about summary refs log tree commit diff
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2023-06-14T09·33+0300
committertazjin <tazjin@tvl.su>2023-06-14T10·06+0000
commitb3c9619f8cee8c5ae99fa99806165c26e5a3bfa3 (patch)
tree80659aa5db16480da3fc53ead4899768c2d1f872
parent5753e2393a5c32bbfa6ff23bbb8885070e3e6c30 (diff)
feat(corp/ops): configure DNS records for email handling r/6294
Change-Id: I19e41e559d475af78744c4623691578e8ead4327
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8769
Reviewed-by: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
-rw-r--r--corp/ops/yandex/rih.tf32
1 files changed, 30 insertions, 2 deletions
diff --git a/corp/ops/yandex/rih.tf b/corp/ops/yandex/rih.tf
index 3fd59895fb8c..104a61f86496 100644
--- a/corp/ops/yandex/rih.tf
+++ b/corp/ops/yandex/rih.tf
@@ -57,7 +57,35 @@ resource "yandex_dns_recordset" "acme_russiaishiring_com" {
   name    = yandex_cm_certificate.russiaishiring_com.challenges[0].dns_name
   type    = yandex_cm_certificate.russiaishiring_com.challenges[0].dns_type
   data    = [yandex_cm_certificate.russiaishiring_com.challenges[0].dns_value]
-  ttl     = 60
+  ttl     = 3600
+}
+
+resource "yandex_dns_recordset" "yandex_txt_russiaishiring_com" {
+  zone_id = yandex_dns_zone.russiaishiring_com.id
+  name    = "@"
+  type    = "TXT"
+  ttl     = 21600
+
+  data = [
+    "\"yandex-verification: b42768b04ab10b58\"",
+    "\"v=spf1 redirect=_spf.yandex.net\""
+  ]
+}
+
+resource "yandex_dns_recordset" "yandex_mx_russiaishiring_com" {
+  zone_id = yandex_dns_zone.russiaishiring_com.id
+  name    = "@"
+  type    = "MX"
+  data    = ["10 mx.yandex.net."]
+  ttl     = 21600
+}
+
+resource "yandex_dns_recordset" "yandex_dkim_russiaishiring_com" {
+  zone_id = yandex_dns_zone.russiaishiring_com.id
+  name    = "mail._domainkey"
+  type    = "TXT"
+  data    = ["\"v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgRfKnq+PZS3RFcHUnsKAvnBs2HCH5zSFjiZZ8/oyaC4va6I506/88HkZbME2xxfivpFmkKc6eBBpSzg6TVws0R3hAmb02u3qUQpX29+lEossq9j2fYvYBBZDf557ioxfQrE0+bIpsqV7+LXIsybq61+egbH+MKbxhda6fr4oPqwIDAQAB\""]
+  ttl     = 21600
 }
 
 resource "yandex_dns_recordset" "aname_russiaishiring_com" {
@@ -65,7 +93,7 @@ resource "yandex_dns_recordset" "aname_russiaishiring_com" {
   name    = "russiaishiring.com."
   type    = "ANAME"
   data    = ["russiaishiring.com.website.yandexcloud.net"]
-  ttl     = 600
+  ttl     = 3600
 }
 
 resource "yandex_container_registry" "rih_registry" {