; vim:set ft=eruby.bindzone sw=8 ts=8 sts=8 noet:

$TTL <%= ttl %>
$ORIGIN <%= zone %>.

@	SOA	<%= soa_mname %> <%= soa_rname %> (
		<%= soa_serial %>
		<%= soa_refresh %>
		<%= soa_retry %>
		<%= soa_expire %>
		<%= soa_minimum %>
	)

<% nameservers.split.each do |ns| %>
        NS      <%= ns %>.
<% end %>

	CAA	128 issue "letsencrypt.org;validationmethods=dns-01"
	TXT	"v=spf1 ip4:81.187.47.195 ip6:2001:8b0:aab5:4::9 ip4:185.73.44.74 ip6:2001:ba8:4015:100::2 ~all"

	MX	20 fuchsia.eden.le-fay.org.
	MX	30 spamtrap.le-fay.org.

; Nameservers

ns1	AAAA	2001:ba8:4015:100::2	; amaranth
	A	185.73.44.74		; amaranth
ns2	AAAA	2001:8b0:aab5:4::9	; fuchsia
	A	81.187.47.195		; fuchsia
ns3	AAAA	2a00:1098:6b:400::3	; nightshade
	A	46.235.229.111		; nightshade

; DKIM keys
fuchsia._domainkey	TXT	"v=DKIM1; h=sha256; k=rsa; p=" "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPpbxRWV3H/WIihqmMxyr/4hrKLn90kcTeqTIaYOMoOgx36Eh/3aYOc+YaIWYoFH2bHF6p+es15IpUzJ+jZr7bbyxjAcNaQA//91TrkTlabxoiOHbQSp7RFarOj9V+xU+53R2PpECIkBVwmBMdX5zyNdH7DUacSe/rLkuWO7CQywIDAQAB"

; Kerberos
_kerberos		TXT	"LE-FAY.ORG"
_kerberos.eden		TXT	"LE-FAY.ORG"
_kerberos._tcp		SRV	1 0 88 witch
_kerberos._tcp		SRV	1 0 88 turnera
_kerberos-adm._tcp	SRV	1 0 749 witch
_kerberos-adm._tcp	SRV	1 0 749 turnera
_ldap._tcp		SRV	10 50 389 witch
_ldap._tcp		SRV	10 50 389 turnera
_kerberos._udp		SRV	1 0 88 witch
_kerberos._udp		SRV	1 0 88 turnera
_kpasswd._tcp		SRV	1 0 464 turnera
_kpasswd._udp		SRV	1 0 464 turnera

; Services

smtp			CNAME	fuchsia.eden

ntp			CNAME	ntp1
ntp1			AAAA	2001:ba8:4015:100::2	; amaranth
			A	185.73.44.74		; amaranth
ntp2			AAAA	2001:8b0:aab5:c401::1:5	; hemlock
			A	81.2.96.162		; hemlock
ntp3			AAAA	2a00:1098:6b:400::1	; rose
			A	176.126.243.164		; rose
ntp.eden		CNAME	ntp
ntp.svc.eden		CNAME	ntp

; rose
rose		AAAA	2a00:1098:6b:400::1
		A	176.126.243.164
pkg		CNAME	rose
git		CNAME	rose
www		CNAME	rose

; hemlock
hemlock.eden		AAAA	2001:8b0:aab5:c401::1:5
			A	81.2.96.162
			MX	10 fuchsia.eden
hemlock	        	AAAA	2001:8b0:aab5:c401::1:5
			A	81.2.96.162
			MX	10 fuchsia.eden
ftp.eden		CNAME	hemlock
git.eden		CNAME	hemlock
media.eden		CNAME	hemlock
mqtt.svc.eden		CNAME	hemlock
music			CNAME	hemlock
prometheus		CNAME	hemlock
qbt			CNAME	hemlock
status			CNAME	hemlock
www.eden		CNAME	hemlock


; Hosts

amaranth		AAAA	2001:ba8:4015:100::2
			A	185.73.44.74
fuchsia.eden		AAAA	2001:8b0:aab5:4::9
			A	81.187.47.195
freebsd13		AAAA	2001:8b0:aab5:c401::1:8
			A	81.2.96.169
freebsd14		AAAA	2001:8b0:aab5:c401::1:7
			A	81.2.96.168
freebsd15		AAAA	2001:8b0:aab5:c401::1:6
			A	81.2.96.167
ilythia			AAAA	2001:8b0:aab5:c401:1::2
			A	81.2.96.165
lily			AAAA	2a00:1098:6b:400::2
nightshade		AAAA	2a00:1098:6b:400::3
			A	46.235.229.111
ragweed			AAAA	2001:8b0:aab5:c401:1::1
			A	81.2.96.166
turnera			AAAA	2001:8b0:aab5:c401::1:4
			A	81.2.96.164
witch			AAAA	2001:8b0:aab5:c401::1:3
			A	81.2.96.163

; DN42 nodes
dn42-uk-1		AAAA	2a00:1098:6b:400::4
thyme.lon.uk.arpa	AAAA	2001:ba8:404a:100::1
			A	185.73.44.73
uk-jmp-2		CNAME	thyme.lon.uk.arpa.le-fay.org.

rose.lon.uk.arpa	AAAA	2a00:1098:6b:200::1
uk-myb-2		CNAME	rose.lon.uk.arpa.le-fay.org.
vtnet0.uk-myb-2		CNAME	uk-myb-2.le-fay.org.

uk-jmp-1		AAAA	2001:ba8:4015:100::1
wg-uk-aai-1.uk-myb-1	A	81.187.47.201

uk-aai-1		AAAA	2001:8b0:aab5:100::1
ep-willow.uk-aai-1	A	81.187.47.202
wg-uk-myb-1.uk-aai-1	A	81.187.47.200

vtnet0.uk-myb-1		AAAA	2a00:1098:6b::1
vtnet0.uk-myb-1		A	46.235.229.111

; willow
willow.eden			AAAA	2001:8b0:aab5:4::8
nat-out-v4-willow.inet.eden	A 81.187.47.193
ep-uk-aai-1.willow.eden		A	81.187.47.203
ix0-3004.willow.eden		AAAA	2001:8b0:aab5:3004::2
ix0-3004.willow.eden		A	81.187.47.205
ng0.willow.eden			AAAA	2001:8b0:aab5:1::1
ng0.willow.eden			A	81.187.47.192

; Network devices

eden-core-1		AAAA	2001:8b0:aab5:4::7
			A	81.187.47.197
te1.eden-core-1 	AAAA	2001:8b0:aab5:3004::1
			A	81.187.47.206
vl401.eden-core-1	AAAA	2001:8b0:aab5:c401::1
			A	81.2.96.161
vl402.eden-core-1	AAAA	2001:8b0:aab5:c402::1
			A	198.18.0.1
eden-core-2     	AAAA	2001:8b0:aab5:c401::2:7
eden-core-3            	AAAA	2001:8b0:aab5:c401::2:8
eden-core-4     	AAAA	2001:8b0:aab5:c401::2:9
eden-access-1	       	AAAA	2001:8b0:aab5:c401::2:1
eden-access-2	       	AAAA	2001:8b0:aab5:c401::2:2
eden-access-3	       	AAAA	2001:8b0:aab5:c401::2:3
eden-access-4	       	AAAA	2001:8b0:aab5:c401::2:4
eden-access-5	       	AAAA	2001:8b0:aab5:c401::2:5
eden-access-6	       	AAAA	2001:8b0:aab5:c401::2:6
outlet-hemlock.iot.eden	A	172.20.193.1
outlet-rack.iot.eden	A	172.20.193.2

; Miscellaneous
vpn-in-1.eden			AAAA	2001:8b0:aab5:1::1
vpn-in-1.eden			A	81.187.73.117
spamtrap			A	81.187.47.194