From 984ca6611421954da5fec7370f9358639b5b40d9 Mon Sep 17 00:00:00 2001 From: Sergei Poljanski Date: Fri, 13 Nov 2026 04:59:10 +0400 Subject: [PATCH] terraform: gf.asxp.io for Grafana Same pattern as traefik.asxp.io: public records to asxpio-ops, so Traefik gets a Let's Encrypt certificate over HTTP-01, while an IP allowlist limits it to WireGuard. Assisted-by: Claude:opus-5-5 --- terraform/dns.tf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/terraform/dns.tf b/terraform/dns.tf index 1c145c3..800112a 100644 --- a/terraform/dns.tf +++ b/terraform/dns.tf @@ -73,6 +73,8 @@ locals { "fm1._domainkey/CNAME" = { records = ["fm1.asxp.io.dkim.fmhosted.com."] } "fm2._domainkey/CNAME" = { records = ["fm2.asxp.io.dkim.fmhosted.com."] } "fm3._domainkey/CNAME" = { records = ["fm3.asxp.io.dkim.fmhosted.com."] } + "gf/A" = { records = [local.ip.ops_v4] } + "gf/AAAA" = { records = [local.ip.ops_v6] } "git/CNAME" = { records = ["git.czsk.it."], ttl = 86400 } "mail/CNAME" = { records = ["mail.fastmail.com."] } "@/MX" = { records = ["10 in1-smtp.messagingengine.com.", "20 in2-smtp.messagingengine.com."] }