From 331d96278d0d8dfff26580b0931c304ead1ecfac Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sat, 17 Oct 2026 12:50:56 +1100 Subject: [PATCH] bind-internal: add mail edge A records (#557) The lab resolver is authoritative for unkin.net and main.unkin.net, so names that exist only in public DNS return NXDOMAIN internally. The edge MTAs and the smarthost resolve these names through it. - add mail-in.main.unkin.net A 103.216.191.185 (home WAN) - add mta1.edge.unkin.net A 66.226.148.207 - add mta2.edge.unkin.net A 66.226.149.50 - records mirror public DNS Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/557 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- .../main-unkin-net/a/kustomization.yaml | 1 + .../authoritative/main-unkin-net/a/mail-in.yaml | 14 ++++++++++++++ .../authoritative/unkin-net/a/kustomization.yaml | 2 ++ .../authoritative/unkin-net/a/mta1-edge.yaml | 14 ++++++++++++++ .../authoritative/unkin-net/a/mta2-edge.yaml | 14 ++++++++++++++ 5 files changed, 45 insertions(+) create mode 100644 apps/base/bind-internal/authoritative/main-unkin-net/a/mail-in.yaml create mode 100644 apps/base/bind-internal/authoritative/unkin-net/a/mta1-edge.yaml create mode 100644 apps/base/bind-internal/authoritative/unkin-net/a/mta2-edge.yaml diff --git a/apps/base/bind-internal/authoritative/main-unkin-net/a/kustomization.yaml b/apps/base/bind-internal/authoritative/main-unkin-net/a/kustomization.yaml index 420efcf..6555f6e 100644 --- a/apps/base/bind-internal/authoritative/main-unkin-net/a/kustomization.yaml +++ b/apps/base/bind-internal/authoritative/main-unkin-net/a/kustomization.yaml @@ -4,6 +4,7 @@ kind: Kustomization resources: - jellyfin.yaml + - mail-in.yaml - lidarr.yaml - nzbget.yaml - prowlarr.yaml diff --git a/apps/base/bind-internal/authoritative/main-unkin-net/a/mail-in.yaml b/apps/base/bind-internal/authoritative/main-unkin-net/a/mail-in.yaml new file mode 100644 index 0000000..e455040 --- /dev/null +++ b/apps/base/bind-internal/authoritative/main-unkin-net/a/mail-in.yaml @@ -0,0 +1,14 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: mail-in-dns-internal + namespace: bind-internal +spec: + zoneRef: main-unkin-net + name: mail-in + type: A + ttl: 600 + values: + # home WAN (public path for edge to smarthost relay), mirrors public DNS. + - 103.216.191.185 diff --git a/apps/base/bind-internal/authoritative/unkin-net/a/kustomization.yaml b/apps/base/bind-internal/authoritative/unkin-net/a/kustomization.yaml index 0b2c906..3466e94 100644 --- a/apps/base/bind-internal/authoritative/unkin-net/a/kustomization.yaml +++ b/apps/base/bind-internal/authoritative/unkin-net/a/kustomization.yaml @@ -17,5 +17,7 @@ resources: - lb1.yaml - logviewer.yaml - mail.yaml + - mta1-edge.yaml + - mta2-edge.yaml - vlogs.yaml - watchstate.yaml diff --git a/apps/base/bind-internal/authoritative/unkin-net/a/mta1-edge.yaml b/apps/base/bind-internal/authoritative/unkin-net/a/mta1-edge.yaml new file mode 100644 index 0000000..f3c708e --- /dev/null +++ b/apps/base/bind-internal/authoritative/unkin-net/a/mta1-edge.yaml @@ -0,0 +1,14 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: mta1-edge-dns-internal + namespace: bind-internal +spec: + zoneRef: unkin-net + name: mta1.edge + type: A + ttl: 600 + values: + # edge MTA 1 public IP, mirrors public DNS. + - 66.226.148.207 diff --git a/apps/base/bind-internal/authoritative/unkin-net/a/mta2-edge.yaml b/apps/base/bind-internal/authoritative/unkin-net/a/mta2-edge.yaml new file mode 100644 index 0000000..2465c57 --- /dev/null +++ b/apps/base/bind-internal/authoritative/unkin-net/a/mta2-edge.yaml @@ -0,0 +1,14 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: mta2-edge-dns-internal + namespace: bind-internal +spec: + zoneRef: unkin-net + name: mta2.edge + type: A + ttl: 600 + values: + # edge MTA 2 public IP, mirrors public DNS. + - 66.226.149.50