diff options
| author | Johannes Löthberg <johannes@kyriasis.com> | 2022-08-27 23:18:50 +0200 |
|---|---|---|
| committer | Johannes Löthberg <johannes@kyriasis.com> | 2022-08-27 23:18:50 +0200 |
| commit | d2a8bedb686f503fcdbd30f05bff7dd0627e7882 (patch) | |
| tree | 49c62e7c1b43ca517fb48265c6bd5c6b1238e153 | |
| parent | 9fce1642b1ce3877870309895919462eeb648aa9 (diff) | |
| download | dns-d2a8bedb686f503fcdbd30f05bff7dd0627e7882.tar.xz | |
Add remmy.io zone
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
| -rw-r--r-- | named-slave.conf | 9 | ||||
| -rw-r--r-- | named.conf | 12 | ||||
| -rw-r--r-- | remmy.io.zone | 52 |
3 files changed, 73 insertions, 0 deletions
diff --git a/named-slave.conf b/named-slave.conf index b081d90..607e4bd 100644 --- a/named-slave.conf +++ b/named-slave.conf @@ -35,6 +35,15 @@ zone "kyriasis.com" { }; }; +zone "remmy.io" { + type slave; + file "remmy.io.zone"; + masters { + 212.71.254.33; // theos + 2a01:7e00::f03c:91ff:fe6e:f996; // theos + }; +}; + zone "the-tk.com" { type slave; file "the-tk.com.zone"; @@ -44,6 +44,18 @@ zone "kyriasis.com" IN { dnssec-policy standard; }; +zone "remmy.io" IN { + type master; + file "dns/remmy.io.zone"; + allow-transfer { + 178.79.157.58; // lucifer + 2a01:7e00::f03c:91ff:fe69:1787; // lucifer + }; + notify explicit; + + dnssec-policy standard; +}; + zone "the-tk.com" { type slave; file "the-tk.com.zone"; diff --git a/remmy.io.zone b/remmy.io.zone new file mode 100644 index 0000000..0e1d15f --- /dev/null +++ b/remmy.io.zone @@ -0,0 +1,52 @@ +; vi: ft=bindzone:ts=8:sw=8:nowrap:et +$ORIGIN remmy.io. +$TTL 24h + +@ IN SOA ns1.kyriasis.com. hostmaster.remmy.io ( + 2208272237 ; serial + 24h ; refresh + 2h ; retry + 1w ; expire + 4h ; minttl + ) + NS ns1.kyriasis.com. + NS ns2.kyriasis.com. + + ; -> theos.kyriasis.com + A 212.71.254.33 + AAAA 2a01:7e00:e000:136::1 + +www CNAME remmy.io. + +;; Gallery +gallery CNAME remmy.io. +gallery-static CNAME remmy.io. + +;;;; Email + +;; MX +@ MX 0 theos.kyriasis.com + +;; DMARC <https://tools.ietf.org/html/rfc7489> +_dmarc TXT "v=DMARC1; adkim=r; aspf=r; fo=1:d:s; p=none; rua=mailto:aggrep@remmy.io; ruf=mailto:authfail@remmy.io" + +;; SPF <http://tools.ietf.org/html/rfc4408> +@ TXT "v=spf1 a mx ip4:178.79.157.58 ip6:2a01:7e00::f03c:91ff:fe69:1787 ~all" +@ SPF "v=spf1 a mx ip4:178.79.157.58 ip6:2a01:7e00::f03c:91ff:fe69:1787 ~all" + +;; DKIM <http://tools.ietf.org/html/rfc6376> +theos._domainkey TXT "k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5u7MOeQk0oIgy64BcFDvmxiRGuZBPTFaFvRTz0LZMIq66E0iW76RFC9tBONQrVvVUCeMldmgy7AGjRMbZaszgtL14PJQeD9HDfbVnEVQhS12kMY2HPR3HruwfLcSgADjBwt3nVkdXusjTsNoGB/Yj7+Bdr/HFHi5blLB3a+6S7wIDAQAB" + + +;; Google Postmaster Tools +@ TXT "google-site-verification=oBjxYyNlVzkw3gcMJcXx9_ElXSULYrraglg-ytnEgWQ" + +;;;; Certificates +;; CAA +@ CAA 0 issue "letsencrypt.org" +@ CAA 0 iodef "mailto:certificates@remmy.io" + +;; TLSA +$INCLUDE "dns/letsencrypt-tlsa.zone" _443._tcp.remmy.io +$INCLUDE "dns/letsencrypt-tlsa.zone" _443._tcp.gallery.remmy.io +$INCLUDE "dns/letsencrypt-tlsa.zone" _443._tcp.gallery-static.remmy.io |