asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

terraform: gf.asxp.io for Grafana

Browse source 
Same pattern as traefik.asxp.io: public records to asxpio-ops, so
Traefik gets a Let's Encrypt certificate over HTTP-01, while an IP
allowlist limits it to WireGuard.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-13 04:59:10 +04:00
commit 984ca66114
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
terraform/dns.tf
View file

@ -73,6 +73,8 @@ locals {
"fm1._domainkey/CNAME" = { records = ["fm1.asxp.io.dkim.fmhosted.com."] } "fm1._domainkey/CNAME" = { records = ["fm1.asxp.io.dkim.fmhosted.com."] }
"fm2._domainkey/CNAME" = { records = ["fm2.asxp.io.dkim.fmhosted.com."] } "fm2._domainkey/CNAME" = { records = ["fm2.asxp.io.dkim.fmhosted.com."] }
"fm3._domainkey/CNAME" = { records = ["fm3.asxp.io.dkim.fmhosted.com."] } "fm3._domainkey/CNAME" = { records = ["fm3.asxp.io.dkim.fmhosted.com."] }
"gf/A" = { records = [local.ip.ops_v4] }
"gf/AAAA" = { records = [local.ip.ops_v6] }
"git/CNAME" = { records = ["git.czsk.it."], ttl = 86400 } "git/CNAME" = { records = ["git.czsk.it."], ttl = 86400 }
"mail/CNAME" = { records = ["mail.fastmail.com."] } "mail/CNAME" = { records = ["mail.fastmail.com."] }
"@/MX" = { records = ["10 in1-smtp.messagingengine.com.", "20 in2-smtp.messagingengine.com."] } "@/MX" = { records = ["10 in1-smtp.messagingengine.com.", "20 in2-smtp.messagingengine.com."] }