From c42f9b0b16c79fa4408e36304ff2f93c16e1dfa2 Mon Sep 17 00:00:00 2001
From: unkin-agent <unkin-agent@unkin.net>
Date: Fri, 16 Oct 2026 23:38:51 +1100
Subject: [PATCH] add internal mail edge A records

---
 .../main-unkin-net/a/kustomization.yaml            |  1 +
 .../authoritative/main-unkin-net/a/mail-in.yaml    | 14 ++++++++++++++
 .../authoritative/unkin-net/a/kustomization.yaml   |  2 ++
 .../authoritative/unkin-net/a/mta1-edge.yaml       | 14 ++++++++++++++
 .../authoritative/unkin-net/a/mta2-edge.yaml       | 14 ++++++++++++++
 5 files changed, 45 insertions(+)
 create mode 100644 apps/base/bind-internal/authoritative/main-unkin-net/a/mail-in.yaml
 create mode 100644 apps/base/bind-internal/authoritative/unkin-net/a/mta1-edge.yaml
 create mode 100644 apps/base/bind-internal/authoritative/unkin-net/a/mta2-edge.yaml

diff --git a/apps/base/bind-internal/authoritative/main-unkin-net/a/kustomization.yaml b/apps/base/bind-internal/authoritative/main-unkin-net/a/kustomization.yaml
index 420efcf..6555f6e 100644
--- a/apps/base/bind-internal/authoritative/main-unkin-net/a/kustomization.yaml
+++ b/apps/base/bind-internal/authoritative/main-unkin-net/a/kustomization.yaml
@@ -4,6 +4,7 @@ kind: Kustomization
 
 resources:
   - jellyfin.yaml
+  - mail-in.yaml
   - lidarr.yaml
   - nzbget.yaml
   - prowlarr.yaml
diff --git a/apps/base/bind-internal/authoritative/main-unkin-net/a/mail-in.yaml b/apps/base/bind-internal/authoritative/main-unkin-net/a/mail-in.yaml
new file mode 100644
index 0000000..e455040
--- /dev/null
+++ b/apps/base/bind-internal/authoritative/main-unkin-net/a/mail-in.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: bind.unkin.net/v1alpha1
+kind: DNSRecord
+metadata:
+  name: mail-in-dns-internal
+  namespace: bind-internal
+spec:
+  zoneRef: main-unkin-net
+  name: mail-in
+  type: A
+  ttl: 600
+  values:
+    # home WAN (public path for edge to smarthost relay), mirrors public DNS.
+    - 103.216.191.185
diff --git a/apps/base/bind-internal/authoritative/unkin-net/a/kustomization.yaml b/apps/base/bind-internal/authoritative/unkin-net/a/kustomization.yaml
index 0b2c906..3466e94 100644
--- a/apps/base/bind-internal/authoritative/unkin-net/a/kustomization.yaml
+++ b/apps/base/bind-internal/authoritative/unkin-net/a/kustomization.yaml
@@ -17,5 +17,7 @@ resources:
   - lb1.yaml
   - logviewer.yaml
   - mail.yaml
+  - mta1-edge.yaml
+  - mta2-edge.yaml
   - vlogs.yaml
   - watchstate.yaml
diff --git a/apps/base/bind-internal/authoritative/unkin-net/a/mta1-edge.yaml b/apps/base/bind-internal/authoritative/unkin-net/a/mta1-edge.yaml
new file mode 100644
index 0000000..f3c708e
--- /dev/null
+++ b/apps/base/bind-internal/authoritative/unkin-net/a/mta1-edge.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: bind.unkin.net/v1alpha1
+kind: DNSRecord
+metadata:
+  name: mta1-edge-dns-internal
+  namespace: bind-internal
+spec:
+  zoneRef: unkin-net
+  name: mta1.edge
+  type: A
+  ttl: 600
+  values:
+    # edge MTA 1 public IP, mirrors public DNS.
+    - 66.226.148.207
diff --git a/apps/base/bind-internal/authoritative/unkin-net/a/mta2-edge.yaml b/apps/base/bind-internal/authoritative/unkin-net/a/mta2-edge.yaml
new file mode 100644
index 0000000..2465c57
--- /dev/null
+++ b/apps/base/bind-internal/authoritative/unkin-net/a/mta2-edge.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: bind.unkin.net/v1alpha1
+kind: DNSRecord
+metadata:
+  name: mta2-edge-dns-internal
+  namespace: bind-internal
+spec:
+  zoneRef: unkin-net
+  name: mta2.edge
+  type: A
+  ttl: 600
+  values:
+    # edge MTA 2 public IP, mirrors public DNS.
+    - 66.226.149.50