server-id none;
'';
zones = with myconfig.env.dns;
- assert (builtins.substring ((builtins.stringLength soa.email)-1) 1 soa.email) == ".";
- assert (builtins.substring ((builtins.stringLength soa.primary)-1) 1 soa.primary) == ".";
+ assert (builtins.substring ((builtins.stringLength soa.email)-1) 1 soa.email) != ".";
+ assert (builtins.substring ((builtins.stringLength soa.primary)-1) 1 soa.primary) != ".";
(map (conf: {
name = conf.name;
master = false;
else [];
file = pkgs.writeText "${conf.name}.zone" ''
$TTL 10800
- @ IN SOA ${soa.primary} ${soa.email} ${soa.serial} ${soa.refresh} ${soa.retry} ${soa.expire} ${soa.ttl}
+ @ IN SOA ${soa.primary}. ${builtins.replaceStrings ["@"] ["."] soa.email}. ${soa.serial} ${soa.refresh} ${soa.retry} ${soa.expire} ${soa.ttl}
${lib.concatStringsSep "\n" (map (x: "@ IN NS ${x}.") (lib.concatMap (n: lib.attrsets.mapAttrsToList (k: v: k) ns.${n}) conf.ns))}
''
; ------------------ mail: ${n} ---------------------------
${if e.receive then "${n} IN MX 10 mail.${conf.name}." else ""}
- ${if e.receive then "${n} IN MX 50 mx-1.${conf.name}." else ""}
+ ;${if e.receive then "${n} IN MX 50 mx-1.${conf.name}." else ""}
; Mail sender authentications
${n} IN TXT "v=spf1 mx ~all"
- _dmarc${suffix} IN TXT "v=DMARC1; p=quarantine; adkim=r; aspf=r; fo=1; rua=mailto:postmaster@immae.eu; ruf=mailto:postmaster@immae.eu;"
+ _dmarc${suffix} IN TXT "v=DMARC1; p=none; adkim=r; aspf=r; fo=1; rua=mailto:postmaster+rua@immae.eu; ruf=mailto:postmaster+ruf@immae.eu;"
${if e.send then ''
immae_eu._domainkey${suffix} IN TXT ( "v=DKIM1; k=rsa; s=email; "
"p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl3vLd8W5YAuumC5+ZT9OV7/14Pmh5JYtwyqKI3cfe9NnAqInt3xO4bZ7oqIxRKWN4SD39vm7O/QOvFdBt00ENOOzdP90s5gKw6eIP/4+vPTh0IWltAsmu9B2agzdtWUE7t2xFKIzEn8l9niRE2QYbVaqZv4sub98vY55fIgFoHtjkmNC7325S8fjDJGp6OPbyhAs6Xl5/adjF"