// Let google handle email
- MX("@", 1, "aspmx.l.google.com.", TTL("1h")),
- MX("@", 5, "alt1.aspmx.l.google.com.", TTL("1h")),
- MX("@", 5, "alt2.aspmx.l.google.com.", TTL("1h")),
- MX("@", 10, "alt3.aspmx.l.google.com.", TTL("1h")),
- MX("@", 10, "alt4.aspmx.l.google.com.", TTL("1h")),
+ MX("@", 1, "aspmx.l.google.com."),
+ MX("@", 5, "alt1.aspmx.l.google.com."),
+ MX("@", 5, "alt2.aspmx.l.google.com."),
+ MX("@", 10, "alt3.aspmx.l.google.com."),
+ MX("@", 10, "alt4.aspmx.l.google.com."),
// Handle mail for the join subdomain ourselves
"ip6:2001:41c9:1:400::32", // shenron ipv6
"ip4:184.104.226.98", // fafnir ipv4
"ip6:2001:470:1:b3b::2", // fafnir ipv6
+ "ip4:193.60.236.0/24", // ucl external
+ "ip4:184.104.179.128/27", // amsterdam external
+ "ip6:2001:470:1:fa1::/64", // amsterdam external
+ "ip4:184.104.226.96/27", // dublin external
+ "ip6:2001:470:1:b3b::/64", // dublin external
"-all"
]
}),
"v=spf1",
"ip4:184.104.226.98", // fafnir ipv4
"ip6:2001:470:1:b3b::2", // fafnir ipv6
+ "ip4:193.60.236.0/24", // ucl external
+ "ip4:184.104.179.128/27", // amsterdam external
+ "ip6:2001:470:1:fa1::/64", // amsterdam external
+ "ip4:184.104.226.96/27", // dublin external
+ "ip6:2001:470:1:b3b::/64", // dublin external
"-all"
]
}),
- SPF_BUILDER({
- label: "board",
- parts: [
- "v=spf1",
- "ip4:184.104.226.98", // fafnir ipv4
- "ip6:2001:470:1:b3b::2", // fafnir ipv6
- "-all"
- ]
- }),
+ // Apple Business Manager verification
+ TXT("@", "apple-domain-verification=ZzBG2msRtUDehTMW"),
- SPF_BUILDER({
- label: "dwg",
- parts: [
- "v=spf1",
- "ip4:184.104.226.98", // fafnir ipv4
- "ip6:2001:470:1:b3b::2", // fafnir ipv6
- "-all"
- ]
- }),
+ // Publish DMARC report-only policy
- SPF_BUILDER({
- label: "mwg",
- parts: [
- "v=spf1",
- "ip4:184.104.226.98", // fafnir ipv4
- "ip6:2001:470:1:b3b::2", // fafnir ipv6
- "-all"
- ]
+ DMARC_BUILDER({
+ policy: "none",
+ rua: [
+ "mailto:openstreetmap-d@dmarc.report-uri.com"
+ ],
+ failureOptions: 1
}),
- // Apple Business Manager verification
- TXT("@", "apple-domain-verification=ZzBG2msRtUDehTMW"),
-
// DKIM keys
TXT("google._domainkey", "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCJmTBAkYRCocCCNtVsdRNMlQel8kNfjPYJpjEm7woEgZh9yZeDzxImtz+u73oUF4+7bXzrNYbP946WNQIwAba1J69he8L1qfPBJLd3Z/fgmuaGdWcxpDno2EY4cQ8PrzvI6Vfm+6YAFANl8w09CIg41ykdlzH4iUJXD35k3SIl3wIDAQAB"),
A("operations", NAGA_IPV4),
AAAA("operations", NAGA_IPV6),
+ // Temporary join development staging server
+ A("join-staging", DRIBBLE_IPV4),
+ AAAA("join-staging", DRIBBLE_IPV6),
+
// Nextcloud instance
CNAME("files", "nextcloud-openstreetmapfoundation.cloud68.systems."),