From d67c6292106260333057f5cfb6286f512492f1fd Mon Sep 17 00:00:00 2001 From: Sergei Poljanski Date: Fri, 13 Nov 2026 05:13:00 +0400 Subject: [PATCH] terraform: no public IPv6 for gf.asxp.io Grafana is WireGuard-only; WireGuard clients map the name to the ops WireGuard address. A public AAAA record made browsers prefer the public path, where the allowlist answers 403. Assisted-by: Claude:opus-5-5 --- terraform/dns.tf | 1 - 1 file changed, 1 deletion(-) diff --git a/terraform/dns.tf b/terraform/dns.tf index 800112a..506a638 100644 --- a/terraform/dns.tf +++ b/terraform/dns.tf @@ -74,7 +74,6 @@ locals { "fm2._domainkey/CNAME" = { records = ["fm2.asxp.io.dkim.fmhosted.com."] } "fm3._domainkey/CNAME" = { records = ["fm3.asxp.io.dkim.fmhosted.com."] } "gf/A" = { records = [local.ip.ops_v4] } - "gf/AAAA" = { records = [local.ip.ops_v6] } "git/CNAME" = { records = ["git.czsk.it."], ttl = 86400 } "mail/CNAME" = { records = ["mail.fastmail.com."] } "@/MX" = { records = ["10 in1-smtp.messagingengine.com.", "20 in2-smtp.messagingengine.com."] }