search.gov.tf

resource "aws_route53_zone" "search_toplevel" {
  name = "search.gov"

  tags = {
    Project = "dns"
  }
}

resource "aws_route53_record" "search_gov_apex" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "search.gov."
  type    = "A"

  alias {
    name                   = "dcp2c9fh8vtdl.cloudfront.net."
    zone_id                = local.cloud_gov_cloudfront_zone_id
    evaluate_target_health = false
  }
}

resource "aws_route53_record" "search_gov_apex_aaaa" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "search.gov."
  type    = "AAAA"

  alias {
    name                   = "dcp2c9fh8vtdl.cloudfront.net."
    zone_id                = local.cloud_gov_cloudfront_zone_id
    evaluate_target_health = false
  }
}

# www.search.gov — redirects to search.gov through pages_redirect
resource "aws_route53_record" "search_gov_www" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "www.search.gov."
  type    = "A"

  alias {
    name                   = "dv0x4a4ilr842.cloudfront.net."
    zone_id                = local.cloud_gov_cloudfront_zone_id
    evaluate_target_health = false
  }
}

resource "aws_route53_record" "search_gov_www_aaaa" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "www.search.gov."
  type    = "AAAA"

  alias {
    name                   = "dv0x4a4ilr842.cloudfront.net."
    zone_id                = local.cloud_gov_cloudfront_zone_id
    evaluate_target_health = false
  }
}

# find.search.gov
resource "aws_route53_record" "search_gov_find" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "find.search.gov."
  type    = "CNAME"
  ttl     = 5
  records = ["search.usa.gov."]
}

# admin-center-downtime.search.gov
resource "aws_route53_record" "search_gov_downtime" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "admin-center-downtime.search.gov."
  type    = "A"
  records = ["34.238.89.30"]
  ttl     = "300"
}

# Email
resource "aws_route53_record" "search_gov_mx" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "search.gov."
  type    = "MX"
  ttl     = 300
  records = ["10 inbound-smtp.us-east-1.amazonaws.com."]
}

resource "aws_route53_record" "search_gov__amazonses_search_gov_txt" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "_amazonses.search.gov."
  type    = "TXT"
  ttl     = 300
  records = ["bhZh0ZXP7e8vJ1zeTFVBUn/n1rE5NHWBzOIgVG71swI="]
}

# Proof of ownership over the domain for DKIM
resource "aws_route53_record" "search_gov_ses_cname_1" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "xwqqkvd3oiguazj5xtri4l2quk2slsjr._domainkey.search.gov"
  type    = "CNAME"
  ttl     = 1800
  records = ["xwqqkvd3oiguazj5xtri4l2quk2slsjr.dkim.amazonses.com"]
}

resource "aws_route53_record" "search_gov_ses_cname_2" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "e6bt5rkriehhccrznsjdtdftttuzacn7._domainkey.search.gov"
  type    = "CNAME"
  ttl     = 1800
  records = ["e6bt5rkriehhccrznsjdtdftttuzacn7.dkim.amazonses.com"]
}

resource "aws_route53_record" "search_gov_ses_cname_3" {
  zone_id = aws_route53_zone.search_toplevel.zone_id
  name    = "476wutugvn6kvv42jtwtgaggzogsyvje._domainkey.search.gov"
  type    = "CNAME"
  ttl     = 1800
  records = ["476wutugvn6kvv42jtwtgaggzogsyvje.dkim.amazonses.com"]
}

module "search_gov__email_security" {
  source = "./email_security"

  zone_id     = aws_route53_zone.search_toplevel.zone_id
  txt_records = ["v=spf1 include:amazonses.com include:mail.zendesk.com include:_spf.google.com -all"]
}

output "search_ns" {
  value = aws_route53_zone.search_toplevel.name_servers
}