3b98076f59
According to https://sslmate.com/caa/about ; when the domain is a CNAME, it looks for these records on the target domain. Otherwise, we get bind errors about duplicate CNAME data, because a CNAME must be unique. Change-Id: Icdffe2e0b438e9e0f46fabb945902fd149759280
82 lines
3.2 KiB
Plaintext
82 lines
3.2 KiB
Plaintext
; -*- mode: zone -*-
|
|
$ORIGIN opendev.org.
|
|
$TTL 5m
|
|
@ IN SOA adns1.opendev.org. hostmaster.opendev.org. (
|
|
1558493991 ; serial number unixtime
|
|
1h ; refresh (secondary checks for updates)
|
|
10m ; retry (secondary retries failed axfr)
|
|
10d ; expire (secondary ends serving old data)
|
|
5m ) ; min ttl (cache time for failed lookups)
|
|
@ IN NS ns1.opendev.org.
|
|
@ IN NS ns2.opendev.org.
|
|
@ IN A 38.108.68.124
|
|
@ IN AAAA 2604:e100:3:0:f816:3eff:fe6b:ad62
|
|
adns1 IN A 104.239.146.24
|
|
adns1 IN AAAA 2001:4800:7819:104:be76:4eff:fe04:43d0
|
|
ns1 IN A 104.239.140.165
|
|
ns1 IN AAAA 2001:4800:7819:104:be76:4eff:fe04:38f0
|
|
ns2 IN A 162.253.55.16
|
|
ns2 IN AAAA 2604:e100:1:0:f816:3eff:fe2c:7447
|
|
|
|
; DNSSEC for subdomains
|
|
acme.opendev.org. IN DS 16051 8 2 8189707180357CFA2B5D7CFCB06401445CFB9FFA04B3DF7A494CBA712B416EF6
|
|
|
|
; Entries are alphabetical below here to reduce conflicts (note the serial
|
|
; will continue to conflict)
|
|
docs IN CNAME files.openstack.org.
|
|
gitea-lb01 IN A 38.108.68.124
|
|
gitea-lb01 IN AAAA 2604:e100:3:0:f816:3eff:fe6b:ad62
|
|
gitea01 IN A 38.108.68.93
|
|
gitea02 IN A 38.108.68.122
|
|
gitea03 IN A 38.108.68.133
|
|
gitea04 IN A 38.108.68.115
|
|
gitea05 IN A 38.108.68.55
|
|
gitea06 IN A 38.108.68.130
|
|
gitea07 IN A 38.108.68.86
|
|
gitea08 IN A 38.108.68.22
|
|
graphite01 IN A 162.209.77.51
|
|
graphite01 IN AAAA 2001:4800:7818:103:be76:4eff:fe04:763e
|
|
graphite IN CNAME graphite01
|
|
graphite01 IN CAA 0 issue "letsencrypt.org"
|
|
graphite01 IN CAA 0 iodef "mailto:infra-root@openstack.org"
|
|
insecure-ci-registry01 IN AAAA 2001:4800:7818:101:be76:4eff:fe04:67f5
|
|
insecure-ci-registry01 IN A 104.130.132.79
|
|
insecure-ci-registry IN CNAME insecure-ci-registry01
|
|
lists IN A 50.56.173.222
|
|
lists IN AAAA 2001:4800:780e:510:3bc3:d7f6:ff04:b736
|
|
opendev-k8s-1 IN A 38.108.68.70
|
|
opendev-k8s-2 IN A 38.108.68.90
|
|
opendev-k8s-3 IN A 38.108.68.72
|
|
opendev-k8s-4 IN A 38.108.68.125
|
|
opendev-k8s-master IN A 38.108.68.20
|
|
pbx IN CNAME pbx01
|
|
pbx01 IN A 104.239.146.91
|
|
pbx01 IN AAAA 2001:4800:7819:104:be76:4eff:fe04:b06f
|
|
review01 IN A 104.130.246.32
|
|
review01 IN AAAA 2001:4800:7819:103:be76:4eff:fe04:9229
|
|
review IN CNAME review01
|
|
storyboard01 IN A 162.209.77.101
|
|
storyboard01 IN AAAA 2001:4800:7818:103:be76:4eff:fe04:976a
|
|
storyboard-dev01 IN A 23.253.234.105
|
|
storyboard-dev01 IN AAAA 2001:4800:7817:103:be76:4eff:fe04:93f6
|
|
;www IN CNAME gitea-lb01 ; don't add this until we can redirect www to opendev.org
|
|
zuul IN CNAME zuul01.openstack.org.
|
|
zuul-preview IN A 174.143.130.226
|
|
zuul-preview IN AAAA 2001:4800:7819:104:be76:4eff:fe04:815a
|
|
*.zuul-preview IN CNAME zuul-preview
|
|
|
|
; letsencrypt challenge cname
|
|
_acme-challenge.graphite01 IN CNAME acme.opendev.org.
|
|
_acme-challenge.graphite IN CNAME acme.opendev.org.
|
|
_acme-challenge.review01 IN CNAME acme.opendev.org.
|
|
_acme-challenge.review IN CNAME acme.opendev.org.
|
|
|
|
; mirrors
|
|
mirror01.dfw.rax IN A 104.239.150.37
|
|
mirror01.dfw.rax IN AAAA 2001:4800:7819:105:be76:4eff:fe04:9b8a
|
|
mirror.dfw.rax IN CNAME mirror01.dfw.rax
|
|
_acme-challenge.mirror01.dfw.rax IN CNAME acme.opendev.org.
|
|
_acme-challenge.mirror.dfw.rax IN CNAME acme.opendev.org.
|
|
mirror01.dfw.rax IN CAA 0 issue "letsencrypt.org"
|
|
mirror01.dfw.rax IN CAA 0 iodef "mailto:infra-root@openstack.org"
|