nixos-config/terraform/dns.tf

variable "hcloud_dns_token" {
  sensitive = true
}

provider "hetznerdns" {
  apitoken = var.hcloud_dns_token
}

data "hetznerdns_zone" "main" {
  name = "foodogsquared.one"
}

resource "hetznerdns_record" "personal_site" {
  zone_id = data.hetznerdns_zone.main.id
  name    = "@"
  ttl     = 3600
  type    = "A"
  value   = "75.2.60.5"
}

resource "hetznerdns_record" "personal_site_cname" {
  zone_id = data.hetznerdns_zone.main.id
  name    = "www"
  ttl     = 3600
  type    = "CNAME"
  value   = "foodogsquared.netlify.app."
}

resource "hetznerdns_record" "personal_wiki" {
  zone_id = data.hetznerdns_zone.main.id
  name    = "wiki"
  ttl     = 3600
  type    = "CNAME"
  value   = "foodogsquared-wiki.netlify.app."
}

# Mail resources.
resource "hetznerdns_record" "mail_mx" {
  for_each = toset(["10 heracles.mxrouting.net.", "20 heracles-relay.mxrouting.net."])
  zone_id  = data.hetznerdns_zone.main.id
  name     = "@"
  type     = "MX"
  value    = each.value
}

resource "hetznerdns_record" "mail_dmarc" {
  zone_id = data.hetznerdns_zone.main.id
  name    = "_dmarc"
  ttl     = 3600
  type    = "TXT"
  value   = "v=DMARC1;p=none;rua=mailto:postmaster@foodogsquared.one;ruf=mailto:admin@foodogsquared.one"
}

resource "hetznerdns_record" "mail_dkim" {
  zone_id = data.hetznerdns_zone.main.id
  name    = "x._domainkey"
  ttl     = 3600
  type    = "TXT"
  value   = "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLlrgdsO4jLncMoGAowlE14oB9R2ESxNLRBtkzc24LOPJ1CwEIE+5AHZd+ZRMwiD7fdXcyCH7/E1BRXWT+TtLnKnBgf5I0z6EbPqiPPb6nmpDWrbZzA2mdKetAKz0kFJC8oYK7lQF7Bdh57y/HWksoH6yjl1E88m8tEQ/thlyABGjqzV+txgmc1BryFu23KasqI2c4We/KgvsoSSAaUHkjpAMCuJck/P0G9mJWyTHrnZN2gCotyenLBZew0BIbiA2XYp6dQW4sU+MawfZ0E1KA0lem0SRYCB+sGD248uj4xVo9sIiCVyO9EQXy/YCZTeuTQHf1+QeFzI82vIrlv63QIDAQAB"
}

resource "hetznerdns_record" "mail_spf" {
  zone_id = data.hetznerdns_zone.main.id
  name    = "@"
  type    = "TXT"
  value   = "v=spf1 include:mxlogin.com -all"
}

resource "hetznerdns_record" "mail_webmail" {
  for_each = toset(["mail", "webmail"])
  zone_id  = data.hetznerdns_zone.main.id
  name     = each.value
  type     = "CNAME"
  value    = "heracles.mxrouting.net."
}