Skip to content

Latest commit

 

History

History
138 lines (120 loc) · 12.1 KB

README.md

File metadata and controls

138 lines (120 loc) · 12.1 KB
Raw

terraform-aws-r53-zone

TF Module for creating a R53 zone with DNSSEC, should be used in conjunction with lupus-metallum/dnssec-kms to create a key. This can be looped for unique keys per zone if desired. If a var.kms_key_arn is not specified, a zone with be created without DNSSEC.

Example

module "dnssec_key" {
  source   = "Lupus-Metallum/dnssec-kms/aws"
  version  = "1.0.4"
  
  name     = "my-dnssec-key"
}

module "r53_zone_example_net" {
  source  = "Lupus-Metallum/r53-zone/aws"
  version = "1.7.0"

  domain_name           = "example.net"
  dnssec                = true
  caa_record            = {
    aws          = true
    lets_encrypt = true
  }
  outlook_autodiscover  = true
  kms_key_arn           = module.dnssec_key.key_arn
  signing_key_name      = "ExampleDefaultKey"
  root_txt              = [
    "protonmail-verification=0000000000000000000000",
    "v=spf1 include:_spf.protonmail.ch -all",
    "stripe-verification=000000000000",
  ]
  root_mx               = [
    "10 mail.protonmail.ch.",
    "20 mailsec.protonmail.ch."
    ]
  dmarc_value           = ["v=DMARC1; p=quarantine; sp=quarantine; pct=100; rua=mailto:[email protected]"]
  protonmail_domainkey  = "protonmail.domainkey.00000000000000000000000000000000000000000000000000000.domains.proton.ch."
  protonmail2_domainkey = "protonmail2.domainkey.00000000000000000000000000000000000000000000000000000.domains.proton.ch."
  protonmail3_domainkey = "protonmail3.domainkey.00000000000000000000000000000000000000000000000000000.domains.proton.ch."
  ms_domainkey          = "selector1-0000000._domainkey.0000000.onmicrosoft.com"
  ms_domainkey2         = "selector2-0000000._domainkey.0000000.onmicrosoft.com"
  github_verification_record = "000000000000"
  github_org_name            = "Lupus-Metallum"
  stripe_domainkey1          = "000000000000"
  stripe_domainkey2          = "000000000000"
  stripe_domainkey3          = "000000000000"
  stripe_domainkey4          = "000000000000"
  stripe_domainkey5          = "000000000000"
  stripe_domainkey6          = "000000000000"
  stripe_bounce              = true
  atlassian_cloud_dkim       = true
}

Providers

Name Version
aws n/a

Resources

Name Type
aws_route53_hosted_zone_dnssec.this resource
aws_route53_key_signing_key.this resource
aws_route53_record.atlassian_cloud_bounce resource
aws_route53_record.atlassian_cloud_fallback_dkim resource
aws_route53_record.atlassian_cloud_primary_dkim resource
aws_route53_record.caa_this resource
aws_route53_record.dmarc_this resource
aws_route53_record.github_this resource
aws_route53_record.mx_this resource
aws_route53_record.o365_domainkey_this resource
aws_route53_record.o365_domainkey_this2 resource
aws_route53_record.outlook_autodiscover_this resource
aws_route53_record.protonmail2_domainkey_this resource
aws_route53_record.protonmail3_domainkey_this resource
aws_route53_record.protonmail_domainkey_this resource
aws_route53_record.stripe_bounce_this resource
aws_route53_record.stripe_domainkey1_this resource
aws_route53_record.stripe_domainkey2_this resource
aws_route53_record.stripe_domainkey3_this resource
aws_route53_record.stripe_domainkey4_this resource
aws_route53_record.stripe_domainkey5_this resource
aws_route53_record.stripe_domainkey6_this resource
aws_route53_record.this resource
aws_route53_record.txt_this resource
aws_route53_zone.this resource

Inputs

Name Description Type Default Required
domain_name The name/fqdn of the Route53 Zone. string n/a yes
atlassian_cloud_bounce Should we create the Atlassian Cloud bounce cname record bool false no
atlassian_cloud_fallback_dkim Should we create the Atlassian Cloud DKIM fallback cname record string "" no
atlassian_cloud_primary_dkim Should we create the Atlassian Cloud DKIM primary cname record string "" no
caa_record Should we add a Certificate Authority Authorization Record for commonly used CA's? 
object({
    aws          = optional(bool, false),
    lets_encrypt = optional(bool, false)
  })
 {} no
dmarc_value Values to put in the root/apex dmarc record of the zone? list(string) [] no
dnssec Should DNSSEC be enabled for this domain bool true no
github_org_name Name of the GitHub org to add the record for? string "" no
github_verification_record Value of the GitHub verification record? string "" no
kms_key_arn The arn of the KMS key to sign this zone with. string "" no
ms_domainkey Value to use for the first Microsoft 365 DKIM CNAME Record, this is given in the https://security.microsoft.com/dkimv2 setup page. string "" no
ms_domainkey2 Value to use for the second Microsoft 365 DKIM CNAME Record, this is given in the https://security.microsoft.com/dkimv2 setup page. string "" no
outlook_autodiscover Should we create the autodiscover CNAME record that points to autodiscover.outlook.com? bool false no
protonmail2_domainkey Value to use for the second Protonmail DKIM CNAME Record, this is given in the custom domain setup page. string "" no
protonmail3_domainkey Value to use for the third Protonmail DKIM CNAME Record, this is given in the custom domain setup page string "" no
protonmail_domainkey Value to use for the first Protonmail DKIM CNAME Record, this is given in the custom domain setup page. string "" no
root_mx Values to put in the root/apex MX record of the zone? list(string) [] no
root_txt Values to put in the root/apex TXT of the zone? list(string) [] no
signing_key_name The name to use for the DNSSEC signing key, must be alphanumeric only, no -, _, or spaces. string "DefaultSigningKey" no
stripe_bounce Should we create the Stripe boune cname record bool false no
stripe_domainkey1 Value to use for the first Stripe DKIM CNAME Record, this is given in the custom domain setup page. This should be the auto-generated text prior to '._domainkey.example.com' string "" no
stripe_domainkey2 Value to use for the second Stripe DKIM CNAME Record, this is given in the custom domain setup page. This should be the auto-generated text prior to '._domainkey.example.com' string "" no
stripe_domainkey3 Value to use for the third Stripe DKIM CNAME Record, this is given in the custom domain setup page. This should be the auto-generated text prior to '._domainkey.example.com' string "" no
stripe_domainkey4 Value to use for the fourth Stripe DKIM CNAME Record, this is given in the custom domain setup page. This should be the auto-generated text prior to '._domainkey.example.com' string "" no
stripe_domainkey5 Value to use for the fifth Stripe DKIM CNAME Record, this is given in the custom domain setup page. This should be the auto-generated text prior to '._domainkey.example.com' string "" no
stripe_domainkey6 Value to use for the sixth Stripe DKIM CNAME Record, this is given in the custom domain setup page. This should be the auto-generated text prior to '._domainkey.example.com' string "" no
tags Tags to apply to tag-able resources map(string) {} no
ttl The value to use in seconds for TTL of the DS records number 300 no

Outputs

Name Description
name n/a
name_servers n/a
zone_id n/a