chris/OSVauco
1
0
Fork 0
Code Issues 1 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix(V1e): DKIM som én sammenhengende TXT-streng (korrekt HCL-syntaks)

Browse Source
This commit is contained in:
chrischristiansen-glitch 2026-06-10 01:59:31 +02:00
parent 6972cf4851
commit 2430b1d05e
1 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
infrastructure/terraform/dns-email.tf
View File

@ -1,14 +1,11 @@
# dns-email.tf
# V1e — SPF + DKIM + DMARC for vauco.no
# Apply: terraform apply -target=google_dns_record_set.dkim
# Verifiser: dig TXT google._domainkey.vauco.no
locals {
dns_zone = "vaucono"
domain = "vauco.no."
}
# ── SPF (allerede opprettet) ──────────────────────────────────────────────────────
resource "google_dns_record_set" "spf" {
name = local.domain
managed_zone = local.dns_zone
@ -17,18 +14,25 @@ resource "google_dns_record_set" "spf" {
rrdatas = ["\"v=spf1 include:_spf.google.com ~all\""]
}
# ── DKIM — nøkkel splittet i to strenger à maks 255 tegn ───────────────────
resource "google_dns_record_set" "dkim" {
name = "google._domainkey.${local.domain}"
managed_zone = local.dns_zone
type = "TXT"
ttl = 3600
rrdatas = [
"\"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BWJTmOMIJ/nNFFOhyKQT1Ls35jYaBNKDGErqw2P4hOSpGHzJyMQAl3EkQyWYDC6e/mmk3It3HxwL8mfyyNKYXUFVVEKadDt58AFiJCNxM+lUAmdg0aM9ePWQ6LNBrkLE3Av7D/zrd40cFkBPP4eReKhWQQp94P5BuvoljFM6bTqmdejXuS5fERUMJ2p9aFo7tpSaczI57qt+CYejLaHCckgGoYeC" "7zecLxTQDA6Lfh7wX5rkjyVvU6q/+CeAOdNO+WyWEHPgEFsCnbZ8LhqlbnrkBib9KmpG99z7Btrnc1SHUj6X0nTfuXfJk+1w0bdlnaTr4asWdP6qVbQnksYSQIDAQAB\""
join("", [
"\"v=DKIM1; k=rsa; p=",
"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BWJTmOMIJ/nNFFOhyKQ",
"T1Ls35jYaBNKDGErqw2P4hOSpGHzJyMQAl3EkQyWYDC6e/mmk3It3HxwL8mfyyNK",
"YXUFVVEKadDt58AFiJCNxM+lUAmdg0aM9ePWQ6LNBrkLE3Av7D/zrd40cFkBPP4e",
"ReKhWQQp94P5BuvoljFM6bTqmdejXuS5fERUMJ2p9aFo7tpSaczI57qt+CYejLaHC",
"ckgGoYeC7zecLxTQDA6Lfh7wX5rkjyVvU6q/+CeAOdNO+WyWEHPgEFsCnbZ8Lhql",
"bnrkBib9KmpG99z7Btrnc1SHUj6X0nTfuXfJk+1w0bdlnaTr4asWdP6qVbQnksYSQ",
"IDAQAB\""
])
]
}
# ── DMARC (allerede opprettet) ──────────────────────────────────────────────
resource "google_dns_record_set" "dmarc" {
name = "_dmarc.${local.domain}"
managed_zone = local.dns_zone