; vim:set ft=eruby.bindzone sw=8 ts=8 sts=8 noet:

$TTL <%= ttl %>
$ORIGIN <%= zone %>.

@	SOA	<%= soa_mname %> <%= soa_rname %> (
		<%= soa_serial %>
		<%= soa_refresh %>
		<%= soa_retry %>
		<%= soa_expire %>
		<%= soa_minimum %>
	)

<% nameservers.split.each do |ns| %>
	NS	<%= ns %>.
<% end %>

	CAA	128 issue "letsencrypt.org;validationmethods=dns-01"
	TXT	(
	"v=spf1"
	" ip4:46.235.229.111 ip6:2a00:1098:6b:400::3"
	" ip4:185.73.44.74 ip6:2001:ba8:4015:100::2"
	" ~all")

	MX	20 nightshade.le-fay.org.
	MX	21 nightshade.ipv4.le-fay.org.
	MX	30 spamtrap.le-fay.org.

; Nameservers

ns1	AAAA	2001:ba8:4015:100::2	; amaranth
	A	185.73.44.74		; amaranth
ns2	AAAA	2001:8b0:aab5:4::9	; fuchsia
	A	81.187.47.195		; fuchsia
ns3	AAAA	2a00:1098:6b:400::3	; nightshade
	A	46.235.229.111		; nightshade

; DKIM keys
fuchsia._domainkey	TXT	"v=DKIM1; h=sha256; k=rsa; p=" "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPpbxRWV3H/WIihqmMxyr/4hrKLn90kcTeqTIaYOMoOgx36Eh/3aYOc+YaIWYoFH2bHF6p+es15IpUzJ+jZr7bbyxjAcNaQA//91TrkTlabxoiOHbQSp7RFarOj9V+xU+53R2PpECIkBVwmBMdX5zyNdH7DUacSe/rLkuWO7CQywIDAQAB"
nightshade._domainkey	TXT	(
	"v=DKIM1; h=sha256; k=rsa; p="
	"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnrtLwTfn214fCGFhpmZG6+O"
	"v7rQvFZLs5+J0GCiQeyAPWtg6qTKMoUOnruvunNItgPsRVjxFWpaTT2L1MhY7P1+BzoW"
	"nsJV/i/BT0+ufEf9YOWPvkA5ZKbB2+LugRv3gOWyS8WC66HPVjkUdg6CiYdwZx3ujgf1"
	"2SwTztWQAfZoSkNF0EyHHl8FzyEYC9mN6fsGi66icWQBO5HVW2wOs+6uR26DGtz3BLlj"
	"bwd+ZzmJWkoZexalTd+zUQK6uv2xDL05k8jpWjV4p7Jjjfko2xDFUdATMouvzbC0T6Vr"
	"bLsjpoYf54BW08cePQqiAh0Ht0q1wKF0/85XAXKAbRFgfwIDAQAB" )

; Kerberos
_kerberos		TXT	"LE-FAY.ORG"
_kerberos.eden		TXT	"LE-FAY.ORG"
_kerberos._tcp		SRV	1 0 88 witch
_kerberos._tcp		SRV	1 0 88 turnera
_kerberos-adm._tcp	SRV	1 0 749 witch
_kerberos-adm._tcp	SRV	1 0 749 turnera
_ldap._tcp		SRV	10 50 389 witch
_ldap._tcp		SRV	10 50 389 turnera
_kerberos._udp		SRV	1 0 88 witch
_kerberos._udp		SRV	1 0 88 turnera
_kpasswd._tcp		SRV	1 0 464 turnera
_kpasswd._udp		SRV	1 0 464 turnera

; Services

smtp		CNAME	nightshade
ntp		CNAME	ntp1
ntp1		AAAA	2001:ba8:4015:100::2	; amaranth
ntp2		AAAA	2001:8b0:aab5:c401::1:5	; hemlock
ntp3		AAAA	2a00:1098:6b:400::1	; rose
ntp.eden	CNAME	ntp
ntp.svc.eden	CNAME	ntp
www		AAAA	2a00:1098:6b:400::3	; nightshade
		A	46.235.229.111		; nightshade
git		AAAA	2a00:1098:6b:400::1	; rose
		A	176.126.243.164		; rose
www.eden	CNAME	nightshade
pkg		CNAME	nightshade

; rose
rose		AAAA	2a00:1098:6b:400::1
rose.ipv4	A	176.126.243.164

; rose VMs
amaryllis	AAAA	2a00:1098:6b:400::9
cgit		AAAA	2a00:1098:6b:400::8
forge		AAAA	2a00:1098:6b:400::10
freebsd13	AAAA	2a00:1098:6b:400::11
freebsd14	AAAA	2a00:1098:6b:400::12
freebsd15	AAAA	2a00:1098:6b:400::14
grafana		AAAA	2a00:1098:6b:400::7
lily		AAAA	2a00:1098:6b:400::2
nightshade	AAAA	2a00:1098:6b:400::3
nightshade.ipv4	A	46.235.229.111
postgres17	AAAA	2a00:1098:6b:400::5
prometheus	AAAA	2a00:1098:6b:400::6
tansy		AAAA	2a00:1098:6b:400::13

; hemlock
hemlock		AAAA	2001:8b0:aab5:c401::1:5
		MX	10 fuchsia
hemlock.ipv4	A	81.2.96.162
ftp.eden	CNAME	hemlock
git.eden	CNAME	hemlock
media.eden	CNAME	hemlock
music		CNAME	hemlock
qbt		CNAME	hemlock
status		CNAME	hemlock
mqtt.svc.eden	AAAA	2001:8b0:aab5:c401::1:5
		A	81.2.96.162

; Hosts

amaranth		AAAA	2001:ba8:4015:100::2
amaranth.ipv4		A	185.73.44.74
fuchsia			AAAA	2001:8b0:aab5:4::9
			A	81.187.47.195
fuchsia.eden		AAAA	2001:8b0:aab5:4::9
			A	81.187.47.195
ilythia			AAAA	2001:8b0:aab5:c401:1::2
			A	81.2.96.165
ragweed			AAAA	2001:8b0:aab5:c401:1::1
			A	81.2.96.166
turnera			AAAA	2001:8b0:aab5:c401::1:4
			A	81.2.96.164
witch			AAAA	2001:8b0:aab5:c401::1:3
			A	81.2.96.163
thyme.lon.uk.arpa	AAAA	2001:ba8:404a:100::1
			A	185.73.44.73

; willow
willow			AAAA	2001:8b0:aab5:4::8
			A	81.187.47.196
ix0-3004.willow		AAAA	2001:8b0:aab5:3004::2
			A	81.187.47.205
ng0.willow		A	81.187.73.117

; Network devices

eden-core-1		AAAA	2001:8b0:aab5:4::7
			A	81.187.47.197
te1.eden-core-1 	AAAA	2001:8b0:aab5:3004::1
			A	81.187.47.206
vl401.eden-core-1	AAAA	2001:8b0:aab5:c401::1
			A	81.2.96.161
vl402.eden-core-1	AAAA	2001:8b0:aab5:c402::1
			A	198.18.0.1
eden-core-2		AAAA	2001:8b0:aab5:c401::2:7
eden-core-3		AAAA	2001:8b0:aab5:c401::2:8
eden-core-4		AAAA	2001:8b0:aab5:c401::2:9
eden-access-1		AAAA	2001:8b0:aab5:c401::2:1
eden-access-2		AAAA	2001:8b0:aab5:c401::2:2
eden-access-3		AAAA	2001:8b0:aab5:c401::2:3
eden-access-4		AAAA	2001:8b0:aab5:c401::2:4
eden-access-5		AAAA	2001:8b0:aab5:c401::2:5
eden-access-6		AAAA	2001:8b0:aab5:c401::2:6
outlet-hemlock.iot	A	198.18.0.10
outlet-rack.iot		A	198.18.0.11

; Miscellaneous
vpn-in-1.eden			AAAA	2001:8b0:aab5:1::1
vpn-in-1.eden			A	81.187.73.117
spamtrap			A	81.187.47.194