cluster/dns.tf

resource "cloudflare_zone" "icb4dc0de" {
  account = {
    id = data.azurerm_key_vault_secret.cloudflare_account_id.value
  }
  name = "icb4dc0.de"
  type = "full"

  lifecycle {
    ignore_changes = [account.id]
  }
}

resource "cloudflare_dns_record" "mx_primary" {
  zone_id  = cloudflare_zone.icb4dc0de.id
  name     = cloudflare_zone.icb4dc0de.name
  type     = "MX"
  ttl      = 1
  content  = "mx01.mail.icloud.com"
  priority = 10
}


resource "cloudflare_dns_record" "mx_secondary" {
  zone_id  = cloudflare_zone.icb4dc0de.id
  name     = cloudflare_zone.icb4dc0de.name
  type     = "MX"
  ttl      = 1
  content  = "mx02.mail.icloud.com"
  priority = 10
}

resource "cloudflare_dns_record" "apple_proof" {
  zone_id = cloudflare_zone.icb4dc0de.id
  name    = cloudflare_zone.icb4dc0de.name
  type    = "TXT"
  ttl     = 1
  content = "apple-domain=chwbVvzH8hWIgg1l"
}

resource "cloudflare_dns_record" "keybase_proof" {
  zone_id = cloudflare_zone.icb4dc0de.id
  name    = cloudflare_zone.icb4dc0de.name
  type    = "TXT"
  ttl     = 1
  content = "keybase-site-verification=WDQoLtW22epD7eQnts6rPKJBGA0lD6jSI6m0bGMYWag"
}

resource "cloudflare_dns_record" "apple_spf" {
  zone_id = cloudflare_zone.icb4dc0de.id
  name    = cloudflare_zone.icb4dc0de.name
  type    = "TXT"
  ttl     = 1
  content = "\"v=spf1 include:icloud.com ~all\""
}

resource "cloudflare_dns_record" "apple_sig_domainkey" {
  zone_id = cloudflare_zone.icb4dc0de.id
  name    = "sig1._domainkey.${cloudflare_zone.icb4dc0de.name}"
  type    = "CNAME"
  ttl     = 1
  content = "sig1.dkim.icb4dc0.de.at.icloudmailadmin.com"
}