| 1 | D("nix.dev", |
| 2 | REG_NONE, |
| 3 | DnsProvider(DSP_GANDI), |
| 4 | |
| 5 | CAA_BUILDER({ |
| 6 | label: "@", |
| 7 | iodef: "mailto:infra+caa@nixos.org", |
| 8 | iodef_critical: true, |
| 9 | issue: ["letsencrypt.org"], |
| 10 | issue_critical: true, |
| 11 | issuewild: "none", |
| 12 | issuewild_critical: true, |
| 13 | }), |
| 14 | |
| 15 | // Domain is not used for mail |
| 16 | SPF_BUILDER({ |
| 17 | label: "@", |
| 18 | parts: [ |
| 19 | "v=spf1", |
| 20 | "-all" |
| 21 | ] |
| 22 | }), |
| 23 | TXT("*._domainkey", "v=DKIM1; p="), |
| 24 | DMARC_BUILDER({ |
| 25 | policy: "reject", |
| 26 | subdomainPolicy: "reject", |
| 27 | alignmentDKIM: "strict", |
| 28 | alignmentSPF: "strict" |
| 29 | }), |
| 30 | |
| 31 | TXT("@", "google-site-verification=J55RGHyOPKpHAyIHVfBy1RdY_LuVIvLyuyR8deO62YE"), |
| 32 | |
| 33 | ALIAS("@", "nix-dev.netlify.app."), |
| 34 | CNAME("www", "nix-dev.netlify.app.") |
| 35 | ); |
| 36 |