dns-base.yml.j2 1.09 KB
Newer Older
1
2
---

3
"@hosted_base":
4
5
6
7
8
9
10
  EXTENDS: "@base"
  www: CNAME www.l.autistici.org.
  _:
    - "CAA 0 issue \"letsencrypt.org\""

"@hosted_mail_mixin":
  _:
11
{% for h in services['frontend'].hosts | sort %}
12
{% if hostvars[h].get('traffic', 1) %}
13
    - MX 10 mx{{ loop.index }}.investici.org.
14
{% endif %}
15
16
{% endfor %}
    - "TXT \"v=spf1 redirect=_spf.investici.org\""
ale's avatar
ale committed
17
  _dmarc: "TXT \"v=DMARC1; p=reject; adkim=s; aspf=s; rua=mailto:live-reports@autistici.org\""
18
19
20
  _domainkey: "TXT o=-"
  _adsp._domainkey: "TXT dkim=all"
  stigmate._domainkey: "TXT \"{{ domainkey_public_key }}\""
21
22
23
24
25
26
27

  _imap._tcp: SRV 1 1 143 mail.autistici.org.
  _imaps._tcp: SRV 0 1 993 mail.autistici.org.
  _pop3._tcp: SRV 11 1 110 mail.autistici.org.
  _pop3s._tcp: SRV 10 1 995 mail.autistici.org.
  _submission._tcp: SRV 1 1 587 smtp.autistici.org.
  _submissions._tcp: SRV 0 1 465 smtp.autistici.org.
28
  autoconfig: CNAME www.l.autistici.org.
ale's avatar
ale committed
29
  _mta-sts: CNAME _mta-sts.investici.org.
ale's avatar
ale committed
30
  mta-sts: CNAME www.l.autistici.org.
ale's avatar
ale committed
31
32
33
34
{% if mta_sts_tlsrpt_address is defined %}
  _smtp._tls: "TXT \"v=TLSRPTv1;rua=mailto:{{ mta_sts_tlsrpt_address }}\""
{% endif %}