$TTL 300
-@ IN SOA ns root (
- 2019030602 ; Serial
+@ IN SOA ns1 root (
+ 2024021001 ; Serial
4h ; slave refresh
15m ; slave retry time in case of a problem
4w ; slave expiration time
300 ; maximum caching time in case of failed lookups (5 minutes)
)
- IN NS ns3.dehnerts.com.
- IN NS adehnert3.xvm.mit.edu.
+ IN NS ns1.dehnerts.com.
IN NS ns1.sipb.org.
- IN A 18.102.208.15
- IN MX 10 mail
- IN MX 20 adehnert3.xvm.mit.edu.
+ IN NS ns1.linode.com.
+ IN NS ns2.linode.com.
+ IN NS ns3.linode.com.
+ IN NS ns4.linode.com.
+ ; Same subnet as ns2, which mxtoolbox.com thinks is bad
+ ;IN NS ns5.linode.com.
+ IN A 18.18.208.22
+ IN MX 10 smtp
+; IN MX 20 adehnert3.xvm.mit.edu.
+; SPF
+ IN TXT "v=spf1 mx a ~all"
; dehnerts.com
- IN TXT google-site-verification=NK6zb3O9H3EqrXIJVHdjlFQnuxpwXJkxfFHxx-xjy9o
+ IN TXT "google-site-verification=NK6zb3O9H3EqrXIJVHdjlFQnuxpwXJkxfFHxx-xjy9o"
; dehnert.arctic.org
- IN TXT google-site-verification=GzfqMDDDCw8T-z12bboJsP7WYyvrjoA5oHs8XMfN_2s
+ IN TXT "google-site-verification=GzfqMDDDCw8T-z12bboJsP7WYyvrjoA5oHs8XMfN_2s"
+
+; Spam filtering
+olinda-202207._domainkey IN TXT ( "v=DKIM1; t=y; h=sha256; k=rsa; "
+ "p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY9SdH535aHo7xO2TdTTzvJJiGe5YRonZpoAJNJjNRmGuzYEr3CPeJ1wkVbAWIbYg4ZQXlWMaUpbS63UI1widngx+r5sUIBc1Ib/Vyg/XgSND5ZQ/QksNEFobnGafWh+0cd6GKcgBfFi2KZaYdGjsToD0Kosl7fZI4dOocG9yKdLP7PbwFN87cyKHC9y7/XvytphjomHxUDtRp"
+ "saKFHa5N5F1oASmW4gnnyNWHcmVpanknlTmiTHLrNPcTDhC0ODYAB5RFmeO49+fHBaK1q4ZE9jnSHraPm8lz0wba9XCaUs9CJ1MEh+SJNjE/td5p2m9LR0HxX6N6mC0zzN+VDPdwIDAQAB" ) ; ----- DKIM key olinda-202207 for localhost
+chankillo-202307._domainkey IN TXT ( "v=DKIM1; h=sha256; k=rsa; "
+ "p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJbpbveUiOmnI5h5Lc7w0OGZ5cVD8ODsp23MKtHDK5WmNel4+9K1zROEGBx60UaG09oIJqyy97QDZYXhmvOCtJlrXnqe5dOLmvHUJps6whw8iGygAvhBkkit9w0T9EcCAZS32g333B8MDJlKboNZiwBQxIBd6mXvoLvns+NFY083422XsWNq7BgTiNfzS0SZG5QJWpAbdYUZPh"
+ "aqokmQllHogRfPgrfmz68otJvnVGX6WzW+LDBI+a58BJleTd5NYKmbKkbvFvhT7n+Ynenjo6ksisFvQ4dHIcoyBlVFxFYPWHUvYSKCt7ysMrmTNOyvX2SEFqY6TlktNlo6ojJTcwIDAQAB" ) ; ----- DKIM key chankillo-202307 for localhost
+_dmarc IN TXT "v=DMARC1;p=none;sp=none;pct=100;rua=mailto:dmarcreports@dehnerts.com;"
+
; Servers
-angkor IN A 192.168.1.18
-*.angkor IN CNAME angkor
-copan IN A 66.92.29.156
-*.copan IN CNAME copan
-borobudur IN A 192.168.1.15
-borobudur IN MX 10 mail
-*.borobudur IN CNAME borobudur
-gwynedd IN A 192.168.1.16
-*.gwynedd IN CNAME gwynedd
-lushan IN CNAME lushan2.mit.edu.
-masada IN A 18.102.208.16
-olinda IN A 18.102.208.15
+lushan IN CNAME lushan2.mit.edu.
+lushan-monitor IN CNAME lushan-monitor.dynamic
+masada IN A 18.18.208.15
novgorod IN CNAME novgorod.mit.edu.
-soviet-russia IN A 76.119.235.30
+olinda IN A 18.18.208.12
+wieliczka IN CNAME wieliczka.mit.edu.
+virunga IN CNAME virunga.mit.edu.
+augsburg IN CNAME augsburg.mit.edu.
+augsburg-monitor IN CNAME augsburg-monitor.dynamic
+chankillo IN A 18.18.208.22
+_acme-challenge.chankillo IN CNAME _acme-challenge.chankillo.dynamic
+linode IN A 23.92.18.48
+
+; external IP for Duck Dacha(?)
+duck-dacha IN A 130.44.166.3
+; In-house systems
+xidi IN A 192.168.3.10
+homeassistant IN CNAME xidi
+pihole IN CNAME xidi
+unifi IN CNAME xidi
+_acme-challenge.adehnert-pi4 IN CNAME _acme-challenge.adehnert-pi4.dynamic
+_acme-challenge.xidi IN CNAME _acme-challenge.xidi.dynamic
+_acme-challenge.duck-dacha IN CNAME _acme-challenge.duck-dacha.dynamic
+_acme-challenge.homeassistant IN CNAME _acme-challenge.homeassistant.dynamic
+_acme-challenge.pihole IN CNAME _acme-challenge.pihole.dynamic
+_acme-challenge.unifi IN CNAME _acme-challenge.unifi.dynamic
+dd-printer IN CNAME dd-printer-wired
+dd-printer-wifi IN A 192.168.2.11
+dd-printer-wired IN A 192.168.2.15
+
+; In CA
tikal IN A 192.168.1.27
; Most services
-mail IN A 18.102.208.15
+mail IN A 18.18.208.22
+_acme-challenge.mail IN CNAME _acme-challenge.mail.dynamic
mail2 IN CNAME adehnert3.xvm.mit.edu.
-mail-pi IN CNAME soviet-russia
-imap IN CNAME olinda
-*.imap IN CNAME olinda
-smtp IN A 18.102.208.15
-ns IN A 18.102.208.15
-ns3 IN A 18.102.208.15
-www IN CNAME olinda
-rcs IN CNAME olinda
-svn IN CNAME olinda
-git IN CNAME olinda
+mail-pi IN CNAME duck-dacha
+imap IN CNAME chankillo
+_acme-challenge.imap IN CNAME _acme-challenge.imap.dynamic
+*.imap IN CNAME chankillo
+pop IN CNAME chankillo
+_acme-challenge.pop IN CNAME _acme-challenge.pop.dynamic
+*.pop IN CNAME chankillo
+smtp IN A 18.18.208.22
+_acme-challenge.smtp IN CNAME _acme-challenge.smtp.dynamic
+ns IN A 18.18.208.22
+ns1 IN A 18.18.208.22
+ns3 IN A 18.18.208.12
+www IN CNAME chankillo
+;rcs IN CNAME olinda
+;svn IN CNAME olinda
+git IN CNAME chankillo
ldap IN CNAME copan
-jabber IN CNAME olinda
-xmpp IN CNAME olinda
+;jabber IN CNAME olinda
+;xmpp IN CNAME olinda
kdc IN CNAME masada
-roost IN CNAME olinda
+;roost IN CNAME olinda
roost-api IN CNAME adehnert-roost-api.mit.edu.
+adehnert-roost-api IN CNAME adehnert-roost-api.mit.edu.
+_acme-challenge.roost-api IN CNAME _acme-challenge.roost-api.dynamic
+salt IN CNAME wieliczka
+vault IN CNAME virunga
-alex IN CNAME olinda
-linux IN CNAME olinda
-paly IN CNAME olinda
-voice IN CNAME olinda
-scouts IN CNAME olinda
-troop57 IN CNAME olinda
-mathcamp IN CNAME olinda
-mc IN CNAME olinda
-webapps IN CNAME olinda
-extern IN A 66.92.29.156
+alex IN CNAME chankillo
+webapps IN CNAME chankillo
+*.olinda-proxy IN CNAME olinda
+*.chankillo-proxy IN CNAME chankillo
-; GitLab
-gametex CNAME adehnert.gitlab.io.
-_gitlab-pages-verification-code.gametex TXT gitlab-pages-verification-code=400a28fb4c762f771658b8a089bbcfd7
+squaresdb IN CNAME squaresdb.chankillo-proxy
+_acme-challenge.squaresdb IN CNAME _acme-challenge.squaresdb.dynamic
+squaresdb-google IN CNAME tech-squares-photos.mit.edu.
+adehnert-test-b IN CNAME adehnert-test-b.mit.edu.
+_acme-challenge.adehnert-test-b IN CNAME _acme-challenge.adehnert-test-b.dynamic
+adehnert-test-c IN CNAME adehnert-test-c.mit.edu.
+_acme-challenge.adehnert-test-c IN CNAME _acme-challenge.adehnert-test-c.dynamic
+adehnert-test-d IN CNAME adehnert-test-d.mit.edu.
+_acme-challenge.adehnert-test-d IN CNAME _acme-challenge.adehnert-test-d.dynamic
-; Admin services
-monitoring IN CNAME borobudur
+; Zulip
+zulip IN CNAME chankillo
+_acme-challenge.zulip IN CNAME _acme-challenge.zulip.dynamic
+*.zulip IN CNAME chankillo
+_dmarc.zulip IN TXT "v=DMARC1; p=none;"
+; Direct SendGrid account
+em3230.zulip IN CNAME u22946278.wl029.sendgrid.net.
+;s1._domainkey.zulip IN CNAME s1.domainkey.u22946278.wl029.sendgrid.net.
+;s2._domainkey.zulip IN CNAME s2.domainkey.u22946278.wl029.sendgrid.net.
+; Google Cloud Platform SendGrid account
+em5815.zulip IN CNAME u41511699.wl200.sendgrid.net.
+s1._domainkey.zulip IN CNAME s1.domainkey.u41511699.wl200.sendgrid.net.
+s2._domainkey.zulip IN CNAME s2.domainkey.u41511699.wl200.sendgrid.net.
-; Local development services
-blog.dubrovnik IN CNAME dubrovnik-l.intern
-dubrovnik IN CNAME philacad.andover.edu
-dubrovnik-l IN CNAME philacad.andover.edu
-dubrovnik-l.intern IN A 192.168.1.17
+; GitLab
+gametex CNAME adehnert.gitlab.io.
+_gitlab-pages-verification-code.gametex TXT gitlab-pages-verification-code=400a28fb4c762f771658b8a089bbcfd7
+wind.squares CNAME tech-squares.gitlab.io.
+_gitlab-pages-verification-code.wind.squares TXT gitlab-pages-verification-code=be2402e968b6d7125f60994be82f2653
-; Bridge
-borobudur.intern-extern-bridge IN A 192.168.2.2
+dynamic IN NS ns1.dehnerts.com.
+about.dynamic IN TXT "static zone updates for dehnerts.com"
; Miscellaneous extra services
dns2tcp IN NS novgorod.mit.edu.
; SRV records
-_xmpp-client._tcp.jabber 3600 IN SRV 10 0 5222 jabber.dehnerts.com.
-_xmpp-client._tcp 3600 IN SRV 10 0 5222 jabber.dehnerts.com.
-_xmpp-server._tcp 3600 IN SRV 10 0 5269 jabber.dehnerts.com.
+;_xmpp-client._tcp.jabber 3600 IN SRV 10 0 5222 jabber.dehnerts.com.
+;_xmpp-client._tcp 3600 IN SRV 10 0 5222 jabber.dehnerts.com.
+;_xmpp-server._tcp 3600 IN SRV 10 0 5269 jabber.dehnerts.com.
_kerberos TXT "DEHNERTS.COM"
_kerberos._tcp SRV 0 0 88 kdc.dehnerts.com.
_kerberos-adm._tcp SRV 0 0 749 kdc.dehnerts.com.