asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

terraform: no public IPv6 for gf.asxp.io

Browse source 
Grafana is WireGuard-only; WireGuard clients map the name to the ops
WireGuard address. A public AAAA record made browsers prefer the public
path, where the allowlist answers 403.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-13 05:13:00 +04:00
commit d67c629210
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
1 changed files with 0 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
terraform/dns.tf
View file

@ -74,7 +74,6 @@ locals {
"fm2._domainkey/CNAME" = { records = ["fm2.asxp.io.dkim.fmhosted.com."] } "fm2._domainkey/CNAME" = { records = ["fm2.asxp.io.dkim.fmhosted.com."] }
"fm3._domainkey/CNAME" = { records = ["fm3.asxp.io.dkim.fmhosted.com."] } "fm3._domainkey/CNAME" = { records = ["fm3.asxp.io.dkim.fmhosted.com."] }
"gf/A" = { records = [local.ip.ops_v4] } "gf/A" = { records = [local.ip.ops_v4] }
"gf/AAAA" = { records = [local.ip.ops_v6] }
"git/CNAME" = { records = ["git.czsk.it."], ttl = 86400 } "git/CNAME" = { records = ["git.czsk.it."], ttl = 86400 }
"mail/CNAME" = { records = ["mail.fastmail.com."] } "mail/CNAME" = { records = ["mail.fastmail.com."] }
"@/MX" = { records = ["10 in1-smtp.messagingengine.com.", "20 in2-smtp.messagingengine.com."] } "@/MX" = { records = ["10 in1-smtp.messagingengine.com.", "20 in2-smtp.messagingengine.com."] }