; vim:set ft=eruby.bindzone sw=8 ts=8 sts=8 noet:

$TTL <%= ttl %>
$ORIGIN <%= zone %>.

@	SOA	<%= soa_mname %> <%= soa_rname %> (
		<%= soa_serial %>
		<%= soa_refresh %>
		<%= soa_retry %>
		<%= soa_expire %>
		<%= soa_minimum %>
	)

<% nameservers.split.each do |ns| %>
        NS      <%= ns %>.
<% end %>

	CAA	128 issue "letsencrypt.org;validationmethods=dns-01"
	TXT	"v=spf1 ip4:81.187.47.195 ip6:2001:8b0:aab5:4::9 ip4:185.73.44.74 ip6:2001:ba8:4015:100::2 ~all"

	MX	20 fuchsia.le-fay.org.
	MX	30 spamtrap.le-fay.org.

; Nameservers

ns1	AAAA	2001:ba8:4015:100::2	; amaranth
	A	185.73.44.74		; amaranth
ns2	AAAA	2001:8b0:aab5:4::9	; fuchsia
	A	81.187.47.195		; fuchsia
ns3	AAAA	2a00:1098:6b:400::3	; nightshade
	A	46.235.229.111		; nightshade

; DKIM keys
fuchsia._domainkey	TXT	"v=DKIM1; h=sha256; k=rsa; p=" "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPpbxRWV3H/WIihqmMxyr/4hrKLn90kcTeqTIaYOMoOgx36Eh/3aYOc+YaIWYoFH2bHF6p+es15IpUzJ+jZr7bbyxjAcNaQA//91TrkTlabxoiOHbQSp7RFarOj9V+xU+53R2PpECIkBVwmBMdX5zyNdH7DUacSe/rLkuWO7CQywIDAQAB"

; Kerberos
_kerberos		TXT	"LE-FAY.ORG"
_kerberos.eden		TXT	"LE-FAY.ORG"
_kerberos._tcp		SRV	1 0 88 witch
_kerberos._tcp		SRV	1 0 88 turnera
_kerberos-adm._tcp	SRV	1 0 749 witch
_kerberos-adm._tcp	SRV	1 0 749 turnera
_ldap._tcp		SRV	10 50 389 witch
_ldap._tcp		SRV	10 50 389 turnera
_kerberos._udp		SRV	1 0 88 witch
_kerberos._udp		SRV	1 0 88 turnera
_kpasswd._tcp		SRV	1 0 464 turnera
_kpasswd._udp		SRV	1 0 464 turnera

; Services

smtp		CNAME	fuchsia
ntp		CNAME	ntp1
ntp1		AAAA	2001:ba8:4015:100::2	; amaranth
ntp2		AAAA	2001:8b0:aab5:c401::1:5	; hemlock
ntp3		AAAA	2a00:1098:6b:400::1	; rose
ntp.eden	CNAME	ntp
ntp.svc.eden	CNAME	ntp
www		AAAA	2a00:1098:6b:400::3	; nightshade
		A	46.235.229.111		; nightshade
pkg		CNAME	nightshade

; rose
rose		AAAA	2a00:1098:6b:400::1
rose.ipv4	A	176.126.243.164
git		CNAME	rose

; rose VMs
amaryllis	AAAA	2a00:1098:6b:400::9
cgit		AAAA	2a00:1098:6b:400::8
forge		AAAA	2a00:1098:6b:400::10
freebsd13	AAAA	2a00:1098:6b:400::11
freebsd14	AAAA	2a00:1098:6b:400::12
grafana		AAAA	2a00:1098:6b:400::7
lily		AAAA	2a00:1098:6b:400::2
nightshade	AAAA	2a00:1098:6b:400::3
nightshade.ipv4	A	46.235.229.111
postgres17	AAAA	2a00:1098:6b:400::5
prometheus	AAAA	2a00:1098:6b:400::6
tansy		AAAA	2a00:1098:6b:400::13

; hemlock
hemlock	        	AAAA	2001:8b0:aab5:c401::1:5
			A	81.2.96.162
			MX	10 fuchsia
ftp.eden		CNAME	hemlock
git.eden		CNAME	hemlock
media.eden		CNAME	hemlock
mqtt.svc.eden		CNAME	hemlock
music			CNAME	hemlock
qbt			CNAME	hemlock
status			CNAME	hemlock
www.eden		CNAME	hemlock


; Hosts

amaranth		AAAA	2001:ba8:4015:100::2
amaranth.ipv4		A	185.73.44.74
fuchsia			AAAA	2001:8b0:aab5:4::9
			A	81.187.47.195
fuchsia.eden		AAAA	2001:8b0:aab5:4::9
			A	81.187.47.195
ilythia			AAAA	2001:8b0:aab5:c401:1::2
			A	81.2.96.165
ragweed			AAAA	2001:8b0:aab5:c401:1::1
			A	81.2.96.166
turnera			AAAA	2001:8b0:aab5:c401::1:4
			A	81.2.96.164
witch			AAAA	2001:8b0:aab5:c401::1:3
			A	81.2.96.163
thyme.lon.uk.arpa	AAAA	2001:ba8:404a:100::1
			A	185.73.44.73

; willow
willow			AAAA	2001:8b0:aab5:4::8
			A	81.187.47.196
ix0-3004.willow		AAAA	2001:8b0:aab5:3004::2
			A	81.187.47.205
ng0.willow		A	81.187.73.117

; Network devices

eden-core-1		AAAA	2001:8b0:aab5:4::7
			A	81.187.47.197
te1.eden-core-1 	AAAA	2001:8b0:aab5:3004::1
			A	81.187.47.206
vl401.eden-core-1	AAAA	2001:8b0:aab5:c401::1
			A	81.2.96.161
vl402.eden-core-1	AAAA	2001:8b0:aab5:c402::1
			A	198.18.0.1
eden-core-2     	AAAA	2001:8b0:aab5:c401::2:7
eden-core-3            	AAAA	2001:8b0:aab5:c401::2:8
eden-core-4     	AAAA	2001:8b0:aab5:c401::2:9
eden-access-1	       	AAAA	2001:8b0:aab5:c401::2:1
eden-access-2	       	AAAA	2001:8b0:aab5:c401::2:2
eden-access-3	       	AAAA	2001:8b0:aab5:c401::2:3
eden-access-4	       	AAAA	2001:8b0:aab5:c401::2:4
eden-access-5	       	AAAA	2001:8b0:aab5:c401::2:5
eden-access-6	       	AAAA	2001:8b0:aab5:c401::2:6
outlet-hemlock.iot.eden	A	172.20.193.1
outlet-rack.iot.eden	A	172.20.193.2

; Miscellaneous
vpn-in-1.eden			AAAA	2001:8b0:aab5:1::1
vpn-in-1.eden			A	81.187.73.117
spamtrap			A	81.187.47.194