@cryptotaxi247 / infra
Code Commits Issues Pulls Sessions CI/CD
main
main
js 76 lines 2.44 KB
Raw
1 D("nixcon.org",
2 REG_NONE,
3 DnsProvider(DSP_GANDI),
4
5 CAA_BUILDER({
6 label: "@",
7 iodef: "mailto:infra+caa@nixos.org",
8 iodef_critical: true,
9 issue: ["letsencrypt.org"],
10 issue_critical: true,
11 issuewild: "none",
12 issuewild_critical: true,
13 }),
14
15 MX("@", 10, "umbriel.nixos.org."),
16 SPF_BUILDER({
17 label: "@",
18 parts: [
19 "v=spf1",
20 "a:umbriel.nixos.org",
21 "-all"
22 ]
23 }),
24 // Matching private key in `non-critical-infra/secrets/nixcon.org.mail.key.umbriel`
25 TXT("mail._domainkey", "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1wQ2uPZfdlGmjDDxeNVet7IEFxS55TpWuqQWNKmd4fX8HcKKw7kVHXU5+gjT37wMUI27ZZnIobYhumnl+BLiXZqbuzAt7s3dbJU2de2ZWxOqcDRbK6m2A3AwIAiMzzRUjx14EWgnw55KRi2enpLyS0pKGdvSquHnxaySkAF8YIwIDAQAB"),
26 DKIM_BUILDER({
27 selector: "r202605",
28 keytype: "rsa",
29 pubkey: "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF4Z/6jTCOi1OcVduYoa9MMqW3XeV7vtZGAHDiHU2teCFiC4qZpJ4Ry7f0/gJw6WHh1zKc83AZTxsA82tBzfIUXrr1tGUh6DX8RmhKPzDtbaXZAmRYb9o0CAtIqzUFrVfz8oyCzHF13aaZGztgZBOOjCGECxcKd4KC+u0XAeRFfLc6zf4j6GQ4qTQ3aJoiIl0WUbbDl8VVGYjgd7SA/necpVXYf9LD/KNtumH4IS1oU1tGjsVrqPv9+Hbl4yi325ExMsbYK9sj4HhjcdtT4p9NlH/ZmaTTW3pEm1wZ8Fw+J3UVcB/Nxi1N1HFrdsnyoGhfMnz1z9Xtpdj/ANZtTTFwIDAQAB"
30 }),
31 DKIM_BUILDER({
32 selector: "e202605",
33 keytype: "ed25519",
34 pubkey: "SEawMqEG+q0WauDF9Noe3xSqVuBZqmEBgmStaxpNFHE="
35 }),
36 DMARC_BUILDER({
37 policy: "none",
38 }),
39
40 // Websites
41 TXT("_github-pages-challenge-nixcon", "6608e513e09036ab8cadb7ca4eb71b"),
42
43 // https://docs.github.com/en/pages/configuring-a-custom-domain-for-your-github-pages-site/managing-a-custom-domain-for-your-github-pages-site#configuring-an-apex-domain
44 A("@", "185.199.109.153"),
45 A("@", "185.199.111.153"),
46 AAAA("@", "2606:50c0:8001::153"),
47 AAAA("@", "2606:50c0:8003::153"),
48
49 CNAME("www", "nixcon.github.io."),
50
51 CNAME("2015", "nixcon.github.io."),
52 CNAME("2016", "nixcon.github.io."),
53 CNAME("2017", "nixcon.github.io."),
54 CNAME("2018", "nixcon.github.io."),
55 CNAME("2019", "nixcon.github.io."),
56 CNAME("2020", "nixcon.github.io."),
57 CNAME("2022", "nixcon.github.io."),
58 CNAME("2023", "nixcon.github.io."),
59 CNAME("2024-na", "nixcon.github.io."),
60 CNAME("2024", "nixcon.github.io."),
61 CNAME("2025", "nixcon.github.io."),
62 CNAME("2026", "nixcon.github.io."),
63
64 // Scheduling
65 CNAME("cfp", "pretalx.com."),
66 CNAME("talks", "pretalx.com."),
67
68 // Ticketing
69 CNAME("tickets", "nixcon.cname.pretix.eu."),
70
71 // 2025 ticket voucher eligibility check
72 CNAME("vouchers", "cache.ners.ch."),
73
74 // 2025 bee game
75 CNAME("bee", "cache.ners.ch.")
76 );