1 files changed, 73 insertions, 0 deletions

diff --git a/hosts/surtr/dns/zones/consulting.kleen.soa b/hosts/surtr/dns/zones/consulting.kleen.soa
new file mode 100644
index 00000000..605924b4
--- /dev/null
+++ b/hosts/surtr/dns/zones/consulting.kleen.soa
@@ -0,0 +1,73 @@
+$ORIGIN kleen.consulting.
+$TTL 3600
+@ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
+  2022122701 ; serial
+  10800      ; refresh
+  3600       ; retry
+  604800     ; expire
+  3600       ; min TTL
+)
+
+                        IN      NS      ns.yggdrasil.li.
+                        IN      NS      ns.inwx.de.
+                        IN      NS      ns2.inwx.de.
+                        IN      NS      ns3.inwx.eu.
+
+@                       IN      CAA     128 issue "letsencrypt.org; validationmethods=dns-01"
+@                       IN      CAA     128 iodef "mailto:hostmaster@kleen.consulting"
+
+@                       IN      A       202.61.241.61
+@                       IN      AAAA    2a03:4000:52:ada::
+@                       IN      MX      0 mailin.kleen.consulting.
+@                       IN      TXT     "v=spf1 a:mailout.kleen.consulting -all"
+
+surtr._domainkey        IN      CNAME   surtr._domainkey.yggdrasil.li.
+_dmarc                  IN      TXT     "v=DMARC1;p=reject;sp=reject;pct=100;adkim=s;aspf=s;rua=mailto:postmaster@kleen.consulting;ruf=mailto:postmaster@kleen.consulting"
+
+_acme-challenge         IN      NS      ns.yggdrasil.li.
+
+*                       IN      A       202.61.241.61
+*                       IN      AAAA    2a03:4000:52:ada::
+*                       IN      MX      0 mailin.kleen.consulting.
+*                       IN      TXT     "v=spf1 redirect=kleen.consulting"
+
+mailout                 IN      A       202.61.241.61
+mailout                 IN      AAAA    2a03:4000:52:ada::
+mailout                 IN      MX      0 mailin.kleen.consulting.
+mailout                 IN      TXT     "v=spf1 redirect=kleen.consulting"
+
+mailin                  IN      A       202.61.241.61
+mailin                  IN      AAAA    2a03:4000:52:ada::
+mailin                  IN      MX      0 mailin.kleen.consulting.
+mailin                  IN      TXT     "v=spf1 redirect=kleen.consulting"
+_acme-challenge.mailin  IN      NS      ns.yggdrasil.li.
+
+; _25._tcp.mailin       IN      TLSA    2 1 1 276fe8a8c4ec7611565bf9fce6dcace9be320c1b5bea27596b2204071ed04f10
+; _25._tcp.mailin       IN      TLSA    2 1 1 bd936e72b212ef6f773102c6b77d38f94297322efc25396bc3279422e0c89270
+; _25._tcp.mailin       IN      TLSA    2 1 1 8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
+; _25._tcp.mailin       IN      TLSA    2 1 1 e5545e211347241891c554a03934cde9b749664a59d26d615fe58f77990f2d03
+
+mailsub                 IN      A       202.61.241.61
+mailsub                 IN      AAAA    2a03:4000:52:ada::
+mailsub                 IN      MX      0 mailin.kleen.consulting.
+mailsub                 IN      TXT     "v=spf1 redirect=kleen.consulting"
+_acme-challenge.mailsub IN      NS      ns.yggdrasil.li.
+
+_submissions._tcp       IN      SRV     5 0 465 mailsub.kleen.consulting.
+
+imap                    IN      A       202.61.241.61
+imap                    IN      AAAA    2a03:4000:52:ada::
+imap                    IN      MX      0 mailin.kleen.consulting.
+imap                    IN      TXT     "v=spf1 redirect=kleen.consulting"
+_acme-challenge.imap    IN      NS      ns.yggdrasil.li.
+
+_imaps._tcp             IN      SRV     5 0 993 imap.kleen.consulting.
+_sieve._tcp             IN      SRV     5 0 4190 imap.kleen.consulting.
+
+_mta-sts                IN      TXT     "v=STSv1; id=2022100600"
+_smtp._tls              IN      TXT     "v=TLSRPTv1; rua=mailto:postmaster@kleen.consulting"
+mta-sts                 IN      A       202.61.241.61
+mta-sts                 IN      AAAA    2a03:4000:52:ada::
+mta-sts                 IN      MX      0 mailin.kleen.consulting.
+mta-sts                 IN      TXT     "v=spf1 redirect=kleen.consulting"
+_acme-challenge.mta-sts IN      NS      ns.yggdrasil.li.