diff --git a/infrastructure/terraform/dns-email.tf b/infrastructure/terraform/dns-email.tf index 49676b2..30dda87 100644 --- a/infrastructure/terraform/dns-email.tf +++ b/infrastructure/terraform/dns-email.tf @@ -1,45 +1,38 @@ # dns-email.tf # V1e — SPF + DKIM + DMARC for vauco.no -# Apply: terraform apply -target=google_dns_record_set.spf -target=google_dns_record_set.dkim -target=google_dns_record_set.dmarc -# Verifiser etterpå: dig TXT vauco.no, dig TXT google._domainkey.vauco.no, dig TXT _dmarc.vauco.no +# Apply: terraform apply -target=google_dns_record_set.dkim +# Verifiser: dig TXT google._domainkey.vauco.no locals { - dns_zone = "vaucono" # Cloud DNS managed zone name (gcloud dns managed-zones list) + dns_zone = "vaucono" domain = "vauco.no." } -# ── SPF ──────────────────────────────────────────────────────────────────────── +# ── SPF (allerede opprettet) ────────────────────────────────────────────────────── resource "google_dns_record_set" "spf" { name = local.domain managed_zone = local.dns_zone type = "TXT" ttl = 3600 - - rrdatas = [ - "\"v=spf1 include:_spf.google.com ~all\"" - ] + rrdatas = ["\"v=spf1 include:_spf.google.com ~all\""] } -# ── DKIM ─────────────────────────────────────────────────────────────────────── +# ── DKIM — nøkkel splittet i to strenger à maks 255 tegn ─────────────────── resource "google_dns_record_set" "dkim" { name = "google._domainkey.${local.domain}" managed_zone = local.dns_zone type = "TXT" ttl = 3600 - rrdatas = [ - "\"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BWJTmOMIJ/nNFFOhyKQT1Ls35jYaBNKDGErqw2P4hOSpGHzJyMQAl3EkQyWYDC6e/mmk3It3HxwL8mfyyNKYXUFVVEKadDt58AFiJCNxM+lUAmdg0aM9ePWQ6LNBrkLE3Av7D/zrd40cFkBPP4eReKhWQQp94P5BuvoljFM6bTqmdejXuS5fERUMJ2p9aFo7tpSaczI57qt+CYejLaHCckgGoYeC7zecLxTQDA6Lfh7wX5rkjyVvU6q/+CeAOdNO+WyWEHPgEFsCnbZ8LhqlbnrkBib9KmpG99z7Btrnc1SHUj6X0nTfuXfJk+1w0bdlnaTr4asWdP6qVbQnksYSQIDAQAB\"" + "\"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BWJTmOMIJ/nNFFOhyKQT1Ls35jYaBNKDGErqw2P4hOSpGHzJyMQAl3EkQyWYDC6e/mmk3It3HxwL8mfyyNKYXUFVVEKadDt58AFiJCNxM+lUAmdg0aM9ePWQ6LNBrkLE3Av7D/zrd40cFkBPP4eReKhWQQp94P5BuvoljFM6bTqmdejXuS5fERUMJ2p9aFo7tpSaczI57qt+CYejLaHCckgGoYeC" "7zecLxTQDA6Lfh7wX5rkjyVvU6q/+CeAOdNO+WyWEHPgEFsCnbZ8LhqlbnrkBib9KmpG99z7Btrnc1SHUj6X0nTfuXfJk+1w0bdlnaTr4asWdP6qVbQnksYSQIDAQAB\"" ] } -# ── DMARC ────────────────────────────────────────────────────────────────────── +# ── DMARC (allerede opprettet) ────────────────────────────────────────────── resource "google_dns_record_set" "dmarc" { name = "_dmarc.${local.domain}" managed_zone = local.dns_zone type = "TXT" ttl = 3600 - - rrdatas = [ - "\"v=DMARC1; p=quarantine; pct=100; rua=mailto:chris.christiansen@vauco.no; ruf=mailto:chris.christiansen@vauco.no; fo=1\"" - ] + rrdatas = ["\"v=DMARC1; p=quarantine; pct=100; rua=mailto:chris.christiansen@vauco.no; ruf=mailto:chris.christiansen@vauco.no; fo=1\""] }