it-infra/nixbld-etc-nixos/named/m-labs.hk

$TTL 7200

@						SOA	NS.XN--WBTZ5WPQAJ35CFXC.XN--J6W193G. sb.m-labs.hk. (
							2024080501
							7200
							3600
							86400
							600)


						NS		NS.XN--WBTZ5WPQAJ35CFXC.XN--J6W193G.
						NS		ns1.qnetp.net.
						NS		ns1.he.net.

						A		94.190.212.123
						A		202.77.7.238
						AAAA	2001:470:18:390::2
						MX		10 mail.m-labs.hk.
						TXT		"v=spf1 mx a:router.alt.m-labs.hk -all"
						TXT		"google-site-verification=Tf_TEGZLG7-2BE70hMjLnzjDZ1qUeUZ6vxzbl1sagT8"
						CAA		0 issue "letsencrypt.org; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/1758987512"


mail					A		94.190.212.123
mail					A		202.77.7.238
mail					AAAA	2001:470:18:390::2
mail._domainkey   	IN	TXT	    ( "v=DKIM1; h=sha256; k=rsa; t=y; "
                                "p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TBwMZv41/zbxAifWeT+JLrhJmJpZYjfV5YXb74nocDf+A8GiKmqu6C4fvh9hCozdLKeSzqxxwyEe/MmedX9ToIpGpXjHlW6qraCeknc4jSjvljVjj2HgOAHWeQSWy9MdUzxKmK9CTB0INXsm34WbyY+fSRDHAUQj60eCwlXAOxqhp9KsndI9kQW+CtkN7xjmyqzU1hLFCtZAl"
                                "eq+zTLCPbAFG7nigxfjM7qBBP8FodTkDv6Wz5hW4wqlIKJygBXoq5yYLQ/UyPhwLpTEAN6pxRVWmwXF4PROTmZ4Cd+RTLvm2CB5N6J9dVVjeVbAaYI/6cNPdB84tZZKYHGhE9nvwIDAQAB" )  ; ----- DKIM key mail for m-labs-intl.com
_dmarc					TXT		"v=DMARC1; p=none"

lab						CNAME	@
www						CNAME	@
nixbld					CNAME	@
msys2					CNAME	@
conda					CNAME	@
afws					CNAME	@
git						CNAME	@
chat					CNAME	@
hooks					CNAME	@
forum					CNAME	@
perso					CNAME	@
rt						CNAME	@
files					CNAME	@
docs					CNAME	@

rpi-1					AAAA	2001:470:f891:1:dea6:32ff:fe8a:6a93
rpi-4					AAAA	2001:470:f891:1:dea6:32ff:fe14:fce9

router.alt				A		103.206.98.200
stewardship1.alt		A		103.206.98.201
stewardship2.alt		A		103.206.98.202
atse.alt				A		103.206.98.203
nasty-gareth.alt		A		103.206.98.204
zynq.alt				A		103.206.98.205
nixbld: m-labs.hk DNS zone 2022-06-28 14:44:14 +08:00			`$TTL 7200`

nixbld: better workaround against crappy registrar without glue records PCCW's static.imsbiz.com is wonky and not always available for all IPs, so stop using it. 2023-01-16 16:07:54 +08:00			`@ SOA NS.XN--WBTZ5WPQAJ35CFXC.XN--J6W193G. sb.m-labs.hk. (`
nixbld: remove outdated DNS records 2024-08-05 19:13:34 +08:00			`2024080501`
nixbld: m-labs.hk DNS zone 2022-06-28 14:44:14 +08:00			`7200`
			`3600`
			`86400`
			`600)`


nixbld: better workaround against crappy registrar without glue records PCCW's static.imsbiz.com is wonky and not always available for all IPs, so stop using it. 2023-01-16 16:07:54 +08:00			`NS NS.XN--WBTZ5WPQAJ35CFXC.XN--J6W193G.`
nixbld: add back qnetp DNS 2023-01-29 18:29:16 +08:00			`NS ns1.qnetp.net.`
nixbld: move to he.net DNS 2023-01-27 14:48:14 +08:00			`NS ns1.he.net.`
nixbld: m-labs.hk DNS zone 2022-06-28 14:44:14 +08:00
nixbld: relocation 2023-01-29 12:11:31 +08:00			`A 94.190.212.123`
nixbld: add backup IP to DNS 2024-05-06 10:44:54 +08:00			`A 202.77.7.238`
nixbld: relocation 2023-01-29 12:11:31 +08:00			`AAAA 2001:470:18:390::2`
switch email server 2022-08-13 10:25:53 +08:00			`MX 10 mail.m-labs.hk.`
nixbld: fix sending email to altnet 2023-09-03 17:23:53 +08:00			`TXT "v=spf1 mx a:router.alt.m-labs.hk -all"`
nixbld: m-labs.hk DNS zone 2022-06-28 14:44:14 +08:00			`TXT "google-site-verification=Tf_TEGZLG7-2BE70hMjLnzjDZ1qUeUZ6vxzbl1sagT8"`
nixbld: update letsencrypt CAA URI https://github.com/NixOS/nixpkgs/issues/316608 2024-06-02 13:50:45 +08:00			`CAA 0 issue "letsencrypt.org; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/1758987512"`
nixbld: m-labs.hk DNS zone 2022-06-28 14:44:14 +08:00

nixbld: relocation 2023-01-29 12:11:31 +08:00			`mail A 94.190.212.123`
nixbld: add backup IP to DNS 2024-05-06 10:44:54 +08:00			`mail A 202.77.7.238`
nixbld: relocation 2023-01-29 12:11:31 +08:00			`mail AAAA 2001:470:18:390::2`
Add SPF and update mail DKIM key so that postfix will be used instead of nginx for mail forwarding Signed-off-by: Egor Savkin <es@m-labs.hk> 2024-07-26 17:46:54 +08:00			`mail._domainkey IN TXT ( "v=DKIM1; h=sha256; k=rsa; t=y; "`
			`"p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TBwMZv41/zbxAifWeT+JLrhJmJpZYjfV5YXb74nocDf+A8GiKmqu6C4fvh9hCozdLKeSzqxxwyEe/MmedX9ToIpGpXjHlW6qraCeknc4jSjvljVjj2HgOAHWeQSWy9MdUzxKmK9CTB0INXsm34WbyY+fSRDHAUQj60eCwlXAOxqhp9KsndI9kQW+CtkN7xjmyqzU1hLFCtZAl"`
			`"eq+zTLCPbAFG7nigxfjM7qBBP8FodTkDv6Wz5hW4wqlIKJygBXoq5yYLQ/UyPhwLpTEAN6pxRVWmwXF4PROTmZ4Cd+RTLvm2CB5N6J9dVVjeVbAaYI/6cNPdB84tZZKYHGhE9nvwIDAQAB" ) ; ----- DKIM key mail for m-labs-intl.com`
switch email server 2022-08-13 10:25:53 +08:00			`_dmarc TXT "v=DMARC1; p=none"`
nixbld: rfc2181 forbids mx cname 2022-09-01 10:55:31 +08:00
nixbld: m-labs.hk DNS zone 2022-06-28 14:44:14 +08:00			`lab CNAME @`
			`www CNAME @`
			`nixbld CNAME @`
nixbld: new msys2 repos 2022-11-03 19:09:35 +08:00			`msys2 CNAME @`
nixbld: m-labs.hk DNS zone 2022-06-28 14:44:14 +08:00			`conda CNAME @`
nixbld: afws websocket proxy settings 2023-04-05 13:37:35 +08:00			`afws CNAME @`
nixbld: m-labs.hk DNS zone 2022-06-28 14:44:14 +08:00			`git CNAME @`
			`chat CNAME @`
			`hooks CNAME @`
			`forum CNAME @`
			`perso CNAME @`
			`rt CNAME @`
nixbld: install nextcloud 2022-06-30 17:33:09 +08:00			`files CNAME @`
nixbld: install hedgedoc 2022-09-01 11:39:47 +08:00			`docs CNAME @`
nixbld: m-labs.hk DNS zone 2022-06-28 14:44:14 +08:00
nixbld: update LAN AAAA records 2023-01-29 18:01:31 +08:00			`rpi-1 AAAA 2001:470:f891:1:dea6:32ff:fe8a:6a93`
			`rpi-4 AAAA 2001:470:f891:1:dea6:32ff:fe14:fce9`
nixbld: altnet setup 2023-07-13 13:56:10 +08:00
			`router.alt A 103.206.98.200`
			`stewardship1.alt A 103.206.98.201`
			`stewardship2.alt A 103.206.98.202`
nixbld: add atse.alt.m-labs.hk 2023-08-04 17:11:36 +08:00			`atse.alt A 103.206.98.203`
nixbld: add DNS entries for nasty-gareth.alt 2023-09-28 10:39:08 +08:00			`nasty-gareth.alt A 103.206.98.204`
named: add CAA records everywhere, add IP for zynq board 2024-01-09 08:33:54 +08:00			`zynq.alt A 103.206.98.205`