all repos — dns @ 6ccf1415e3741af21a32319af1db73ca424cd9b1

DNS records for my domains, managed via dnscontrol

add CAA records to all domains

Alin
commit

6ccf1415e3741af21a32319af1db73ca424cd9b1

parent

c728562588f205989921f2f9a47611c792996547

1 file changed, 47 insertions(+), 15 deletions(-)

changed files
M dnsconfig.js → dnsconfig.js
@@ -116,16 +116,6 @@ var nameservers = nsHosts.map(function (hostname) {
   return NAMESERVER(hostname)
 })
 
-var acmeLetsEncrypt = [
-  CAA_BUILDER({
-    iodef: 'mailto:alan@alanpearce.eu',
-    issue: ['letsencrypt.org'],
-    issuewild: ['letsencrypt.org'],
-    issuemail: ['none'],
-    issuevmc: ['none']
-  }),
-]
-
 var soa = SOA('@', 'ns3.vpsfree.cz.', 'hostmaster.alanpearce.eu.', 43200, 3600, 2419200, 120)
 
 // Providers:

@@ -148,7 +138,16 @@
   soa,
   nameservers,
 
-  // acmeLetsEncrypt,
+  CAA_BUILDER({
+    iodef: 'mailto:alan@alanpearce.eu',
+    issue: [
+      'actalis.it',
+      'letsencrypt.org', // fly/netlify
+    ],
+    issuewild: ['none'],
+    issuemail: ['none'],
+    issuevmc: ['none']
+  }),
   fly('@'),
   netlify('www'),
 

@@ -183,7 +182,16 @@
   soa,
   nameservers,
 
-  // acmeLetsEncrypt,
+  CAA_BUILDER({
+    iodef: 'mailto:alin@alin.ovh',
+    issue: [
+      'actalis.it',
+      'letsencrypt.org', // fly/netlify
+    ],
+    issuewild: ['none'],
+    issuemail: ['none'],
+    issuevmc: ['none']
+  }),
   fly('@', 'alin.ovh.l5o85r.flydns.net'),
   netlify('www'),
 

@@ -241,7 +249,16 @@ 'alanpearce.uk',
   RegistrarOVH,
   DnsProvider(PowerDNS),
 
-  // acmeLetsEncrypt,
+  CAA_BUILDER({
+    iodef: 'mailto:alan@alanpearce.eu',
+    issue: [
+      'actalis.it',
+      'letsencrypt.org', // netlify
+    ],
+    issuewild: ['none'],
+    issuemail: ['none'],
+    issuevmc: ['none']
+  }),
   IGNORE('_acme-challenge', 'TXT'),
   IGNORE('_acme-challenge.**', 'TXT'),
 

@@ -268,7 +285,16 @@ DnsProvider(PowerDNS),
   DefaultTTL(86400),
   NAMESERVER_TTL(86400),
 
-  // acmeLetsEncrypt,
+  CAA_BUILDER({
+    iodef: 'mailto:alan@alanpearce.eu',
+    issue: [
+      'actalis.it',
+      'letsencrypt.org' // netlify
+    ],
+    issuewild: ['none'],
+    issuemail: ['none'],
+    issuevmc: ['none']
+  }),
   IGNORE('_acme-challenge', 'TXT'),
   IGNORE('_acme-challenge.**', 'TXT'),
 

@@ -292,7 +318,13 @@ DnsProvider(PowerDNS),
   DefaultTTL(86400),
   NAMESERVER_TTL(86400),
 
-  // acmeLetsEncrypt,
+  CAA_BUILDER({
+    iodef: 'mailto:tls@alin.ovh',
+    issue: ['actalis.it'],
+    issuewild: ['none'],
+    issuemail: ['none'],
+    issuevmc: ['none']
+  }),
   IGNORE('_acme-challenge', 'TXT'),
   IGNORE('_acme-challenge.**', 'TXT'),