nixos-config/fudo/fudo.org.nix

{ config, ... }:

{
  dnssec = true;

  mx = ["mail.fudo.org"];

  hosts = {
    cisco = {
      ip-addresses = [ "198.163.150.211" ];
      description = "\"allbran\" \"converge\"";
    };
    cisco-int = {
      ip-addresses = [ "10.73.77.10" ];
      description = "\"fruitloops\" \"aironet\"";
    };
    cupid = {
      ip-addresses = [ "208.38.36.100" ];
    };
    docker = {
      ip-addresses = [ "208.81.3.126" ];
    };
    france = {
      ip-addresses = [ "208.81.3.117" ];
      ssh-fingerprints = [
        "4 1 c95a198f504a589fc62893a95424b12f0b24732d"
        "4 2 3e7dad879d6cab7f7fb6769e156d7988d0c01281618d03b793834eea2f09bc96"
        "1 1 1b6d62dafae9ebc59169dfb4ef828582a5450d94"
        "1 2 079e7a57873542541095bf3d2f97b7350bb457d027b423a6fb56f7f6aa84ac80"
      ];
    };
    frankfurt = {
      ip-addresses = [ "208.81.3.120" ];
      ipv6-addresses = [ "2605:e200:d200:1:5054:ff:fe8c:9738" ];
      ssh-fingerprints = [
        "2 1 4b9e4ed16a6b3fe6d41ed0f5cdeed853cc101e12"
        "2 2 286ce32326874fe8aa15e3fd60b176b906ebd87306109f7c250d077db4ba85c5"
        "3 1 3531dfd2f240ce0cd548b748462f78451df3f081"
        "3 2 338809345ed38eb6808fd468067a74b2a8000fd8cc3bc016b9f977050bf1bba8"
        "1 1 fb9ba707daa78243f8a8801f024fe790516b99a7"
        "1 2 407f9692fedbd83449f0daf1cf795258b561a7e9c7e8072577cc84ffc0c84130"
      ];
    };
    germany = {
      ip-addresses = [ "208.81.3.116" ];
      ipv6-addresses = [ "2605:e200:d200:1:78d9:d8ff:fe0f:dd88" ];
      ssh-fingerprints = [
        "2 1 5609a728a91d7e52a6060ea7f3a7790005ba5e81"
        "2 2 520a8eb3b9013837ac3ab4b28254f96b7718f9613e751a20dc488bf7d967b485"
        "3 1 ee5b49888a36a34e7d4ee0d18626c82a16c2fcdf"
        "3 2 d5e44cf2d85032638d49c030a9ccbff6638198c354efcb11bf173017d1257f49"
        "1 1 9915d2515d7acdb38924d8829925113d5ce80b88"
        "1 2 a7c866306e9661b8b568b2de282367c84065301d6228e58e57e6c4d3d33e3051"
      ];
    };
    hanover = {
      ip-addresses = [ "208.81.1.130" ];
      ipv6-addresses = [ "2605:e200:d100:1:5054:ff:fe61:ac8b" ];
    };
    localhost = {
      ip-addresses = [ "127.0.0.1" ];
    };
    lsbb-gba = {
      ip-addresses = [ "199.101.56.34" ];
    };
    lsbb-abg = {
      ip-addresses = [ "199.101.56.38" ];
    };
    lsbb-hwd = {
      ip-addresses = [ "199.101.56.106" ];
    };
    lsbb-hcl = {
      ip-addresses = [ "199.101.56.110" ];
    };
    procul = {
      ip-addresses = [ "172.86.179.18" ];
    };
    prunel = {
      ip-addresses = [ "208.81.3.123" ];
    };
    mbix = {
      ip-addresses = [ "208.81.7.146" ];
    };
    ns3-fudo = {
      ip-addresses = [ "208.75.74.205" ];
    };
    ns3-dair = {
      ip-addresses = [ "208.75.74.205" ];
    };
    ns4-fudo = {
      ip-addresses = [ "208.75.75.157" ];
    };
    ns4-dair = {
      ip-addresses = [ "208.75.75.157" ];
    };
    paris = {
      ip-addresses = [ "208.81.3.125" ];
      ipv6-addresses = [ "2605:e200:d200:1:5054:ff:fe67:d0c1" ];
      ssh-fingerprints = [
        "2 1 9fe9e689a36316831ffafffc22c85913748670a6"
        "2 2 f2ce57bf470c907604b79b6ef031c928a64a81031e78892fd475bbcf65ae728b"
        "3 1 5c56e93a20868886ffe76e1fab012989ce8e995f"
        "3 2 af4f383cb349fc3b2496a0bf0911da3a09f98a6d4d2a3c81bb0fb23a45bde950"
        "4 1 71a1d35c32b4445b98ce339696f155e1d4c39bd5"
        "4 2 a9e4810a24bd52082c9bb2b1019a9de7d7983246fecb454dd8d918ac5a11af81"
        "1 1 18e8dd7cac48f1ac6103ec21c279e339d8690be1"
        "1 2 72e4aa05c733441da57c464e6540486f5306b6768d784dd97c666e16629d77a0"
      ];
    };
    probe = {
      ip-addresses = [ "208.81.3.119" ];
    };
    tours = {
      ip-addresses = [ "208.81.3.121" ];
      ipv6-addresses = [ "2605:e200:d200:1:5054:ff:fe95:34e5" ];
      ssh-fingerprints = [
        "2 2 41cddf1457880c7e86fa3838eabdbbe7cf803f98998ed406319ba3e43036964c"
        "3 1 89b72a740ef6ef7ad9aaf5fe2178d356cdc7ee5b"
        "3 2 c39346def56817aaf4c64db5667ccc6aeb400ff1166125fe630b63b5eab0ef29"
        "4 1 049b1e6ef1d338d35e97baf312d8a371a266b7d1"
        "4 2 1a889e43148ea1ded9f8bc60799ccf1bc32cb084946c8815abed6cc31f212594"
        "1 1 bae37560759ec8dba35755473fbb346f9dc4e333"
        "1 2 3d0d5efe2da329ea19b191f227c3aaad45271c651717ec3315cda131e992bbcf"
      ];
    };
  };

  default-host = "208.81.3.117";

  srv-records = {
    tcp = {
      domain = [
        {
          host = "ns1.fudo.org";
          port = 53;
        }
        {
          host = "ns2.fudo.org";
          port = 53;
        }
        {
          host = "ns3.fudo.org";
          port = 53;
        }
        {
          host = "ns4.fudo.org";
          port = 53;
        }
      ];
      ssh = [{
        host = "france.fudo.org";
        port = 22;
      }];
      smtp = [{
        host = "mail.fudo.org";
        port = 25;
      }];
      submission = [{
        host = "mail.fudo.org";
        port = 587;
      }];
      kerberos = [{
        host = "france.fudo.org";
        port = 88;
      }];
      imaps = [{
        host = "mail.fudo.org";
        port = 993;
      }];
      ldap = [{
        host = "france.fudo.org";
        port = 389;
      }];
      ldaps = [{
        host = "france.fudo.org";
        port = 636;
      }];
      pop3s = [{
        host = "mail.fudo.org";
        port = 995;
      }];
      http = [{
        host = "wiki.fudo.org";
        port = 80;
      }];
      https = [{
        host = "wiki.fudo.org";
        port = 80;
      }];
      xmpp-server = [{
        host = "fudo.im";
        port = 5269;
      }];
      xmpp-client = [{
        host = "fudo.im";
        port = 5222;
      }];
    };
    udp = {
      domain = [
        {
          host = "ns1.fudo.org";
          port = 53;
        }
        {
          host = "ns2.fudo.org";
          port = 53;
        }
        {
          host = "ns3.fudo.org";
          port = 53;
        }
        {
          host = "ns4.fudo.org";
          port = 53;
        }
      ];
      kerberos = [{
        host = "france.fudo.org";
        port = 88;
      }];
      kerberos-master = [{
        host = "france.fudo.org";
        port = 88;
      }];
      kpasswd = [{
        host = "france.fudo.org";
        port = 464;
      }];
      xmpp-server = [{
        host = "fudo.im";
        port = 5269;
      }];
    };
  };

  aliases = {
    pop     = "mail.fudo.org.";
    smtp    = "mail.fudo.org.";
    imap    = "mail.fudo.org.";
    webmail = "france.fudo.org.";

    archiva = "france.fudo.org.";
    auth    = "france.fudo.org.";
    backplane = "france.fudo.org.";
    chat    = "france.fudo.org.";
    de      = "germany.fudo.org.";
    fr      = "france.fudo.org.";
    git     = "france.fudo.org.";
    metrics = "france.fudo.org.";
    minecraft = "france.fudo.org.";
    monitor = "france.fudo.org.";
    user    = "paris.fudo.org.";
    u       = "user.fudo.org.";
    w       = "www.fudo.org.";
    ww      = "www.fudo.org.";
    www     = "hanover.fudo.org.";
    wiki    = "hanover.fudo.org.";
  };

  extra-dns-records = [
    ''_kerberos IN TXT "FUDO.ORG"''
    ''@ IN TXT "v=spf1 mx ip4:208.81.3.112/28 ip6:2605:e200:d200::1/48 -all"''
    ''@ IN SPF "v=spf1 mx ip4:208.81.3.112/28 ip6:2605:e200:d200::1/48 -all"''
  ];

  dmarc-report-address = "dmarc-report@fudo.org";
}