summaryrefslogtreecommitdiff
path: root/tf/cloudflare/dns.nix
diff options
context:
space:
mode:
Diffstat (limited to 'tf/cloudflare/dns.nix')
-rw-r--r--tf/cloudflare/dns.nix64
1 files changed, 0 insertions, 64 deletions
diff --git a/tf/cloudflare/dns.nix b/tf/cloudflare/dns.nix
deleted file mode 100644
index 9618019..0000000
--- a/tf/cloudflare/dns.nix
+++ /dev/null
@@ -1,64 +0,0 @@
-{lib, ...}: let
- mkRecord = name: {
- value,
- type,
- ...
- } @ args:
- {
- name = args.name or name;
- zone_id = lib.tfRef "var.zone_id";
- ttl = 1;
- inherit value type;
- }
- // lib.optionalAttrs (type != "TXT") {proxied = true;};
-
- atlas_tunnel = lib.tfRef "data.cloudflare_tunnel.atlas-nginx.id" + ".cfargotunnel.com";
-in {
- resource.cloudflare_record = builtins.mapAttrs mkRecord {
- website = {
- name = "@";
- value = "website-86j.pages.dev";
- type = "CNAME";
- };
-
- www = {
- value = "mydadleft.me";
- type = "CNAME";
- };
-
- api = {
- value = "teawieapi.pages.dev";
- type = "CNAME";
- };
-
- miniflux = {
- value = atlas_tunnel;
- type = "CNAME";
- };
-
- msix = {
- value = atlas_tunnel;
- type = "CNAME";
- };
-
- # prevent email spoofing
-
- dmarc = {
- name = "_dmarc";
- value = "v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;";
- type = "TXT";
- };
-
- domainkey = {
- name = "*._domainkey";
- value = "v=DKIM1; p=";
- type = "TXT";
- };
-
- email = {
- name = "mydadleft.me";
- value = "v=spf1 -all";
- type = "TXT";
- };
- };
-}