infra/dns/dns.nix

{lib, ...}: {
  defaultTTL = 86400;
  zones = {
    "gmem.ca" =
      {
        "_minecraft._tcp.mc" = {
          srv.data = [
            {
              port = 25565;
              priority = 10;
              weight = 5;
              target = "mc-real.gmem.ca";
            }
          ];
        };
        "mc".cname = {
          ttl = 0;
          data = "e9195a3e-6f24-4cdb-be6d-237199d9a258.cfargotunnel.com";
        };

        "grafana".aaaa = {
          ttl = 0;
          data = ["2a01:4f8:c012:5ec6::1"];
        };
        "prometheus".cname = {
          ttl = 0;
          data = "grafana.gmem.ca";
        };
        "uptime".cname = {
          ttl = 0;
          data = "grafana.gmem.ca";
        };
        "healthchecks".cname = {
          ttl = 0;
          data = "grafana.gmem.ca";
        };
        "truenas".a.data = ["192.168.50.229"];
        "docs" = {
          a.data = ["100.116.48.47"];
          aaaa.data = ["fd7a:115c:a1e0:ab12:4843:cd96:6274:302f"];
        };
        "cluster" = {
          a = {
            ttl = 3600;
            data = ["100.87.208.14"];
          };
          aaaa = {
            ttl = 3600;
            data = ["fd7a:115c:a1e0::2001:d00e"];
          };
        };
        "newcluster" = {
          a = {
            ttl = 3600;
            data = ["100.87.208.14"];
          };
          aaaa = {
            ttl = 3600;
            data = ["fd7a:115c:a1e0::2001:d00e"];
          };
        };
        "homelab".a.data = ["192.168.50.45"];
        "_acme-challenge.router".txt.data = ["CJKnxKczldLEAy6zPkST0xeJ5Cy-xdT_ElzqMxhNh5E"];

        "osc-triggers".cname = {
          ttl = 0;
          data = "osc-triggers.pages.dev";
        };
        "mitu.camera".a.data = ["192.168.50.121"];

        "ns1" = {
          a = {
            ttl = 300;
            data = ["162.159.1.247"];
          };
          aaaa = {
            ttl = 300;
            data = ["2400:cb00:2049:1::a29f:1f7"];
          };
        };
        "ns2" = {
          a = {
            ttl = 300;
            data = ["162.159.2.232"];
          };
          aaaa = {
            ttl = 300;
            data = ["2400:cb00:2049:1::a29f:2e8"];
          };
        };
        "ns3" = {
          a = {
            ttl = 300;
            data = ["162.159.3.252"];
          };
          aaaa = {
            ttl = 300;
            data = ["2400:cb00:2049:1::a29f:3fc"];
          };
        };
        "ns4" = {
          a = {
            ttl = 300;
            data = ["162.159.5.243"];
          };
          aaaa = {
            ttl = 300;
            data = ["2400:cb00:2049:1::a29f:5f3"];
          };
        };

        "vancouver" = {
          a.data = ["100.116.48.47"];
          aaaa.data = ["fd7a:115c:a1e0:ab12:4843:cd96:6274:302f"];
        };
        "plex" = {
          cname.data = "vancouver.gmem.ca";
        };

        "" = {
          aaaa.data = ["100::"];
          aaaa.ttl = 0;
          mx.data = [
            {
              exchange = "in1-smtp.messagingengine.com";
              preference = 10;
            }
            {
              exchange = "in2-smtp.messagingengine.com";
              preference = 20;
            }
          ];
          txt.data = [
            "v=spf1 include:spf.messagingengine.com include:spf.mushu.services.floofy.tech -all"
            "google-site-verification=NrdjjQmhVjOj2s_CV8IdLkhAYCZ1tC3zrkIjn_-ny2o"
          ];
        };
        "postal-d6u33j._domainkey".txt.data = ["v=DKIM1; t=s; h=sha256; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCoSvi65zRk8yn0IySfXWyNzeQpz8DEg8ZnmR/Kqq+Ga890KoINkQHB0toQu/iURjmLo+2mYKMxkAMWZPEsKaNsBCLBB55NCvq3/jeJdjOKYLplc51KSdxSb3AGokGqwCDhQ8u+MJty/R3QOHbzndddQTnSG0ApDkJNiPdFVnXnewIDAQAB;"];
        "_discord".txt.data = ["dh=28112e71a152f2126fb224a14d80d5816ea5916e"];
        "_dmarc".txt.data = ["v=DMARC1;  p=reject; rua=mailto:f2c1db0a7b6041e593961a3057be4d49@dmarc-reports.cloudflare.net"];

        "fm1._domainkey".cname.data = "fm1.gmem.ca.dkim.fmhosted.com";
        "fm2._domainkey".cname.data = "fm2.gmem.ca.dkim.fmhosted.com";
        "fm3._domainkey".cname.data = "fm3.gmem.ca.dkim.fmhosted.com";

        "cdn".cname = {
          ttl = 0;
          data = "public.r2.dev";
        };
        "fursona".cname = {
          ttl = 0;
          data = "well-known-fursona.pages.dev";
        };
        "bgnet0".cname = {
          ttl = 0;
          data = "bgnet0.pages.dev";
        };

        "stream".a.data = ["141.147.109.157"];
      }
      // lib.attrsets.genAttrs [
        # Internally hosted applications
        "atuin"
        "pipedapi"
        "piped"
        "tools"
        "ytproxy"
        "irc"
        "hue"
        "home"
        "hb"
        "rss"
        "request-media"
        "ntfy"
        "metube"
        "search"
        "red"
        "secrets"
      ] (name: {cname.data = "cluster.gmem.ca";})
      // lib.attrsets.genAttrs [
        # Externally hosted applications with Tunnels
        "authentik"
        "photos"
        "pw"
        "nitter"
        "git"
        "ibiza"
        "photos"
        "proxmox"
        "tokyo"
        "ci"
        "paste"
        "e6"
        "minecraft-invites"
      ] (name: {
        cname = {
          ttl = 0;
          data = "a1544154-d851-44ee-8d3a-9fa245867745.cfargotunnel.com";
        };
      });
  };
}