www.eden		CNAME	hemlock.eden
+
+
+; Hosts
+
+amaranth		AAAA	2001:ba8:4015:100::2
+			A	185.73.44.74
+fuchsia.eden		AAAA	2001:8b0:aab5:4::9
+			A	81.187.47.195
+freebsd13		AAAA	2001:8b0:aab5:c401::1:8
+			A	81.2.96.169
+freebsd14		AAAA	2001:8b0:aab5:c401::1:7
+			A	81.2.96.168
+freebsd15.eden		AAAA	2001:8b0:aab5:c401::1:6
+			A	81.2.96.167
+ilythia			AAAA	2001:8b0:aab5:c401:1::2
+			A	81.2.96.165
+ragweed			AAAA	2001:8b0:aab5:c401:1::1
+			A	81.2.96.166
+turnera.eden		AAAA	2001:8b0:aab5:c401::1:4
+			A	81.2.96.164
+turnera			AAAA	2001:8b0:aab5:c401::1:4
+			A	81.2.96.164
+witch			AAAA	2001:8b0:aab5:c401::1:3
+			A	81.2.96.163
+witch.eden		AAAA	2001:8b0:aab5:c401::1:3
+witch.eden		A	81.2.96.163
+yarrow			AAAA	2a00:1098:6b:100::2
+			A	176.126.243.79
+
+; DN42 nodes
+thyme.lon.uk.arpa	AAAA	2001:ba8:404a:100::1
+			A	185.73.44.73
+uk-jmp-2		CNAME	thyme.lon.uk.arpa.le-fay.org.
+
+rose.lon.uk.arpa	AAAA	2a00:1098:6b:200::1
+uk-myb-2		CNAME	rose.lon.uk.arpa.le-fay.org.
+vtnet0.uk-myb-2		CNAME	uk-myb-2.le-fay.org.
+
+uk-jmp-1		AAAA	2001:ba8:4015:100::1
+wg-uk-aai-1.uk-myb-1	A	81.187.47.201
+
+uk-aai-1		AAAA	2001:8b0:aab5:100::1
+ep-willow.uk-aai-1	A	81.187.47.202
+wg-uk-myb-1.uk-aai-1	A	81.187.47.200
+
+vtnet0.uk-myb-1		AAAA	2a00:1098:6b::1
+vtnet0.uk-myb-1		A	46.235.229.111
+
+; willow
+willow.eden			AAAA	2001:8b0:aab5:4::8
+nat-out-v4-willow.inet.eden	A 81.187.47.193
+ep-uk-aai-1.willow.eden		A	81.187.47.203
+ix0-3004.willow.eden		AAAA	2001:8b0:aab5:3004::2
+ix0-3004.willow.eden		A	81.187.47.205
+ng0.willow.eden			AAAA	2001:8b0:aab5:1::1
+ng0.willow.eden			A	81.187.47.192
+
+; Network devices
+
+core-1.inet.eden		AAAA	2001:8b0:aab5:4::7
+				A	81.187.47.197
+te1.core-1.inet.eden		AAAA	2001:8b0:aab5:3004::1
+				A	81.187.47.206
+vlan401.core-1.inet.eden	AAAA	2001:8b0:aab5:c401::1
+				A	81.2.96.161
+vlan402.core-1.inet.eden	AAAA	2001:8b0:aab5:c402::1
+				A	198.18.0.1
+core-2.inet.eden		AAAA	2001:8b0:aab5:c401::2:7
+core-3.inet.eden		AAAA	2001:8b0:aab5:c401::2:8
+core-4.inet.eden		AAAA	2001:8b0:aab5:c401::2:9
+access-1.inet.eden		AAAA	2001:8b0:aab5:c401::2:1
+access-2.inet.eden		AAAA	2001:8b0:aab5:c401::2:2
+access-3.inet.eden		AAAA	2001:8b0:aab5:c401::2:3
+access-4.inet.eden		AAAA	2001:8b0:aab5:c401::2:4
+access-5.inet.eden		AAAA	2001:8b0:aab5:c401::2:5
+access-6.inet.eden		AAAA	2001:8b0:aab5:c401::2:6
+outlet-hemlock.iot.eden		A	172.20.193.1
+outlet-rack.iot.eden		A	172.20.193.2
+
+; Miscellaneous
+eden				MX	10 fuchsia.eden.le-fay.org.
+vpn-in-1.eden			AAAA	2001:8b0:aab5:1::1
+vpn-in-1.eden			A	81.187.73.117
+spamtrap			A	81.187.47.194