{ host_ipv4, config }:

{
  dnssec = true;

  mx = ["mail.fudo.org"];

  hosts = {
    forum = {
      ip-addresses = [ "208.81.3.117" ];
    };
  };

  default-host = "208.81.3.117";

  srv-records = {
    tcp = {
      domain = [{
        host = "ns1.fudo.org";
        port = "53";
      }];
      ssh = [{
        host = "france.fudo.org";
        port = 22;
      }];
      submission = [{
        host = "mail.fudo.org";
        port = 587;
      }];
      kerberos = [{
        host = "auth.fudo.org";
        port = 88;
      }];
      imaps = [{
        host = "mail.fudo.org";
        port = 993;
      }];
      pop3s = [{
        host = "mail.fudo.org";
        port = 995;
      }];
      http = [{
        host = "forum.selby.ca";
        port = 80;
      }];
      https = [{
        host = "forum.selby.ca";
        port = 80;
      }];
    };
    udp = {
      domain = [{
        host = "auth.fudo.org";
        port = 53;
      }];
      kerberos = [{
        host = "auth.fudo.org";
        port = 88;
      }];
    };
  };

  aliases = {
    pop     = "mail.fudo.org.";
    smtp    = "mail.fudo.org.";
    imap    = "mail.fudo.org.";
    mail    = "mail.fudo.org.";
    ns1     = "ns1.fudo.org.";
    ns2     = "ns2.fudo.org.";
    webmail = "france.fudo.org.";
    forum   = "frankfurt.fudo.org.";
  };

  extra-dns-records = [
    ''_kerberos IN TXT "FUDO.ORG"''
    ''@ IN TXT "v=spf1 mx ip4:${host_ipv4}/29 -all"''
    ''@ IN SPF "v=spf1 mx ip4:${host_ipv4}/29 -all"''
  ];

  dmarc-report-address = "dmarc-report@selby.ca";
}