serguzim/infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add CAA records

Browse source
This commit is contained in:
Tobias Reisinger 2026-04-01 20:30:35 +02:00
parent 0237271b65
commit 45238e045a
Signed by: serguzim
GPG key ID: 13AD60C237A28DFE
2 changed files with 46 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

44
devenv.lock
View file

@ -3,10 +3,10 @@
"devenv": { "devenv": {
"locked": { "locked": {
"dir": "src/modules", "dir": "src/modules",
"lastModified": 1757928168, "lastModified": 1774725838,
"owner": "cachix", "owner": "cachix",
"repo": "devenv", "repo": "devenv",
"rev": "d9019631e0e965b78f94a63246863fa7d8315d17", "rev": "488860aa6389de926c6f465f176e0ed83cbe8077",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -19,14 +19,14 @@
"flake-compat": { "flake-compat": {
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1747046372, "lastModified": 1767039857,
"owner": "edolstra", "owner": "NixOS",
"repo": "flake-compat", "repo": "flake-compat",
"rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885", "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
"type": "github" "type": "github"
}, },
"original": { "original": {
"owner": "edolstra", "owner": "NixOS",
"repo": "flake-compat", "repo": "flake-compat",
"type": "github" "type": "github"
} }
@ -40,10 +40,10 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1757953049, "lastModified": 1774104215,
"owner": "cachix", "owner": "cachix",
"repo": "git-hooks.nix", "repo": "git-hooks.nix",
"rev": "d1d8fe5cece10276fb7108e17c9a5efc07926ce5", "rev": "f799ae951fde0627157f40aec28dec27b22076d0",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -60,10 +60,10 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1709087332, "lastModified": 1762808025,
"owner": "hercules-ci", "owner": "hercules-ci",
"repo": "gitignore.nix", "repo": "gitignore.nix",
"rev": "637db329424fd7e46cf4185293b9cc8c88c95394", "rev": "cb5e3fdca1de58ccbc3ef53de65bd372b48f567c",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -73,11 +73,14 @@
} }
}, },
"nixpkgs": { "nixpkgs": {
"inputs": {
"nixpkgs-src": "nixpkgs-src"
},
"locked": { "locked": {
"lastModified": 1755783167, "lastModified": 1774287239,
"owner": "cachix", "owner": "cachix",
"repo": "devenv-nixpkgs", "repo": "devenv-nixpkgs",
"rev": "4a880fb247d24fbca57269af672e8f78935b0328", "rev": "fa7125ea7f1ae5430010a6e071f68375a39bd24c",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -87,6 +90,23 @@
"type": "github" "type": "github"
} }
}, },
"nixpkgs-src": {
"flake": false,
"locked": {
"lastModified": 1769922788,
"narHash": "sha256-H3AfG4ObMDTkTJYkd8cz1/RbY9LatN5Mk4UF48VuSXc=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "207d15f1a6603226e1e223dc79ac29c7846da32e",
"type": "github"
},
"original": {
"owner": "NixOS",
"ref": "nixpkgs-unstable",
"repo": "nixpkgs",
"type": "github"
}
},
"root": { "root": {
"inputs": { "inputs": {
"devenv": "devenv", "devenv": "devenv",

14
dnsconfig.js
View file

@ -37,6 +37,13 @@ D("msvg.cc", REG_OVH, DnsProvider(DSP_OVH),
D("msrg.cc", REG_OVH, DnsProvider(DSP_OVH), D("msrg.cc", REG_OVH, DnsProvider(DSP_OVH),
all_defaults("msrg.cc", true), all_defaults("msrg.cc", true),
CAA_BUILDER({
iodef: "mailto:tobias@msrg.cc",
issue: ["sectigo.com"],
issuewild: ["sectigo.com"],
//issuemail: ["dtrust.de"]
}),
acme_challenge(null, "11974523-79f9-4bd2-a776-33c26ded361f"), acme_challenge(null, "11974523-79f9-4bd2-a776-33c26ded361f"),
// Matrix // Matrix
@ -60,6 +67,13 @@ D("serguzim.me", REG_OVH, DnsProvider(DSP_OVH),
TLSA("_25._tcp.mail", 3, 1, 1, "70143145ab67680a3b61fe2d0eb63319625fa086f845cce59afdbf1dad79e561"), TLSA("_25._tcp.mail", 3, 1, 1, "70143145ab67680a3b61fe2d0eb63319625fa086f845cce59afdbf1dad79e561"),
CAA_BUILDER({
iodef: "mailto:tobias@msrg.cc",
issue: ["sectigo.com"],
issuewild: ["sectigo.com"],
//issuemail: ["dtrust.de"]
}),
acme_challenge("auth", "92924f7c-0859-4941-9e3d-2ecedfb21c1b"), acme_challenge("auth", "92924f7c-0859-4941-9e3d-2ecedfb21c1b"),
acme_challenge("db", "92924f7c-0859-4941-9e3d-2ecedfb21c1b"), acme_challenge("db", "92924f7c-0859-4941-9e3d-2ecedfb21c1b"),
acme_challenge("homeassistant", "596c4bd6-f111-43fd-a1ee-3a4e4cae8988"), acme_challenge("homeassistant", "596c4bd6-f111-43fd-a1ee-3a4e4cae8988"),