# PowerDNS records for towerops.net
# SendGrid email authentication records

# SOA record for towerops.net
resource "powerdns_record" "towerops_soa" {
  depends_on = [powerdns_zone.towerops_net]
  zone       = "towerops.net."
  name       = "towerops.net."
  type       = "SOA"
  ttl        = 3600
  records    = ["ns1.as393837.net. graham.mcintire.me. 0 10800 3600 604800 3600"]
}

# Root A record
resource "powerdns_record" "towerops_root_a" {
  depends_on = [powerdns_zone.towerops_net]
  zone       = "towerops.net."
  name       = "towerops.net."
  type       = "A"
  ttl        = 3600
  records    = ["204.110.191.195"]
}

# SendGrid domain CNAME
resource "powerdns_record" "towerops_sendgrid_domain" {
  depends_on = [powerdns_zone.towerops_net]
  zone       = "towerops.net."
  name       = "em6505.towerops.net."
  type       = "CNAME"
  ttl        = 600
  records    = ["u177982.wl233.sendgrid.net."]
}

# SendGrid DKIM key 1
resource "powerdns_record" "towerops_sendgrid_dkim1" {
  depends_on = [powerdns_zone.towerops_net]
  zone       = "towerops.net."
  name       = "s1._domainkey.towerops.net."
  type       = "CNAME"
  ttl        = 600
  records    = ["s1.domainkey.u177982.wl233.sendgrid.net."]
}

# SendGrid DKIM key 2
resource "powerdns_record" "towerops_sendgrid_dkim2" {
  depends_on = [powerdns_zone.towerops_net]
  zone       = "towerops.net."
  name       = "s2._domainkey.towerops.net."
  type       = "CNAME"
  ttl        = 600
  records    = ["s2.domainkey.u177982.wl233.sendgrid.net."]
}

# DMARC policy
resource "powerdns_record" "towerops_dmarc" {
  depends_on = [powerdns_zone.towerops_net]
  zone       = "towerops.net."
  name       = "_dmarc.towerops.net."
  type       = "TXT"
  ttl        = 600
  records    = ["\"v=DMARC1; p=none;\""]
}