239 lines
6.2 KiB
HCL
239 lines
6.2 KiB
HCL
locals {
|
|
nix_community_zone_id = "8965c5ff4e19a3ca46b5df6965f2bc36"
|
|
|
|
# For each github page, create a CNAME alias to nix-community.github.io
|
|
nix_community_github_pages = [
|
|
"nur"
|
|
]
|
|
}
|
|
|
|
# blocks other CAs from issuing certificates for the domain
|
|
resource "cloudflare_record" "nix-community-org-caa" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "@"
|
|
type = "CAA"
|
|
data {
|
|
flags = "0"
|
|
tag = "issue"
|
|
value = "letsencrypt.org"
|
|
}
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-build01-A" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "build01"
|
|
value = "135.181.218.169"
|
|
type = "A"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-build01-AAAA" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "build01"
|
|
value = "2a01:4f9:3a:3b16::1"
|
|
type = "AAAA"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-build02-A" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "build02"
|
|
value = "65.21.133.211"
|
|
type = "A"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-build02-AAAA" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "build02"
|
|
value = "2a01:4f9:3b:41d9::1"
|
|
type = "AAAA"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-build03-A" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "build03"
|
|
value = "65.21.139.242"
|
|
type = "A"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-build03-AAAA" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "build03"
|
|
value = "2a01:4f9:3b:2946::1"
|
|
type = "AAAA"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-build04-A" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "build04"
|
|
value = "65.109.107.32"
|
|
type = "A"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-build04-AAAA" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "build04"
|
|
value = "2a01:4f9:3051:3962::2"
|
|
type = "AAAA"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-darwin01-A" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "darwin01"
|
|
value = "85.209.53.240"
|
|
type = "A"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-darwin01-AAAA" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "darwin01"
|
|
value = "2a09:9340:808:630::1"
|
|
type = "AAAA"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-darwin02-A" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "darwin02"
|
|
value = "167.235.38.49"
|
|
type = "A"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-darwin02-AAAA" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "darwin02"
|
|
value = "2a01:4f8:262:24af::1"
|
|
type = "AAAA"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-darwin03-A" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "darwin03"
|
|
value = "142.132.141.44"
|
|
type = "A"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-darwin03-AAAA" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "darwin03"
|
|
value = "2a01:4f8:261:135a::1"
|
|
type = "AAAA"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-web02-A" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "web02"
|
|
value = "46.226.105.188"
|
|
type = "A"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-web02-AAAA" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "web02"
|
|
value = "2001:4b98:dc0:43:f816:3eff:fe99:9fca"
|
|
type = "AAAA"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-build-box-CNAME" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "build-box"
|
|
value = "build01.nix-community.org"
|
|
type = "CNAME"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-darwin-build-box-CNAME" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "darwin-build-box"
|
|
value = "darwin01.nix-community.org"
|
|
type = "CNAME"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-nixpkgs-update-logs-CNAME" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "nixpkgs-update-logs"
|
|
value = "build02.nix-community.org"
|
|
type = "CNAME"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-buildbot-CNAME" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "buildbot"
|
|
value = "build03.nix-community.org"
|
|
type = "CNAME"
|
|
}
|
|
|
|
# Used by nix-community/nixpkgs-docker
|
|
resource "cloudflare_record" "nix-community-org-docker-CNAME" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "docker"
|
|
value = "zimbatm.docker.scarf.sh"
|
|
type = "CNAME"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-hydra-CNAME" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "hydra"
|
|
value = "build03.nix-community.org"
|
|
type = "CNAME"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-nur-update-CNAME" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "nur-update"
|
|
value = "build03.nix-community.org"
|
|
type = "CNAME"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-monitoring-CNAME" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "monitoring"
|
|
value = "web02.nix-community.org"
|
|
type = "CNAME"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-apex-A" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "@"
|
|
value = "nix-community.github.io"
|
|
type = "CNAME"
|
|
proxied = false
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-apex-TXT" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "@"
|
|
value = "v=spf1 include:_mailcust.gandi.net -all"
|
|
type = "TXT"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-apex-MX" {
|
|
for_each = {
|
|
"spool.mail.gandi.net." = 10
|
|
"fb.mail.gandi.net." = 50
|
|
}
|
|
zone_id = local.nix_community_zone_id
|
|
name = "@"
|
|
value = each.key
|
|
type = "MX"
|
|
priority = each.value
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-github-challenge-TXT" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "_github-challenge-nix-community-org"
|
|
value = "2eee7c1945"
|
|
type = "TXT"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-github-pages-challenge-TXT" {
|
|
zone_id = local.nix_community_zone_id
|
|
name = "_github-pages-challenge-nix-community.nix-community.org."
|
|
value = "6d236784300b9b1e80fdc496b7bfce"
|
|
type = "TXT"
|
|
}
|
|
|
|
resource "cloudflare_record" "nix-community-org-github-pages" {
|
|
for_each = { for page in local.nix_community_github_pages : page => page }
|
|
|
|
zone_id = local.nix_community_zone_id
|
|
name = each.value
|
|
value = "nix-community.github.io"
|
|
type = "CNAME"
|
|
}
|