aboutsummaryrefslogtreecommitdiff
path: root/servers/active/nixvps/infrastructure.tf
blob: 2721c56b22e7de1fcc3291d1100f38f26fc84e06 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
terraform {
  required_providers {
    vultr = {
      source  = "vultr/vultr"
      version = "~> 2.1.2"
    }
  }
  required_version = ">= 0.13"
}

# Input variables

variable "vultr_api_key" {
  type        = string
  description = "Vultr API key."
}

variable "vps_tld" {
  type        = string
  description = "Root Top-Level Domain. Subdomains will be derived from it."
}

variable "vps_hostname" {
  type        = string
  description = "Human name of the host. This is a pet name, not cattle name :)"
}

variable "vps_dkim_public_key" {
  type        = string
  description = "Public key for the DNS TXT DKIM record."
}

variable "vps_dkim_selector" {
  type        = string
  description = "The DKIM selector that prefixes the domain in the TXT record."
}

# Vultr

provider "vultr" {
  api_key = var.vultr_api_key
}

# Instance

resource "vultr_instance" "vps_server" {
  enable_ipv6      = true
  backups          = "enabled"
  hostname         = var.vps_hostname
  activation_email = true
  label            = var.vps_hostname
  region           = "cdg"
  plan             = "vc2-1c-1gb"
  # $ curl -H "Authorization: Bearer $TF_VAR_vultr_api_key" https://api.vultr.com/v2/snapshots  | jq
  snapshot_id = "8e6aaab6-7973-48a0-aeb5-cb99ab1ff43d"
}

output "vps_public_ipv4" {
  value = vultr_instance.vps_server.main_ip
}

output "vps_public_ipv6" {
  value = vultr_instance.vps_server.v6_main_ip
}

# DNS and IP configuration

locals {
  mail_domain = "mail.${var.vps_tld}"
}

resource "vultr_dns_domain" "vps_tld" {
  # The CNAME record is already generated by Vultr
  domain = var.vps_tld
  ip     = vultr_instance.vps_server.main_ip
}

resource "vultr_dns_record" "vps_mail_a_record" {
  domain = vultr_dns_domain.vps_tld.id
  name   = "mail"
  data   = vultr_instance.vps_server.main_ip
  type   = "A"
}

resource "vultr_reverse_ipv4" "vps_mail_reverse_ipv4" {
  instance_id = vultr_instance.vps_server.id
  ip          = vultr_instance.vps_server.main_ip
  reverse     = local.mail_domain
}

resource "vultr_dns_record" "vps_mail_aaaa_record" {
  domain = vultr_dns_domain.vps_tld.id
  name   = "mail"
  data   = vultr_instance.vps_server.v6_main_ip
  type   = "AAAA"
}

resource "vultr_reverse_ipv6" "vps_mail_reverse_ipv6" {
  instance_id = vultr_instance.vps_server.id
  ip          = vultr_instance.vps_server.v6_main_ip
  reverse     = local.mail_domain
}

resource "vultr_dns_record" "vps_mx_record" {
  domain = vultr_dns_domain.vps_tld.id
  name   = ""
  data   = local.mail_domain
  type   = "MX"
}

resource "vultr_dns_record" "vps_spf_txt" {
  domain = vultr_dns_domain.vps_tld.id
  name   = ""
  data   = "\"v=spf1 mx -all\""
  type   = "TXT"
}

resource "vultr_dns_record" "vps_dkim_txt" {
  domain = vultr_dns_domain.vps_tld.id
  name   = "${var.vps_dkim_selector}._domainkey"
  data   = "\"v=DKIM1;k=rsa;p=${var.vps_dkim_public_key}\""
  type   = "TXT"
}

resource "vultr_dns_record" "vps_dmarc_txt" {
  domain = vultr_dns_domain.vps_tld.id
  name   = "_dmarc"
  data   = "\"v=DMARC1;p=none;pct=100;rua=mailto:postmaster@${var.vps_tld};\""
  type   = "TXT"
}

# I think this DNS is configured by default

# resource "vultr_dns_record" "vps_cname_start_alias" {
#   domain = vultr_dns_domain.vps_tld.id
#   name   = "*"
#   data   = var.vps_tld
#   type   = "CNAME"
# }