infra/tofu/dns.tf
Graham McInitre d644868602 Migrate mcintire.me DNS from self-hosted BIND9 to Cloudflare
- Add mcintire.me zone + all 14 DNS records to tofu/cloudflare.tf (A, MX, CNAME, SRV, TXT)
- Include zone settings, HSTS, bot management, firewall for mcintire.me
- Update Porkbun NS from as393837_ns to cloudflare_ns in tofu/dns.tf
- Remove mcintire.me zone from BIND9 master config (group_vars/bind9_servers/)
- Delete mcintire.me.yml zone file
- Remove mcintire.me secondary zone from git.mcintire.me host_vars
2026-07-24 09:14:36 -05:00

52 lines
1.2 KiB
HCL

locals {
as393837_ns = [
"ns1.as393837.net",
"ns-global.kjsl.com",
"ns2.as393837.net",
]
cloudflare_ns = [
"arch.ns.cloudflare.com",
"tani.ns.cloudflare.com",
]
cloudflare_ns_w5isp = [
"dan.ns.cloudflare.com",
"eva.ns.cloudflare.com",
]
porkbun_ns = [
"maceio.ns.porkbun.com",
"salvador.ns.porkbun.com",
"fortaleza.ns.porkbun.com",
"curitiba.ns.porkbun.com",
]
domains = {
"ammocpr.com" = local.porkbun_ns
"aprs.me" = local.cloudflare_ns
"beanjar.org" = local.as393837_ns
"gridmap.org" = local.cloudflare_ns
"gunincrements.com" = local.porkbun_ns
"manero.org" = local.porkbun_ns
"mcintire.me" = local.cloudflare_ns
"ntxarms.com" = local.as393837_ns
"qth.social" = local.porkbun_ns
# towerops.net is not opted in to Porkbun API access
"vntx.org" = local.as393837_ns
"w5isp.com" = local.cloudflare_ns_w5isp
}
}
import {
for_each = local.domains
to = porkbun_nameservers.domains[each.key]
id = each.key
}
resource "porkbun_nameservers" "domains" {
for_each = local.domains
domain = each.key
nameservers = sort(each.value)
}