{ host_ipv4, config }:

{
  dnssec = true;

  mx = ["smtp.informis.land"];

  hosts = {
    procul = {
      ip-addresses = [ "172.86.179.18" ];
      ssh-fingerprints = [
        "4 1 2a8e086d3589ce50b58c55bc35638af8da23988e"
        "4 2 55a9f7c0addf08bb24c62ced954574db6e95eff38ee56d6a2cff312d20eb910e"
        "1 1 d089902f60751b3d35b5329bf7b906df254d5fa7"
        "1 2 8deebf42bbc40881a327f561bffd5d7bd328a4fc94d4e4ce8c502a9c6cbdfb92"
      ];
    };
  };

  default-host = "172.86.179.18";

  srv-records = {
    tcp = {
      domain = [{
        host = "ns1.informis.land";
        port = 53;
      }];
      ssh = [{
        host = "procul.informis.land";
        port = 22;
      }];
      submission = [{
        host = "procul.informis.land";
        port = 587;
      }];
      kerberos = [{
        host = "procul.informis.land";
        port = 88;
      }];
      kerberos-adm = [{
        host = "procul.informis.land";
        port = 749;
      }];
      imaps = [{
        host = "procul.informis.land";
        port = 993;
        priority = 0;
      }];
      pop3s = [{
        host = "procul.informis.land";
        port = 995;
        priority = 10;
      }];
      http = [{
        host = "procul.informis.land";
        port = 80;
      }];
      https = [{
        host = "procul.informis.land";
        port = 443;
      }];
    };

    udp = {
      domain = [{
        host = "ns1.informis.land";
        port = 53;
      }];
      kerberos = [{
        host = "procul.informis.land";
        port = 88;
      }];
      kerberos-master = [{
        host = "procul.informis.land";
        port = 88;
      }];
      kpasswd = [{
        host = "procul.informis.land";
        port = 464;
      }];
    };
  };

  aliases = {
    smtp   = "procul.informis.land.";
    imap   = "procul.informis.land.";
    gemini = "procul.informis.land.";
    git    = "procul.informis.land.";
  };

  extra-dns-records = [
    ''_kerberos IN TXT "INFORMIS.LAND"''
    ''@ IN TXT "v=spf1 mx ip4:${host_ipv4}/29 -all"''
    ''@ IN SPF "v=spf1 mx ip4:${host_ipv4}/29 -all"''
  ];

  dmarc-report-address = "dmarc-report@informis.land";
}