escape special characters

README.md

@@ -0,0 +1,8 @@
+# Central DNS management
+
+## Overview
+This repository contains the configuration for managing the DNS records for `moll.re` and other domains.
+
+It uses [octodns](https://github.com/octodns/octodns/) along with submodules for cloudflare and ddns.
+
+This configuration is applied through a cron job on the k8s cluster, configured under [https://git.kluster.moll.re/remoll/k3s-infra](https://git.kluster.moll.re/remoll/k3s-infra).

config/moll.re.yaml

@@ -1,14 +1,26 @@
 '':
   - type: ALIAS
     value: homepage.kluster.moll.re.
-  - exchange: inbound-smtp.skiff.com.
+  # mail forwarding by cloudflare set the auto-ttl to the same value as prescribed by cloudflare
-    preference: 0
+  - octodns:
+      cloudflare:
+        auto-ttl: true
     ttl: 300
     type: MX
-  - ttl: 300
-    type: TXT
     values:
-      - v=spf1 include:tlfind3ul99o2wi.spf.skiff.com -all
+      - exchange: route1.mx.cloudflare.net.
+        preference: 62
+      - exchange: route2.mx.cloudflare.net.
+        preference: 77
+      - exchange: route3.mx.cloudflare.net.
+        preference: 27
+  - octodns:
+      cloudflare:
+        auto-ttl: true
+    ttl: 300
+    type: TXT
+    value: v=spf1 include:_spf.mx.cloudflare.net ~all
+
 
 '*.kluster':
   ttl: 60
@@ -16,33 +28,45 @@
   value: kluster.moll.re.
 
 
-'_dmarc':
+# gitea SSH advertised on port 2222
+'_ssh._tcp':
+  type: SRV
+  values:
+    - port: 2222
+      priority: 0
+      target: git.kluster.moll.re.
+      weight: 500
+
+
+# cloudflare DKIM for cloudflare email routing
+'cf2024-1._domainkey':
+  octodns:
+    cloudflare:
+      auto-ttl: true
   ttl: 300
   type: TXT
-  values:
+  value: '"v=DKIM1\; h=sha256\; k=rsa\; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiweykoi+o48IOGuP7GR3X0MOExCUDY/BCRHoWBnh3rChl7WhdyCxW3jgq1daEjPPqoi7sJvdg5hEQVsgVRQP4DcnQDVjGMbASQtrY4WmB1VebF+RPJB2ECPsEDTpeiI5ZyUAwJaVX7r6bznU67g7LvFq35yIo4sdlmtZGV+i0H4cpYH9+3JJ78k" "m4KXwaf9xUJCWF6nxeD+qG6Fyruw1Qlbds2r85U9dkNDVAS3gioCvELryh1TxKGiVTkg4wqHTyHfWsp7KD3WQHYJn0RyfJJu6YEmL77zonn7p2SRMvTMP3ZEXibnC9gz3nnhR6wcYL8Q7zXypKTMD58bTixDSJwIDAQAB"'
-    - v=DMARC1\; p=reject\; pct=100\; adkim=s\; aspf=s
 
 
-'_ssh._tcp':
+# SMTP by smtp2go
-  port: 2222
+'em604688':
-  priority: 0
+  type: CNAME
-  target: git.kluster.moll.re.
+  value: return.smtp2go.net.
-  type: SRV
+
-  weight: 500
+
+# SMTP by smtp2go
+'link':
+  type: CNAME
+  value: track.smtp2go.net.
+
+
+# DKIM by smtp2go
+'s604688._domainkey':
+  type: CNAME
+  value: dkim.smtp2go.net.
+
 
 'short':
   ttl: 60
   type: CNAME
   value: shlink.kluster.moll.re.
-
-
-'skiff1._domainkey':
-  ttl: 300
-  type: CNAME
-  value: skiff1.tlfind3ul99o2wi.dkim.skiff.com.
-
-
-'skiff2._domainkey':
-  ttl: 300
-  type: CNAME
-  value: skiff2.tlfind3ul99o2wi.dkim.skiff.com.