sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add CAA record

Browse source
This commit is contained in:
Jörg Thalheim 2023-10-21 19:03:32 +02:00 • committed by zowoq
parent bfc38c0bf1
commit 454b746534
1 changed files with 12 additions and 0 deletions

12
terraform/cloudflare_nix-community_org.tf
View file

@ -7,6 +7,18 @@ locals {
] ]
} }
# blocks other CAs from issuing certificates for the domain
resource "cloudflare_record" "nix-community-org-caa" {
zone_id = local.nix_community_zone_id
name = "@"
type = "CAA"
data {
flags = "0"
tag = "issue"
value = "letsencrypt.org"
}
}
resource "cloudflare_record" "nix-community-org-build01-A" { resource "cloudflare_record" "nix-community-org-build01-A" {
zone_id = local.nix_community_zone_id zone_id = local.nix_community_zone_id
name = "build01" name = "build01"