From a948901e0f2d957b6758be2b4428fd0537197519 Mon Sep 17 00:00:00 2001 From: shockrah Date: Wed, 21 Feb 2024 23:19:28 -0800 Subject: [PATCH] Sample files --- infra/email-server/readme.md | 6 ++- infra/email-server/zone.file | 71 ++++++++++++++++++++++++++++++++++++ 2 files changed, 76 insertions(+), 1 deletion(-) create mode 100644 infra/email-server/zone.file diff --git a/infra/email-server/readme.md b/infra/email-server/readme.md index 3b3c4b9..ce3afc7 100644 --- a/infra/email-server/readme.md +++ b/infra/email-server/readme.md @@ -1,7 +1,11 @@ # Email server +BTW, all the infra for this has been taken down so there is basically no point +in not keeping this stuff around as a useful reference for "stuff" that is meant +to work. zone file would normally not be public but in this case it literally +does not matter since I will not be using any of this infrastructure so go nuts. + # Useful docs https://www.mailgun.com/blog/email/which-smtp-port-understanding-ports-25-465-587/#subchapter-3 - diff --git a/infra/email-server/zone.file b/infra/email-server/zone.file new file mode 100644 index 0000000..82f5b1d --- /dev/null +++ b/infra/email-server/zone.file @@ -0,0 +1,71 @@ + +$ORIGIN mail.shockrah.xyz. +$TTL 86400 ; default time to live + +@ IN SOA ns1.box.mail.shockrah.xyz. hostmaster.box.mail.shockrah.xyz. ( + 2023102001 ; serial number + 7200 ; Refresh (secondary nameserver update interval) + 3600 ; Retry (when refresh fails, how often to try again, should be lower than the refresh) + 1209600 ; Expire (when refresh fails, how long secondary nameserver will keep records around anyway) + 86400 ; Negative TTL (how long negative responses are cached) + ) + IN NS ns1.box.mail.shockrah.xyz. + IN NS ns2.box.mail.shockrah.xyz. + IN A 45.76.78.158 + IN AAAA 2001:19f0:6001:3fd1:5400:4ff:fe9e:2868 + IN MX 10 box.mail.shockrah.xyz. + IN TXT "v=spf1 mx -all" +_dmarc IN TXT "v=DMARC1; p=quarantine;" +mail._domainkey IN TXT "v=DKIM1; h=sha256; k=rsa; s=email; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocXCNmEamy8U5TuRefEz+SlsZSN77Bt3M3QV7xcsIBI2QyMJXt8S2vUla9oZEg6t3PNV90XY5wP2Ti9gkVHEcu1c5w076sTPxgWHAxAcEaVhdos470tHUJDYnBpPZr+TYptE9VF4ZZtE1DIFXrB9f5tobebi4jqlVo4WKFBBMTsQ1C" "l4gZIzodv7tI/J9C13+hUjZ16NdoIuUPKcdXK1JTAXtPUhbyBeQHAq7m7TfBRBvzCy8tVzXAfmVZh/C1uG2l6rPCwVtfCka319prEHe4zYCF6pCc8P3nKRDmbm71/re9OsQuI8nUAQBKJlZzz3mVPg/1m+gdgDuHpb1vrTOQIDAQAB" +_caldavs._tcp IN SRV 0 0 443 box.mail.shockrah.xyz. +_carddavs._tcp IN SRV 0 0 443 box.mail.shockrah.xyz. +autoconfig IN A 45.76.78.158 +autoconfig IN AAAA 2001:19f0:6001:3fd1:5400:4ff:fe9e:2868 +autoconfig IN TXT "v=spf1 -all" +autoconfig IN MX 0 . +_dmarc.autoconfig IN TXT "v=DMARC1; p=reject;" +autodiscover IN A 45.76.78.158 +autodiscover IN AAAA 2001:19f0:6001:3fd1:5400:4ff:fe9e:2868 +autodiscover IN TXT "v=spf1 -all" +autodiscover IN MX 0 . +_dmarc.autodiscover IN TXT "v=DMARC1; p=reject;" +box IN A 45.76.78.158 +box IN AAAA 2001:19f0:6001:3fd1:5400:4ff:fe9e:2868 +box IN SSHFP 3 2 ( 14D958752C2034C33032C2BA8BEC1D7B5C96648D832408B074099B2B4F1B656E ) +box IN SSHFP 4 2 ( 3185881C9A42D94E35DE764E10165A16963B8DD3ADAA089778519269F2A8179E ) +box IN SSHFP 1 2 ( 0334F94F1C22680E4ED198C04A803824B65E25697DD28E851C965BB79B672663 ) +box IN MX 10 box.mail.shockrah.xyz. +box IN TXT "v=spf1 mx -all" +_dmarc.box IN TXT "v=DMARC1; p=quarantine;" +mail._domainkey.box IN TXT "v=DKIM1; h=sha256; k=rsa; s=email; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocXCNmEamy8U5TuRefEz+SlsZSN77Bt3M3QV7xcsIBI2QyMJXt8S2vUla9oZEg6t3PNV90XY5wP2Ti9gkVHEcu1c5w076sTPxgWHAxAcEaVhdos470tHUJDYnBpPZr+TYptE9VF4ZZtE1DIFXrB9f5tobebi4jqlVo4WKFBBMTsQ1C" "l4gZIzodv7tI/J9C13+hUjZ16NdoIuUPKcdXK1JTAXtPUhbyBeQHAq7m7TfBRBvzCy8tVzXAfmVZh/C1uG2l6rPCwVtfCka319prEHe4zYCF6pCc8P3nKRDmbm71/re9OsQuI8nUAQBKJlZzz3mVPg/1m+gdgDuHpb1vrTOQIDAQAB" +_25._tcp.box IN TLSA 3 1 1 8250e30437dbad98f9ade0e031e9ae65de77eaedd6dc705172b0729f03707109 +_443._tcp.box IN TLSA 3 1 1 8250e30437dbad98f9ade0e031e9ae65de77eaedd6dc705172b0729f03707109 +mta-sts.box IN A 45.76.78.158 +mta-sts.box IN AAAA 2001:19f0:6001:3fd1:5400:4ff:fe9e:2868 +mta-sts.box IN TXT "v=spf1 -all" +mta-sts.box IN MX 0 . +_dmarc.mta-sts.box IN TXT "v=DMARC1; p=reject;" +ns1.box IN A 45.76.78.158 +ns1.box IN AAAA 2001:19f0:6001:3fd1:5400:4ff:fe9e:2868 +ns1.box IN TXT "v=spf1 -all" +ns1.box IN MX 0 . +_dmarc.ns1.box IN TXT "v=DMARC1; p=reject;" +ns2.box IN A 45.76.78.158 +ns2.box IN AAAA 2001:19f0:6001:3fd1:5400:4ff:fe9e:2868 +ns2.box IN TXT "v=spf1 -all" +ns2.box IN MX 0 . +_dmarc.ns2.box IN TXT "v=DMARC1; p=reject;" +mta-sts IN A 45.76.78.158 +mta-sts IN AAAA 2001:19f0:6001:3fd1:5400:4ff:fe9e:2868 +mta-sts IN TXT "v=spf1 -all" +mta-sts IN MX 0 . +_dmarc.mta-sts IN TXT "v=DMARC1; p=reject;" +www IN A 45.76.78.158 +www IN AAAA 2001:19f0:6001:3fd1:5400:4ff:fe9e:2868 +www IN TXT "v=spf1 -all" +www IN MX 0 . +_dmarc.www IN TXT "v=DMARC1; p=reject;" + +; DNSSEC signing keys hash: 262f881a0ef413e54df50b638397d3ac122c05ed + +