bind-internal: add mail edge A records (#557)

The lab resolver is authoritative for unkin.net and main.unkin.net, so names that exist only in public DNS return NXDOMAIN internally. The edge MTAs and the smarthost resolve these names through it.

- add mail-in.main.unkin.net A 103.216.191.185 (home WAN)
- add mta1.edge.unkin.net A 66.226.148.207
- add mta2.edge.unkin.net A 66.226.149.50
- records mirror public DNS

Reviewed-on: #557
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

apps/base/bind-internal/authoritative/main-unkin-net/a/kustomization.yaml

@@ -4,6 +4,7 @@ kind: Kustomization
 
 resources:
   - jellyfin.yaml
+  - mail-in.yaml
   - lidarr.yaml
   - nzbget.yaml
   - prowlarr.yaml

apps/base/bind-internal/authoritative/main-unkin-net/a/mail-in.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: bind.unkin.net/v1alpha1
+kind: DNSRecord
+metadata:
+  name: mail-in-dns-internal
+  namespace: bind-internal
+spec:
+  zoneRef: main-unkin-net
+  name: mail-in
+  type: A
+  ttl: 600
+  values:
+    # home WAN (public path for edge to smarthost relay), mirrors public DNS.
+    - 103.216.191.185

apps/base/bind-internal/authoritative/unkin-net/a/kustomization.yaml

@@ -17,5 +17,7 @@ resources:
   - lb1.yaml
   - logviewer.yaml
   - mail.yaml
+  - mta1-edge.yaml
+  - mta2-edge.yaml
   - vlogs.yaml
   - watchstate.yaml

apps/base/bind-internal/authoritative/unkin-net/a/mta1-edge.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: bind.unkin.net/v1alpha1
+kind: DNSRecord
+metadata:
+  name: mta1-edge-dns-internal
+  namespace: bind-internal
+spec:
+  zoneRef: unkin-net
+  name: mta1.edge
+  type: A
+  ttl: 600
+  values:
+    # edge MTA 1 public IP, mirrors public DNS.
+    - 66.226.148.207

apps/base/bind-internal/authoritative/unkin-net/a/mta2-edge.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: bind.unkin.net/v1alpha1
+kind: DNSRecord
+metadata:
+  name: mta2-edge-dns-internal
+  namespace: bind-internal
+spec:
+  zoneRef: unkin-net
+  name: mta2.edge
+  type: A
+  ttl: 600
+  values:
+    # edge MTA 2 public IP, mirrors public DNS.
+    - 66.226.149.50