Merge pull request #471 from NixOS/dmarc_dkim

dns: add DKIM & DMARC entries for nixos.org
NixOS · Sep 4, 2024 · 8c44655 · 8c44655
2 parents 34de2c7 + f7dc6c8
commit 8c44655
Showing 1 changed file with 23 additions and 0 deletions.
diff --git a/terraform/dns.tf b/terraform/dns.tf
@@ -369,6 +369,29 @@ resource "netlify_dns_record" "nixos_MX2" {
   value    = "mx2.improvmx.com"
 }
 
+# additional records for improvmx for dkim & dmarc
+
+resource "netlify_dns_record" "nixos_DKIM1" {
+  zone_id  = local.zone_id
+  hostname = "dkimprovmx1._domainkey.nixos.org"
+  type     = "CNAME"
+  value    = "dkimprovmx1.improvmx.com"
+}
+
+resource "netlify_dns_record" "nixos_DKIM2" {
+  zone_id  = local.zone_id
+  hostname = "dkimprovmx2._domainkey.nixos.org"
+  type     = "CNAME"
+  value    = "dkimprovmx2.improvmx.com"
+}
+
+resource "netlify_dns_record" "nixos_DMARC" {
+  zone_id  = local.zone_id
+  hostname = "_dmarc.nixos.org"
+  type     = "TXT"
+  value    = "v=DMARC1; p=none;"
+}
+
 resource "netlify_dns_record" "nixos_google_verification" {
   zone_id  = local.zone_id
   hostname = "nixos.org"