zones/b-peetz.de: Init

1 files changed, 99 insertions, 0 deletions

diff --git a/zones/b-peetz.de/zone.nix b/zones/b-peetz.de/zone.nix
new file mode 100644
index 0000000..87ceaf8
--- /dev/null
+++ b/zones/b-peetz.de/zone.nix
@@ -0,0 +1,99 @@
+{mkSerial, ...}: {
+  SOA = {
+    nameServer = "name-server1.vhack.eu.";
+    adminEmail = "dns-admin@foss-syndicate.org";
+    # NOTE(@bpeetz): ALWAYS change the serial number, when you change something in the
+    # zone file! <2025-04-01>
+    serial = mkSerial 2026 10 28 01;
+  };
+  useOrigin = false;
+
+  CNAME = [ "server3.vhack.eu." ];
+
+  NS = [
+    "name-server1.vhack.eu."
+    "name-server2.vhack.eu."
+  ];
+
+  CAA = [
+    {
+      issuerCritical = false;
+      tag = "issue";
+      value = "letsencrypt.org";
+    }
+  ];
+
+  # Mail section {{{
+  MX = [
+    {
+      preference = 10;
+      exchange = "mail.foss-syndicate.org.";
+    }
+  ];
+
+  # https://www.rfc-editor.org/rfc/rfc7208.html
+  TXT = [
+    (builtins.concatStringsSep " " [
+      "v=spf1" # The version.
+      "+mx" # Allow mail from this domain MX record.
+      "-all" # Reject all other emails if the previous mechanism did not match.
+    ])
+  ];
+
+  # https://www.rfc-editor.org/rfc/rfc6376.html#section-3.6.1
+  # https://www.rfc-editor.org/rfc/rfc6376.html#section-7.5
+  DKIM = [
+    {
+      selector = "mail";
+      k = "ed25519";
+      p = "U0eOxgLD3yK7PKzQRSZdJ3EH/UwVxPeYmfm42gYXsDg=";
+      s = ["email"];
+      t = ["s"];
+    }
+  ];
+
+  # https://www.rfc-editor.org/rfc/rfc7489.html#section-6.3
+  DMARC = [
+    {
+      adkim = "strict";
+      aspf = "strict";
+      fo = [
+        "0"
+        "1"
+        "d"
+        "s"
+      ];
+      p = "reject";
+      rua = "admin@foss-syndicate.org";
+      ruf = ["admin@foss-syndicate.org"];
+    }
+  ];
+
+  # https://www.rfc-editor.org/rfc/rfc2782.txt
+  SRV = [
+    {
+      service = "imaps";
+      proto = "tcp";
+      priority = 0;
+      weight = 1;
+      port = 993;
+      target = "mail.foss-syndicate.org.";
+    }
+    {
+      service = "pop3s";
+      proto = "tcp";
+      priority = 0;
+      weight = 1;
+      port = 995;
+      target = "mail.foss-snydicate.org.";
+    }
+    {
+      service = "smtps";
+      proto = "tcp";
+      priority = 0;
+      weight = 1;
+      port = 465;
+      target = "mail.foss-syndicate.org.";
+    }
+  ];
+}