Add proof of ownership for Fastly to openstreetmap.org

[dns.git] / src / openstreetmap.js

diff --git a/src/openstreetmap.js b/src/openstreetmap.js
index f28ca8dd50fbcca44abd4aa942d6e673f3eafa80..4b7ecbd77afdd19b5dc5bcf65dbc3dbbd180e7be 100644 (file)
--- a/src/openstreetmap.js
+++ b/src/openstreetmap.js
@@ -20,10 +20,17 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
   TXT("@", "v=spf1 ip4:212.110.172.32 ip6:2001:41c9:1:400::32 mx -all"),
   TXT("otrs", "v=spf1 ip4:212.110.172.32 ip6:2001:41c9:1:400::32 mx -all"),
 
+  // Publish DKIM public key
+
+  TXT("20200301._domainkey", "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvoNZVOGfw1V4A171hxHMhzVTAnIUQVJ8iX3wbqCld8A5iIaXeTGYvBmewymax/cYJS4QqzbpUzkgrrTA9avuZhd+QGJDgjADgx4VyMOaOS6FwAxS0uXtLrt+lsixRDx/feKyZHaxjzJAQy46ok77xXL4UXIaaovw6G6eZpIScMzZQ2zkKNJxTICzzSOduIilHhMWte4XP+/2PdRmD7Ge9jb0U4bZjswX0AqKSGzDKYw+yxVna9l53adeCnklqg2ofoXu+ResiH+kt05aCUOMo8en3em6yBnRCMalgi1E3Tt7I5BWcYFRkT/8agUGW4gGC6XMV9IskOsYL0emG0kGwIDAQAB"),
+
   // Announce MTA-STS policy and TLSRPT policy for error reports
 
   TXT("_mta-sts", "v=STSv1; id=202001291805Z"),
   TXT("_smtp._tls", "v=TLSRPTv1; rua=mailto:postmaster@openstreetmap.org"),
+  
+  // Fastly cert domain ownership confirmation
+  TXT("_globalsign-domain-verification", "ps00GlW1BzY9c2_cwH_pFqRkvzZyaCVZ-3RLssRG6S"),
 
   // Delegate MTA-STS policy for subdomains
 
@@ -38,12 +45,12 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
 
   // Delegate geo.openstreetmap.org to PowerDNS
 
+  NS("geo", QUALIFY("balerion")),
+  NS("geo", QUALIFY("chrysophylax")),
+  NS("geo", QUALIFY("katie")),
   NS("geo", QUALIFY("saphira")),
+  NS("geo", QUALIFY("stormfly-04")),
   NS("geo", QUALIFY("ridgeback")),
-  NS("geo", QUALIFY("jakelong")),
-  NS("geo", QUALIFY("katie")),
-  NS("geo", QUALIFY("stormfly-02")),
-  NS("geo", QUALIFY("chrysophylax")),
 
   // Main web servers and their aliases
 
@@ -147,17 +154,16 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
   // Nominatim servers
 
   A("pummelzacken", PUMMELZACKEN_IPV4),
-  // A("nominatim", PUMMELZACKEN_IPV4, TTL("10m")),
   A("pummelzacken.ucl", PUMMELZACKEN_INTERNAL),
   A("pummelzacken.oob", PUMMELZACKEN_OOB),
 
   A("dulcy", DULCY_IPV4),
   AAAA("dulcy", DULCY_IPV6),
-  A("nominatim", DULCY_IPV4, TTL("10m")),
-  AAAA("nominatim", DULCY_IPV6, TTL("10m")),
   A("dulcy.ams", DULCY_INTERNAL),
   A("dulcy.oob", DULCY_OOB),
 
+  CNAME("nominatim", "nominatim.geo.openstreetmap.org."),
+
   // Taginfo server
 
   A("grindtooth", GRINDTOOTH_IPV4),
@@ -198,10 +204,13 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
 
   A("bowser", BOWSER_IPV4),
 
-  CNAME("tile", QUALIFY("tile.geo")),
-  CNAME("a.tile", QUALIFY("tile.geo")),
-  CNAME("b.tile", QUALIFY("tile.geo")),
-  CNAME("c.tile", QUALIFY("tile.geo")),
+  A("albi", ALBI_IPV4),
+  AAAA("albi", ALBI_IPV6),
+
+  CNAME("tile", "tile.geo.openstreetmap.org."),
+  CNAME("a.tile", "tile.geo.openstreetmap.org."),
+  CNAME("b.tile", "tile.geo.openstreetmap.org."),
+  CNAME("c.tile", "tile.geo.openstreetmap.org."),
 
   // Services machine
 
@@ -227,6 +236,12 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
 
   // Database servers
 
+  A("snap-01.ams", SNAP01_INTERNAL),
+  A("snap-01.oob", SNAP01_OOB),
+
+  A("snap-02.ucl", SNAP02_INTERNAL),
+  A("snap-02.oob", SNAP02_OOB),
+
   A("karm.ams", KARM_INTERNAL),
   A("karm.oob", KARM_OOB),
 
@@ -449,6 +464,31 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
   A("fume", FUME_IPV4),
   A("balerion", BALERION_IPV4),
   A("naga", NAGA_IPV4),
+  AAAA("naga", NAGA_IPV6),
+  A("takhisis", TAKHISIS_IPV4),
+  AAAA("takhisis", TAKHISIS_IPV6),
+  A("gorwen", GORWEN_IPV4),
+  AAAA("gorwen", GORWEN_IPV6),
+  A("glaedr", GLAEDR_IPV4),
+  AAAA("glaedr", GLAEDR_IPV6),
+  A("neak", NEAK_IPV4),
+  A("meraxes", MERAXES_IPV4),
+  AAAA("meraxes", MERAXES_IPV6),
+  A("fuchur", FUCHUR_IPV4),
+  AAAA("fuchur", FUCHUR_IPV6),
+  A("idris", IDRIS_IPV4),
+  AAAA("idris", IDRIS_IPV6),
+  A("gackelchen", GACKELCHEN_IPV4),
+  AAAA("gackelchen", GACKELCHEN_IPV6),
+  A("kokosnuss", KOKOSNUSS_IPV4),
+  A("shruikan", SHRUIKAN_IPV4),
+  AAAA("shruikan", SHRUIKAN_IPV6),
+  A("falkor", FALKOR_IPV4),
+  AAAA("falkor", FALKOR_IPV6),
+  A("kilgharrah", KILGHARRAH_IPV4),
+  AAAA("kilgharrah", KILGHARRAH_IPV6),
+  A("lockheed", LOCKHEED_IPV4),
+  AAAA("lockheed", LOCKHEED_IPV6),
 
   // Blades
 
@@ -489,6 +529,16 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
   A("tiamat-23.ucl", TIAMAT23_INTERNAL),
   A("tiamat-23.oob", TIAMAT23_OOB),
 
+  // Spare
+
+  A("stormfly-03", STORMFLY03_IPV4),
+  AAAA("stormfly-03", STORMFLY03_IPV6),
+  A("stormfly-03.oob", STORMFLY03_OOB),
+
+  A("stormfly-04", STORMFLY04_IPV4),
+  AAAA("stormfly-04", STORMFLY04_IPV6),
+  A("stormfly-04.oob", STORMFLY04_OOB),
+
   // Donation site
 
   A("donate", RIDLEY_IPV4, TTL("10m")),