$ORIGIN kleen.consulting.
$TTL 3600
@ IN SOA ns.yggdrasil.li. hostmaster.yggdrasil.li (
  2026031400 ; serial
  10800	     ; refresh
  3600	     ; retry
  604800     ; expire
  3600	     ; min TTL
)

			IN	NS	ns.yggdrasil.li.
			IN	NS	ns.inwx.de.
			IN	NS	ns2.inwx.de.
			IN	NS	ns3.inwx.eu.

@			IN	CAA	128 issue "letsencrypt.org; validationmethods=dns-01"
@			IN	CAA	128 iodef "mailto:hostmaster@kleen.consulting"

@			IN	A	202.61.241.61
@			IN	AAAA	2a03:4000:52:ada::
@			IN	MX	0 mailin.kleen.consulting.
@			IN	TXT	"v=spf1 a:mailout.kleen.consulting -all"

surtr._domainkey	IN	CNAME	surtr._domainkey.yggdrasil.li.
mail._domainkey         IN      TXT     ( "v=DKIM1; k=rsa; "
	"p=MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAye6l3utyz6pfRGsW9l49UjNCSkHSUYMAodLBFlHqPJ3VaBdxcsceEZ+J0NHZKWc+s8UYuV+ppXg/WD21RGr2KhxUKa4PZqB8h0YN7+XvwGAgQCIPnHOr73KImmxI5ZH9H1QsEcK3xeb+1VKR8dUXsPSG0UHne6wnsYCMhBJfFnjRnc+kGxiRl7fBPusxR3m9C0LgH17epXOOEGVo3"
	"bO6CmPjYbrMqjbRCk8dcfRSLSizEek4ojgLAqx5Hn59dqsl7fg9TNaEKTgg3QO8Yq3AoJYotV7nap+U/XruTv8w9LRmoS+jQJ0pqQ8UHWOeX8JEl7D5WOSLFVidSpYiYzhz8bSuNxqWIganr6uGX6UrnhYMfEpnAWwPcd6L1pu1MsIBJGKLwmhXVUsYSpPlFkL2OrxKPbiz1CmyWeThALyOsbvMatE/ojmj9TUoTuEdcunpOetfir7eyWK9Yx"
	"k+z6pSzH0jTO8JLIND8X8rdOpEeSPyMowAsZsbo9uXdcH6j2MUmh7nlqsCM3pjXIwwCnO4OxCQ3O89s/Xe/j1qLtdT3biDpAvoJehzO8UAy69aFTyjZESqTXQt/gUqPFm5prLWp8djWEUBAZxBZHxjwvDZdJ6VEDOZtKfjIHmxSzwtMrzLRm5BYurGYjYl+6sW1Ax5VZ4SENuWAZ2jKvRSmLdCWrMCAwEAAQ=="
)
_dmarc			IN	TXT	"v=DMARC1;p=reject;sp=reject;pct=100;adkim=s;aspf=s;rua=mailto:postmaster@kleen.consulting;ruf=mailto:postmaster@kleen.consulting"

_acme-challenge       	IN	NS	ns.yggdrasil.li.

*			IN	A	202.61.241.61
*			IN	AAAA	2a03:4000:52:ada::
*			IN	MX	0 mailin.kleen.consulting.
*			IN	TXT	"v=spf1 redirect=kleen.consulting"

mailout			IN	A	202.61.241.61
mailout			IN	AAAA	2a03:4000:52:ada::
mailout			IN	MX	0 mailin.kleen.consulting.
mailout			IN	TXT	"v=spf1 redirect=kleen.consulting"

mailin			IN	A	202.61.241.61
mailin			IN	AAAA	2a03:4000:52:ada::
mailin			IN	MX	0 mailin.kleen.consulting.
mailin			IN	TXT	"v=spf1 redirect=kleen.consulting"
_acme-challenge.mailin	IN	NS	ns.yggdrasil.li.

; _25._tcp.mailin	IN	TLSA	2 1 1 276fe8a8c4ec7611565bf9fce6dcace9be320c1b5bea27596b2204071ed04f10
; _25._tcp.mailin 	IN	TLSA	2 1 1 bd936e72b212ef6f773102c6b77d38f94297322efc25396bc3279422e0c89270
; _25._tcp.mailin 	IN	TLSA	2 1 1 8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
; _25._tcp.mailin 	IN	TLSA	2 1 1 e5545e211347241891c554a03934cde9b749664a59d26d615fe58f77990f2d03

mailsub			IN	A	202.61.241.61
mailsub			IN	AAAA	2a03:4000:52:ada::
mailsub			IN	MX	0 mailin.kleen.consulting.
mailsub			IN	TXT	"v=spf1 redirect=kleen.consulting"
_acme-challenge.mailsub	IN	NS	ns.yggdrasil.li.

_submissions._tcp	IN	SRV	5 0 465 mailsub.kleen.consulting.

imap			IN	A	202.61.241.61
imap			IN	AAAA	2a03:4000:52:ada::
imap			IN	MX	0 mailin.kleen.consulting.
imap			IN	TXT	"v=spf1 redirect=kleen.consulting"
_acme-challenge.imap	IN	NS	ns.yggdrasil.li.

_imaps._tcp		IN	SRV	5 0 993 imap.kleen.consulting.
_sieve._tcp		IN	SRV	5 0 4190 imap.kleen.consulting.

_mta-sts		IN	TXT	"v=STSv1; id=2022100600"
_smtp._tls		IN	TXT	"v=TLSRPTv1; rua=mailto:postmaster@kleen.consulting"
mta-sts			IN	A	202.61.241.61
mta-sts			IN	AAAA	2a03:4000:52:ada::
mta-sts			IN	MX	0 mailin.kleen.consulting.
mta-sts			IN	TXT	"v=spf1 redirect=kleen.consulting"
_acme-challenge.mta-sts	IN	NS	ns.yggdrasil.li.

mta-sts			IN	HTTPS	1 . alpn="h2,h3" ipv4hint="202.61.241.61" ipv6hint="2a03:4000:52:ada::"