chrischristiansen-glitch
5983f64e33
- infrastructure/terraform/dns-email.tf: tre Cloud DNS TXT-records - SPF: Google Workspace avsendertillatelse - DKIM: google._domainkey.vauco.no med faktisk nøkkel - DMARC: p=quarantine, rapporter til chris.christiansen@vauco.no - ROADMAP: V1e markert ferdig OQ-24 lukkes etter terraform apply
46 lines
2.2 KiB
HCL
46 lines
2.2 KiB
HCL
# dns-email.tf
|
|
# V1e — SPF + DKIM + DMARC for vauco.no
|
|
# Apply: terraform apply -target=google_dns_record_set.spf -target=google_dns_record_set.dkim -target=google_dns_record_set.dmarc
|
|
# Verifiser etterpå: dig TXT vauco.no, dig TXT google._domainkey.vauco.no, dig TXT _dmarc.vauco.no
|
|
|
|
locals {
|
|
dns_zone = "vauco-no" # Cloud DNS managed zone name
|
|
domain = "vauco.no."
|
|
}
|
|
|
|
# ── SPF ─────────────────────────────────────────────────────────────────────────────
|
|
resource "google_dns_record_set" "spf" {
|
|
name = local.domain
|
|
managed_zone = local.dns_zone
|
|
type = "TXT"
|
|
ttl = 3600
|
|
|
|
rrdatas = [
|
|
"\"v=spf1 include:_spf.google.com ~all\""
|
|
]
|
|
}
|
|
|
|
# ── DKIM ────────────────────────────────────────────────────────────────────────────
|
|
resource "google_dns_record_set" "dkim" {
|
|
name = "google._domainkey.${local.domain}"
|
|
managed_zone = local.dns_zone
|
|
type = "TXT"
|
|
ttl = 3600
|
|
|
|
rrdatas = [
|
|
"\"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BWJTmOMIJ/nNFFOhyKQT1Ls35jYaBNKDGErqw2P4hOSpGHzJyMQAl3EkQyWYDC6e/mmk3It3HxwL8mfyyNKYXUFVVEKadDt58AFiJCNxM+lUAmdg0aM9ePWQ6LNBrkLE3Av7D/zrd40cFkBPP4eReKhWQQp94P5BuvoljFM6bTqmdejXuS5fERUMJ2p9aFo7tpSaczI57qt+CYejLaHCckgGoYeC7zecLxTQDA6Lfh7wX5rkjyVvU6q/+CeAOdNO+WyWEHPgEFsCnbZ8LhqlbnrkBib9KmpG99z7Btrnc1SHUj6X0nTfuXfJk+1w0bdlnaTr4asWdP6qVbQnksYSQIDAQAB\""
|
|
]
|
|
}
|
|
|
|
# ── DMARC ──────────────────────────────────────────────────────────────────────────
|
|
resource "google_dns_record_set" "dmarc" {
|
|
name = "_dmarc.${local.domain}"
|
|
managed_zone = local.dns_zone
|
|
type = "TXT"
|
|
ttl = 3600
|
|
|
|
rrdatas = [
|
|
"\"v=DMARC1; p=quarantine; pct=100; rua=mailto:chris.christiansen@vauco.no; ruf=mailto:chris.christiansen@vauco.no; fo=1\""
|
|
]
|
|
}
|