summaryrefslogtreecommitdiffstats
path: root/kyriasis.com.zone
blob: 1606882505540567eb6ae2b46bef2ae3237bb829 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
; vi: ft=bindzone:ts=8:sw=8:nowrap:noet
$ORIGIN kyriasis.com.
$TTL 3h

@       IN      SOA     theos.kyriasis.com. hostmaster (
                                120      ; serial
                                4h      ; refresh
                                1h      ; retry
                                1w      ; expire
                                1h      ; minttl
                        )
                NS ns1
                NS ns2

                ; -> lucifer.kyriasis.com
                A       178.79.157.58
                AAAA    2a01:7e00::f03c:91ff:fe69:1787

theos           A       212.71.254.33
theos           AAAA    2a01:7e00:e000:136::1
direct.theos    AAAA    2a01:7e00::f03c:91ff:fe6e:f996
h.theos         AAAA    fca1:fabb:7792:f28d:4623:139:10af:549
v4.theos        A       212.71.254.33
v6.theos        AAAA    2a01:7e00:e000:136::1

NS1             A       212.71.254.33
NS1             AAAA    2a01:7e00:e000:136::1
NS2             A       178.79.157.58
NS2             AAAA    2a01:7e00::f03c:91ff:fe69:1787

zorg            AAAA    2a01:7e00:e000:136::2
h.zorg          AAAA    fc3d:9b94:8d0e:8e88:72d3:2193:9425:6574

leeloo          A       80.217.51.233
leeloo          AAAA    2001:470:28:212:ea9a:8fff:fe33:43a
h.leeloo        AAAA    fcb9:72d4:cd1b:57f4:1ab0:bd4:e015:7e03

h.tirxu         AAAA    fc29:58d6:7dbb:81e7:2d03:3205:fcce:20e7

home            A       158.174.52.10
hydrogen.home   AAAA    2001:9b1:4a01:f400:228:f8ff:fe5c:f03a

www             CNAME   kyriasis.com.
www.theos       CNAME   theos
git             CNAME   theos
ldap            CNAME   theos
autoconfig      CNAME   theos
ca              CNAME   theos
wiki            CNAME   theos
xan             CNAME   theos
salt            CNAME   theos
gerrit          CNAME   theos
taskd           CNAME   theos
miniflux        CNAME   theos
grafana         CNAME   theos
matrix      30m A       212.71.254.33
matrix      30m AAAA    2a01:7e00:e000:136::1
riot        30m A       212.71.254.33
riot        30m AAAA    2a01:7e00:e000:136::1
gada            A       127.0.0.1
*.minikube      A       192.168.99.100

;;; Keybase verification
@               TXT     "keybase-site-verification=ps0bAlsiJPIhNZy3mN-xDArc8f9A-AEoVhgsC6NDLDk"
theos           TXT     "keybase-site-verification=_bApRga8QdQm0OpTxOZLeBFAPDB1_VV_BGbB8X-jw-M"


;;; Mail

;; MX
@                       MX     5       theos
@                       MX     5       lucifer
theos                   MX     5       theos
theos                   MX     25      lucifer
lists                   MX     5       theos

;; SPF <http://tools.ietf.org/html/rfc4408>
@                       TXT    "v=spf1 a mx ~all"
@                       SPF    "v=spf1 a mx ~all"
theos                   SPF    "v=spf1 a mx ~all"
theos                   TXT    "v=spf1 a mx ~all"

;; DKIM <http://tools.ietf.org/html/rfc6376>
theos._domainkey        TXT    "k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5u7MOeQk0oIgy64BcFDvmxiRGuZBPTFaFvRTz0LZMIq66E0iW76RFC9tBONQrVvVUCeMldmgy7AGjRMbZaszgtL14PJQeD9HDfbVnEVQhS12kMY2HPR3HruwfLcSgADjBwt3nVkdXusjTsNoGB/Yj7+Bdr/HFHi5blLB3a+6S7wIDAQAB"
lucifer._domainkey      TXT    "k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYcYHES1v8w5pgSxmU5OuvG+JoNCynxPNnTzzwaiG6AWvTbToCRrqjVksCxeC+3YpzVvJGU3NifmM6c64rJRz/IVZYkim0UkZP2L07fhm0mUNwkcemziTG9YmrcGI9h9BiSYoW+v0hZuGjtmDUfPzupLYk1Cif3ZPZg7IwUai5+QIDAQAB"
theos._domainkey.theos  TXT    "k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5u7MOeQk0oIgy64BcFDvmxiRGuZBPTFaFvRTz0LZMIq66E0iW76RFC9tBONQrVvVUCeMldmgy7AGjRMbZaszgtL14PJQeD9HDfbVnEVQhS12kMY2HPR3HruwfLcSgADjBwt3nVkdXusjTsNoGB/Yj7+Bdr/HFHi5blLB3a+6S7wIDAQAB"

;; DMARC <https://tools.ietf.org/html/rfc7489>
_dmarc                  TXT    "v=DMARC1; adkim=r; aspf=r; fo=1:d:s; p=none; rua=mailto:aggrep@kyriasis.com; ruf=mailto:authfail@kyriasis.com"

;; SRV for email discovery <https://tools.ietf.org/html/rfc6186>
;;   (not sure if anything useful uses them?)
_submission._tcp        SRV    0       0       587     theos
_imap._tcp              SRV    0       0       143     theos
_imaps._tcp             SRV    0       0       993     theos

;; Google Postmaster Tools
@                       TXT    "google-site-verification=Fj3Hc-7_JPc6WlEF_TMwYTGStln3kuz8vTJsMgoyKA8"

;;; Kerberos <http://web.mit.edu/Kerberos/krb5-latest/doc/admin/realm_config.html>
_kerberos               TXT    "KYRIASIS.COM"
_kerberos._udp          SRV    0       0       88      theos
_kerberos._tcp          SRV    0       0       88      theos
_kerberos-master._udp   SRV    0       0       88      theos
_kerberos-adm._tcp      SRV    0       0       749     theos
_kpasswd._udp           SRV    0       0       464     theos


;;; LDAP
_ldap._tcp              SRV    0       0       389     theos
_ldaps._tcp             SRV    0       0       636     theos


;;; XMPP
_xmpp-client._tcp       SRV    5       0       5222    theos
_xmpp-client._tcp       SRV    5       5       5222    h.theos
_xmpp-server._tcp       SRV    5       0       5269    theos
_xmpp-server._tcp       SRV    5       5       5269    h.theos

;;; Gale
gale                    CNAME  theos

;;; Matrix
_matrix._tcp        60m SRV    10      0       8448    matrix.kyriasis.com.


;;; Users

; CERT and _pka records are used by GnuPG for looking up recipient's public key.
; - See <http://www.gushi.org/make-dns-cert/HOWTO.html> for a guide.
; - See RFC 4398 § 2.2 for CERT IPGP.

; OPENPGPKEY records are similar, but have the complete key.
; - See <http://tools.ietf.org/html/draft-wouters-dane-openpgp-02>

johannes                TXT    "Johannes Löthberg <johannes@kyriasis.com>, +46739525259"
                        CERT   IPGP   0  0    ( FFE0756vZflba7FgjlD7myc6nQu1aHR0cHM6Ly90aGVvcy
                                                  5reXJpYXNpcy5jb20vfmt5cmlhcy9wZ3Ata2V5LnR4dA== )
oqcqzgr1asi197b33efih1a8y5q37xz3._pka CERT IPGP 0 0 5134EF9EAF65F95B6BB1608E50FB9B273A9D0BB5
johannes._pka           TXT    "v=pka1;fpr=5134EF9EAF65F95B6BB1608E50FB9B273A9D0BB5;uri=https://theos.kyriasis.com/~kyrias/pgp-key.txt"


;;; Delegated subdomains

;; Arch-Tk
arch                    NS     ns1.he.net.
                        NS     ns2.he.net.
                        NS     ns3.he.net.
                        NS     ns4.he.net.
                        NS     ns5.he.net.


$INCLUDE "/home/kyrias/dns/lucifer.kyriasis.com.zone"
$INCLUDE "/home/kyrias/dns/_openpgpkey.kyriasis.com.zone"