blob: 94830e0dd13a347f62b49b0163a4cc734969e83f (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
|
{mkSerial, ...}: {
SOA = {
nameServer = "name-server1.jaki-schoeffel.de.";
adminEmail = "dns-admin@foss-syndicate.org";
# NOTE(@bpeetz): ALWAYS change the serial number, when you change something in the
# zone file! <2025-04-01>
serial = mkSerial 2026 08 14 01;
};
useOrigin = false;
# NOTE: matrix/mastodon need to have the point from `vhack.eu` to their IP <2025-03-10>
A = [
"92.60.38.179"
];
AAAA = [
"2a03:4000:33:25b::4f4e"
];
NS = [
"name-server1.jaki-schoeffel.de."
"name-server2.jaki-schoeffel.de."
];
CAA = [
{
issuerCritical = false;
tag = "issue";
value = "letsencrypt.org";
}
];
# Mail section {{{
MX = [
# {
# preference = 10;
# exchange = "mail.vhack.eu.";
# }
{
preference = 10;
exchange = "mail.foss-syndicate.org.";
}
];
# https://www.rfc-editor.org/rfc/rfc7208.html
TXT = [
(builtins.concatStringsSep " " [
"v=spf1" # The version.
"+mx" # Allow mail from this domain MX record.
"-all" # Reject all other emails if the previous mechanism did not match.
])
];
# https://www.rfc-editor.org/rfc/rfc6376.html#section-3.6.1
# https://www.rfc-editor.org/rfc/rfc6376.html#section-7.5
DKIM = [
{
selector = "mail";
k = "ed25519";
p = "U0eOxgLD3yK7PKzQRSZdJ3EH/UwVxPeYmfm42gYXsDg=";
s = ["email"];
t = ["s"];
}
];
# https://www.rfc-editor.org/rfc/rfc7489.html#section-6.3
DMARC = [
{
adkim = "strict";
aspf = "strict";
fo = [
"0"
"1"
"d"
"s"
];
p = "reject";
rua = "admin@foss-syndicate.org";
ruf = ["admin@foss-syndicate.org"];
}
];
# https://www.rfc-editor.org/rfc/rfc2782.txt
SRV = [
{
service = "imaps";
proto = "tcp";
priority = 0;
weight = 1;
port = 993;
target = "mail.foss-syndicate.org.";
}
{
service = "pop3s";
proto = "tcp";
priority = 0;
weight = 1;
port = 995;
target = "mail.foss-snydicate.org.";
}
{
service = "smtps";
proto = "tcp";
priority = 0;
weight = 1;
port = 465;
target = "mail.foss-syndicate.org.";
}
];
# }}}
subdomains = {
name-server1.CNAME = ["server2.vhack.eu."];
name-server2.CNAME = ["server3.vhack.eu."];
};
}
|
