diff --git a/apps/base/bind-external/edge-unkin-net/a/kustomization.yaml b/apps/base/bind-external/edge-unkin-net/a/kustomization.yaml new file mode 100644 index 0000000..bf2f03c --- /dev/null +++ b/apps/base/bind-external/edge-unkin-net/a/kustomization.yaml @@ -0,0 +1,7 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - mta1.yaml + - mta2.yaml diff --git a/apps/base/bind-external/edge-unkin-net/a/mta1.yaml b/apps/base/bind-external/edge-unkin-net/a/mta1.yaml new file mode 100644 index 0000000..bec6f1b --- /dev/null +++ b/apps/base/bind-external/edge-unkin-net/a/mta1.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: edge-mta1-a + namespace: bind-external +spec: + zoneRef: edge-unkin-net + name: "mta1" + type: A + ttl: 3600 + values: + - 66.226.148.207 diff --git a/apps/base/bind-external/edge-unkin-net/a/mta2.yaml b/apps/base/bind-external/edge-unkin-net/a/mta2.yaml new file mode 100644 index 0000000..9179955 --- /dev/null +++ b/apps/base/bind-external/edge-unkin-net/a/mta2.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: edge-mta2-a + namespace: bind-external +spec: + zoneRef: edge-unkin-net + name: "mta2" + type: A + ttl: 3600 + values: + - 66.226.149.50 diff --git a/apps/base/bind-external/edge-unkin-net/kustomization.yaml b/apps/base/bind-external/edge-unkin-net/kustomization.yaml new file mode 100644 index 0000000..294f3aa --- /dev/null +++ b/apps/base/bind-external/edge-unkin-net/kustomization.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - a diff --git a/apps/base/bind-external/kustomization.yaml b/apps/base/bind-external/kustomization.yaml index 548c5ed..eeee39e 100644 --- a/apps/base/bind-external/kustomization.yaml +++ b/apps/base/bind-external/kustomization.yaml @@ -8,4 +8,6 @@ resources: - tsigkey.yaml - zones.yaml - acme-unkin-net + - main-unkin-net + - edge-unkin-net - agent-dns-rolebinding.yaml diff --git a/apps/base/bind-external/main-unkin-net/a/kustomization.yaml b/apps/base/bind-external/main-unkin-net/a/kustomization.yaml new file mode 100644 index 0000000..adb073a --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/a/kustomization.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - mail-in.yaml diff --git a/apps/base/bind-external/main-unkin-net/a/mail-in.yaml b/apps/base/bind-external/main-unkin-net/a/mail-in.yaml new file mode 100644 index 0000000..8e79a30 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/a/mail-in.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-mail-in-a + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "mail-in" + type: A + ttl: 3600 + values: + - 103.216.191.185 diff --git a/apps/base/bind-external/main-unkin-net/cname/acme-challenge.yaml b/apps/base/bind-external/main-unkin-net/cname/acme-challenge.yaml new file mode 100644 index 0000000..561bab2 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/acme-challenge.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-acme-challenge-cname + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "_acme-challenge" + type: CNAME + ttl: 3600 + values: + - _acme-challenge.main.acme.unkin.net. diff --git a/apps/base/bind-external/main-unkin-net/cname/au-syd1-pve-api.yaml b/apps/base/bind-external/main-unkin-net/cname/au-syd1-pve-api.yaml new file mode 100644 index 0000000..c412bab --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/au-syd1-pve-api.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-au-syd1-pve-api-cname + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "au-syd1-pve-api" + type: CNAME + ttl: 3600 + values: + - lb1.unkin.net. diff --git a/apps/base/bind-external/main-unkin-net/cname/au-syd1-pve.yaml b/apps/base/bind-external/main-unkin-net/cname/au-syd1-pve.yaml new file mode 100644 index 0000000..546c42f --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/au-syd1-pve.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-au-syd1-pve-cname + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "au-syd1-pve" + type: CNAME + ttl: 3600 + values: + - lb1.unkin.net. diff --git a/apps/base/bind-external/main-unkin-net/cname/grafana.yaml b/apps/base/bind-external/main-unkin-net/cname/grafana.yaml new file mode 100644 index 0000000..3754910 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/grafana.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-grafana-cname + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "grafana" + type: CNAME + ttl: 3600 + values: + - lb1.unkin.net. diff --git a/apps/base/bind-external/main-unkin-net/cname/kustomization.yaml b/apps/base/bind-external/main-unkin-net/cname/kustomization.yaml new file mode 100644 index 0000000..5ecbc19 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/kustomization.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - acme-challenge.yaml + - au-syd1-pve.yaml + - au-syd1-pve-api.yaml + - grafana.yaml + - lidarr.yaml + - nzbget.yaml + - prowlarr.yaml + - radarr.yaml + - readarr.yaml + - sonarr.yaml diff --git a/apps/base/bind-external/main-unkin-net/cname/lidarr.yaml b/apps/base/bind-external/main-unkin-net/cname/lidarr.yaml new file mode 100644 index 0000000..1e65e65 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/lidarr.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-lidarr-cname + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "lidarr" + type: CNAME + ttl: 3600 + values: + - lb1.unkin.net. diff --git a/apps/base/bind-external/main-unkin-net/cname/nzbget.yaml b/apps/base/bind-external/main-unkin-net/cname/nzbget.yaml new file mode 100644 index 0000000..240fda8 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/nzbget.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-nzbget-cname + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "nzbget" + type: CNAME + ttl: 3600 + values: + - lb1.unkin.net. diff --git a/apps/base/bind-external/main-unkin-net/cname/prowlarr.yaml b/apps/base/bind-external/main-unkin-net/cname/prowlarr.yaml new file mode 100644 index 0000000..04917c4 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/prowlarr.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-prowlarr-cname + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "prowlarr" + type: CNAME + ttl: 3600 + values: + - lb1.unkin.net. diff --git a/apps/base/bind-external/main-unkin-net/cname/radarr.yaml b/apps/base/bind-external/main-unkin-net/cname/radarr.yaml new file mode 100644 index 0000000..3a95088 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/radarr.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-radarr-cname + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "radarr" + type: CNAME + ttl: 3600 + values: + - lb1.unkin.net. diff --git a/apps/base/bind-external/main-unkin-net/cname/readarr.yaml b/apps/base/bind-external/main-unkin-net/cname/readarr.yaml new file mode 100644 index 0000000..daab818 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/readarr.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-readarr-cname + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "readarr" + type: CNAME + ttl: 3600 + values: + - lb1.unkin.net. diff --git a/apps/base/bind-external/main-unkin-net/cname/sonarr.yaml b/apps/base/bind-external/main-unkin-net/cname/sonarr.yaml new file mode 100644 index 0000000..95d6148 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/cname/sonarr.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-sonarr-cname + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "sonarr" + type: CNAME + ttl: 3600 + values: + - lb1.unkin.net. diff --git a/apps/base/bind-external/main-unkin-net/kustomization.yaml b/apps/base/bind-external/main-unkin-net/kustomization.yaml new file mode 100644 index 0000000..4f0a92c --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/kustomization.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - a + - mx + - txt + - cname diff --git a/apps/base/bind-external/main-unkin-net/mx/apex.yaml b/apps/base/bind-external/main-unkin-net/mx/apex.yaml new file mode 100644 index 0000000..5881f90 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/mx/apex.yaml @@ -0,0 +1,14 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-apex-mx + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "@" + type: MX + ttl: 3600 + values: + - "10 mta1.edge.unkin.net." + - "20 mta2.edge.unkin.net." diff --git a/apps/base/bind-external/main-unkin-net/mx/kustomization.yaml b/apps/base/bind-external/main-unkin-net/mx/kustomization.yaml new file mode 100644 index 0000000..7a02b57 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/mx/kustomization.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - apex.yaml diff --git a/apps/base/bind-external/main-unkin-net/txt/apex.yaml b/apps/base/bind-external/main-unkin-net/txt/apex.yaml new file mode 100644 index 0000000..4830ada --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/txt/apex.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-apex-txt + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "@" + type: TXT + ttl: 3600 + values: + - '"v=spf1 ip4:66.226.148.207 ip4:66.226.149.50 -all"' diff --git a/apps/base/bind-external/main-unkin-net/txt/dmarc.yaml b/apps/base/bind-external/main-unkin-net/txt/dmarc.yaml new file mode 100644 index 0000000..00a83d5 --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/txt/dmarc.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: DNSRecord +metadata: + name: main-dmarc-txt + namespace: bind-external +spec: + zoneRef: main-unkin-net + name: "_dmarc" + type: TXT + ttl: 3600 + values: + - '"v=DMARC1; p=none; rua=mailto:dmarc@unkin.net; adkim=r; aspf=r"' diff --git a/apps/base/bind-external/main-unkin-net/txt/kustomization.yaml b/apps/base/bind-external/main-unkin-net/txt/kustomization.yaml new file mode 100644 index 0000000..62aac2e --- /dev/null +++ b/apps/base/bind-external/main-unkin-net/txt/kustomization.yaml @@ -0,0 +1,7 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - apex.yaml + - dmarc.yaml diff --git a/apps/base/bind-external/zones.yaml b/apps/base/bind-external/zones.yaml index d252a60..2c63f08 100644 --- a/apps/base/bind-external/zones.yaml +++ b/apps/base/bind-external/zones.yaml @@ -28,3 +28,39 @@ spec: type: A ttl: 3600 values: ["103.216.191.185"] +--- +# Public mail zones, delegated from Google Cloud DNS to acme-ns1.unkin.net like +# acme.unkin.net. DNSRecords are applied with the zone's update key. +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: main-unkin-net + namespace: bind-external +spec: + clusterRef: bind-external + zoneName: main.unkin.net + type: primary + defaultTTL: 3600 + dynamicUpdate: true + updateKeyRef: certmanager + allowTransfer: + - key certmanager + nameservers: + - acme-ns1.unkin.net. +--- +apiVersion: bind.unkin.net/v1alpha1 +kind: BindZone +metadata: + name: edge-unkin-net + namespace: bind-external +spec: + clusterRef: bind-external + zoneName: edge.unkin.net + type: primary + defaultTTL: 3600 + dynamicUpdate: true + updateKeyRef: certmanager + allowTransfer: + - key certmanager + nameservers: + - acme-ns1.unkin.net.