cluster/dns.tf
Peter Kurfer c6590603dc
feat: get secrets from Azure KeyVault instead of using vars for
everything

update providers and migrate CloudFlare DNS major update
2025-03-27 17:15:59 +01:00

62 lines
1.6 KiB
HCL

resource "cloudflare_zone" "icb4dc0de" {
account = {
id = data.azurerm_key_vault_secret.cloudflare_account_id.value
}
name = "icb4dc0.de"
type = "full"
lifecycle {
ignore_changes = [account.id]
}
}
resource "cloudflare_dns_record" "mx_primary" {
zone_id = cloudflare_zone.icb4dc0de.id
name = cloudflare_zone.icb4dc0de.name
type = "MX"
ttl = 1
content = "mx01.mail.icloud.com"
priority = 10
}
resource "cloudflare_dns_record" "mx_secondary" {
zone_id = cloudflare_zone.icb4dc0de.id
name = cloudflare_zone.icb4dc0de.name
type = "MX"
ttl = 1
content = "mx02.mail.icloud.com"
priority = 10
}
resource "cloudflare_dns_record" "apple_proof" {
zone_id = cloudflare_zone.icb4dc0de.id
name = cloudflare_zone.icb4dc0de.name
type = "TXT"
ttl = 1
content = "apple-domain=chwbVvzH8hWIgg1l"
}
resource "cloudflare_dns_record" "keybase_proof" {
zone_id = cloudflare_zone.icb4dc0de.id
name = cloudflare_zone.icb4dc0de.name
type = "TXT"
ttl = 1
content = "keybase-site-verification=WDQoLtW22epD7eQnts6rPKJBGA0lD6jSI6m0bGMYWag"
}
resource "cloudflare_dns_record" "apple_spf" {
zone_id = cloudflare_zone.icb4dc0de.id
name = cloudflare_zone.icb4dc0de.name
type = "TXT"
ttl = 1
content = "\"v=spf1 include:icloud.com ~all\""
}
resource "cloudflare_dns_record" "apple_sig_domainkey" {
zone_id = cloudflare_zone.icb4dc0de.id
name = "sig1._domainkey.${cloudflare_zone.icb4dc0de.name}"
type = "CNAME"
ttl = 1
content = "sig1.dkim.icb4dc0.de.at.icloudmailadmin.com"
}