serguzim/infrastructure
Watch
1
0
Fork
You've already forked infrastructure
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update DANE/TLSA records and fix caddy VPN IPs

Browse source
This commit is contained in:
Tobias Reisinger 2026-07-16 20:53:14 +02:00
commit b6cb1cb698
Signed by: serguzim
GPG key ID: 13AD60C237A28DFE
3 changed files with 2 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
dns/default_records.js
View file

@ -7,8 +7,6 @@ function mx_default(no_send) {
TXT("_dmarc", "v=DMARC1; p=quarantine; rua=mailto:dmarcreports@serguzim.me; ruf=mailto:dmarcreports@serguzim.me; rf=afrf; sp=quarantine; fo=1; pct=100; ri=604800; adkim=r; aspf=r"), TXT("_dmarc", "v=DMARC1; p=quarantine; rua=mailto:dmarcreports@serguzim.me; ruf=mailto:dmarcreports@serguzim.me; rf=afrf; sp=quarantine; fo=1; pct=100; ri=604800; adkim=r; aspf=r"),
TXT("_smtp._tls", "v=TLSRPTv1; rua=mailto:dmarcreports@serguzim.me"), TXT("_smtp._tls", "v=TLSRPTv1; rua=mailto:dmarcreports@serguzim.me"),
TLSA("_25._tcp", 3, 1, 1, "70143145ab67680a3b61fe2d0eb63319625fa086f845cce59afdbf1dad79e561"),
MX("@", 10, "mail.serguzim.me."), MX("@", 10, "mail.serguzim.me."),
MX("*", 10, "mail.serguzim.me."), MX("*", 10, "mail.serguzim.me."),
]; ];

2
dnsconfig.js
View file

@ -65,7 +65,7 @@ D("msrg.cc", REG_OVH, DnsProvider(DSP_OVH),
D("serguzim.me", REG_OVH, DnsProvider(DSP_OVH), D("serguzim.me", REG_OVH, DnsProvider(DSP_OVH),
all_defaults("serguzim.me", true), all_defaults("serguzim.me", true),
TLSA("_25._tcp.mail", 3, 1, 1, "70143145ab67680a3b61fe2d0eb63319625fa086f845cce59afdbf1dad79e561"), TLSA("_25._tcp.mail", 3, 1, 1, "072bd3ae11b7fab334a4bb1b79aa65fe0e03e87310a256e20580ac64c163b8c5"),
CAA_BUILDER({ CAA_BUILDER({
iodef: "mailto:tobias@msrg.cc", iodef: "mailto:tobias@msrg.cc",

2
playbooks/roles/caddy/files/snippets
View file

@ -49,7 +49,7 @@
} }
(vpn_only) { (vpn_only) {
@denied not client_ip private_ranges @denied not client_ip private_ranges 100.64.0.0/10
handle @denied { handle @denied {
redir https://www.serguzim.me/ redir https://www.serguzim.me/
} }