main.tf 2.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596
  1. # Create the public zones
  2. # default SOA, NS records are created by default by this
  3. resource "aws_route53_zone" "public" {
  4. name = "defpoint.com"
  5. tags = merge(local.standard_tags, var.tags)
  6. }
  7. resource "aws_route53_record" "mx" {
  8. zone_id = aws_route53_zone.public.id
  9. name = "defpoint.com"
  10. type = "MX"
  11. ttl = "300"
  12. records = ["0 defpoint-com.mail.protection.outlook.com."]
  13. }
  14. resource "aws_route53_record" "spf" {
  15. zone_id = aws_route53_zone.public.id
  16. name = "defpoint.com"
  17. type = "TXT"
  18. ttl = "3600"
  19. records = ["v=spf1 include:spf.protection.outlook.com include:sharepointonline.com -all"]
  20. }
  21. resource "aws_route53_record" "dmarc" {
  22. zone_id = aws_route53_zone.public.id
  23. name = "_dmarc"
  24. type = "TXT"
  25. ttl = "3600"
  26. records = [
  27. "v=DMARC1; p=quarantine; sp=quarantine; pct=100; fo=1; ruf=mailto:DmarcRUF@defpoint.com; rua=mailto:DmarcRUA@defpoint.com,mailto:reports@dmarc.cyber.dhs.gov; aspf=s; adkim=s"
  28. ]
  29. }
  30. resource "aws_route53_record" "dkim-selector1" {
  31. zone_id = aws_route53_zone.public.id
  32. name = "selector1._domainkey"
  33. type = "CNAME"
  34. ttl = "3600"
  35. records = [
  36. "selector1-defpoint-com._domainkey.afs365.onmicrosoft.com."
  37. ]
  38. }
  39. resource "aws_route53_record" "dkim-selector2" {
  40. zone_id = aws_route53_zone.public.id
  41. name = "selector2._domainkey"
  42. type = "CNAME"
  43. ttl = "3600"
  44. records = [
  45. "selector2-defpoint-com._domainkey.afs365.onmicrosoft.com."
  46. ]
  47. }
  48. resource "aws_route53_record" "delegation-ai" {
  49. zone_id = aws_route53_zone.public.id
  50. name = "ai"
  51. type = "NS"
  52. ttl = "3600"
  53. records = [
  54. "ns-1462.awsdns-54.org.",
  55. "ns-2040.awsdns-63.co.uk.",
  56. "ns-240.awsdns-30.com.",
  57. "ns-891.awsdns-47.net."
  58. ]
  59. }
  60. resource "aws_route53_record" "delegation-mdr" {
  61. zone_id = aws_route53_zone.public.id
  62. name = "mdr"
  63. type = "NS"
  64. ttl = "3600"
  65. records = [
  66. "ns-1087.awsdns-07.org.",
  67. "ns-110.awsdns-13.com.",
  68. "ns-1673.awsdns-17.co.uk.",
  69. "ns-523.awsdns-01.net.",
  70. ]
  71. }
  72. resource "aws_route53_record" "delegation-mdr-test" {
  73. zone_id = aws_route53_zone.public.id
  74. name = "mdr-test"
  75. type = "NS"
  76. ttl = "3600"
  77. records = [
  78. "ns-1346.awsdns-40.org.",
  79. "ns-163.awsdns-20.com.",
  80. "ns-1823.awsdns-35.co.uk.",
  81. "ns-867.awsdns-44.net.",
  82. ]
  83. }