aboutsummaryrefslogtreecommitdiffstats
path: root/zones/le-fay.org.zone.erb
blob: 3adbd7d6758e1d8b8ffcdc1b0594c612f2fc9109 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
; vim:set ft=eruby.bindzone sw=8 ts=8 sts=8 noet:

$TTL <%= ttl %>
$ORIGIN <%= zone %>.

@	SOA	<%= soa_mname %> <%= soa_rname %> (
		<%= soa_serial %>
		<%= soa_refresh %>
		<%= soa_retry %>
		<%= soa_expire %>
		<%= soa_minimum %>
	)

<% nameservers.split.each do |ns| %>
	NS	<%= ns %>.
<% end %>

	CAA	128 issue "letsencrypt.org;validationmethods=dns-01"
	TXT	(
	"v=spf1"
	" ip4:46.235.229.111 ip6:2a00:1098:6b:400::3"
	" ip4:185.73.44.74 ip6:2001:ba8:4015:100::2"
	" ~all")

	MX	20 nightshade.le-fay.org.
	MX	21 nightshade.ipv4.le-fay.org.
	MX	30 spamtrap.le-fay.org.

; Nameservers

ns1	AAAA	2001:ba8:4015:100::2	; amaranth
	A	185.73.44.74		; amaranth
ns2	AAAA	2001:8b0:aab5:4::9	; fuchsia
	A	81.187.47.195		; fuchsia
ns3	AAAA	2a00:1098:6b:400::3	; nightshade
	A	46.235.229.111		; nightshade

; DKIM keys
fuchsia._domainkey	TXT	"v=DKIM1; h=sha256; k=rsa; p=" "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPpbxRWV3H/WIihqmMxyr/4hrKLn90kcTeqTIaYOMoOgx36Eh/3aYOc+YaIWYoFH2bHF6p+es15IpUzJ+jZr7bbyxjAcNaQA//91TrkTlabxoiOHbQSp7RFarOj9V+xU+53R2PpECIkBVwmBMdX5zyNdH7DUacSe/rLkuWO7CQywIDAQAB"
nightshade._domainkey	TXT	(
	"v=DKIM1; h=sha256; k=rsa; p="
	"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnrtLwTfn214fCGFhpmZG6+O"
	"v7rQvFZLs5+J0GCiQeyAPWtg6qTKMoUOnruvunNItgPsRVjxFWpaTT2L1MhY7P1+BzoW"
	"nsJV/i/BT0+ufEf9YOWPvkA5ZKbB2+LugRv3gOWyS8WC66HPVjkUdg6CiYdwZx3ujgf1"
	"2SwTztWQAfZoSkNF0EyHHl8FzyEYC9mN6fsGi66icWQBO5HVW2wOs+6uR26DGtz3BLlj"
	"bwd+ZzmJWkoZexalTd+zUQK6uv2xDL05k8jpWjV4p7Jjjfko2xDFUdATMouvzbC0T6Vr"
	"bLsjpoYf54BW08cePQqiAh0Ht0q1wKF0/85XAXKAbRFgfwIDAQAB" )

; Kerberos
_kerberos		TXT	"LE-FAY.ORG"
_kerberos.eden		TXT	"LE-FAY.ORG"
_kerberos._tcp		SRV	1 0 88 witch
_kerberos._tcp		SRV	1 0 88 turnera
_kerberos-adm._tcp	SRV	1 0 749 witch
_kerberos-adm._tcp	SRV	1 0 749 turnera
_ldap._tcp		SRV	10 50 389 witch
_ldap._tcp		SRV	10 50 389 turnera
_kerberos._udp		SRV	1 0 88 witch
_kerberos._udp		SRV	1 0 88 turnera
_kpasswd._tcp		SRV	1 0 464 turnera
_kpasswd._udp		SRV	1 0 464 turnera

; Services

smtp		CNAME	nightshade
ntp		CNAME	ntp1
ntp1		AAAA	2001:ba8:4015:100::2	; amaranth
ntp2		AAAA	2001:8b0:aab5:c401::1:5	; hemlock
ntp3		AAAA	2a00:1098:6b:400::1	; rose
ntp.eden	CNAME	ntp
ntp.svc.eden	CNAME	ntp
www		AAAA	2a00:1098:6b:400::3	; nightshade
		A	46.235.229.111		; nightshade
git		AAAA	2a00:1098:6b:400::1	; rose
		A	176.126.243.164		; rose
www.eden	CNAME	nightshade
pkg		CNAME	nightshade

; rose
rose		AAAA	2a00:1098:6b:400::1
rose.ipv4	A	176.126.243.164

; rose VMs
amaryllis	AAAA	2a00:1098:6b:400::9
cgit		AAAA	2a00:1098:6b:400::8
forge		AAAA	2a00:1098:6b:400::10
freebsd13	AAAA	2a00:1098:6b:400::11
freebsd14	AAAA	2a00:1098:6b:400::12
freebsd15	AAAA	2a00:1098:6b:400::14
grafana		AAAA	2a00:1098:6b:400::7
lily		AAAA	2a00:1098:6b:400::2
nightshade	AAAA	2a00:1098:6b:400::3
nightshade.ipv4	A	46.235.229.111
postgres17	AAAA	2a00:1098:6b:400::5
prometheus	AAAA	2a00:1098:6b:400::6
tansy		AAAA	2a00:1098:6b:400::13

; hemlock
hemlock		AAAA	2001:8b0:aab5:c401::1:5
		MX	10 fuchsia
hemlock.ipv4	A	81.2.96.162
ftp.eden	CNAME	hemlock
git.eden	CNAME	hemlock
media.eden	CNAME	hemlock
music		CNAME	hemlock
qbt		CNAME	hemlock
status		CNAME	hemlock
mqtt.svc.eden	AAAA	2001:8b0:aab5:c401::1:5
		A	81.2.96.162

; Hosts

amaranth		AAAA	2001:ba8:4015:100::2
amaranth.ipv4		A	185.73.44.74
fuchsia			AAAA	2001:8b0:aab5:4::9
			A	81.187.47.195
fuchsia.eden		AAAA	2001:8b0:aab5:4::9
			A	81.187.47.195
ilythia			AAAA	2001:8b0:aab5:c401:1::2
			A	81.2.96.165
ragweed			AAAA	2001:8b0:aab5:c401:1::1
			A	81.2.96.166
turnera			AAAA	2001:8b0:aab5:c401::1:4
			A	81.2.96.164
witch			AAAA	2001:8b0:aab5:c401::1:3
			A	81.2.96.163
thyme.lon.uk.arpa	AAAA	2001:ba8:404a:100::1
			A	185.73.44.73

; willow
willow			AAAA	2001:8b0:aab5:4::8
			A	81.187.47.196
ix0-3004.willow		AAAA	2001:8b0:aab5:3004::2
			A	81.187.47.205
ng0.willow		A	81.187.73.117

; Network devices

eden-core-1		AAAA	2001:8b0:aab5:4::7
			A	81.187.47.197
te1.eden-core-1 	AAAA	2001:8b0:aab5:3004::1
			A	81.187.47.206
vl401.eden-core-1	AAAA	2001:8b0:aab5:c401::1
			A	81.2.96.161
vl402.eden-core-1	AAAA	2001:8b0:aab5:c402::1
			A	198.18.0.1
eden-core-2		AAAA	2001:8b0:aab5:c401::2:7
eden-core-3		AAAA	2001:8b0:aab5:c401::2:8
eden-core-4		AAAA	2001:8b0:aab5:c401::2:9
eden-access-1		AAAA	2001:8b0:aab5:c401::2:1
eden-access-2		AAAA	2001:8b0:aab5:c401::2:2
eden-access-3		AAAA	2001:8b0:aab5:c401::2:3
eden-access-4		AAAA	2001:8b0:aab5:c401::2:4
eden-access-5		AAAA	2001:8b0:aab5:c401::2:5
eden-access-6		AAAA	2001:8b0:aab5:c401::2:6
outlet-hemlock.iot	A	198.18.0.10
outlet-rack.iot		A	198.18.0.11

; Miscellaneous
vpn-in-1.eden			AAAA	2001:8b0:aab5:1::1
vpn-in-1.eden			A	81.187.73.117
spamtrap			A	81.187.47.194