gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(tf): idp records

Browse source
This commit is contained in:
arcnmx 2024-03-13 11:09:10 -07:00
parent 2b1df931cb
commit 3495b5285e
1 changed files with 47 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

72
tf/cloudflare_idp_records.tf
View file

@ -1,64 +1,68 @@
locals {
idp_fqdn = "idp.${cloudflare_zone.gensokyo-zone_zone.zone}"
}
resource "cloudflare_record" "kerberos_master_tcp" { resource "cloudflare_record" "kerberos_master_tcp" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_kerberos-master._tcp" name = "@"
type = "SRV" type = "SRV"
ttl = 3600 ttl = 3600
data { data {
service = "_kerberos-master" service = "_kerberos-master"
proto = "_tcp" proto = "_tcp"
name = "gensokyo.zone" name = cloudflare_zone.gensokyo-zone_zone.zone
priority = 0 priority = 0
weight = 100 weight = 100
port = 88 port = 88
target = "idp.gensokyo.zone." target = local.idp_fqdn
} }
} }
resource "cloudflare_record" "kerberos_master_udp" { resource "cloudflare_record" "kerberos_master_udp" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_kerberos-master._udp" name = "@"
type = "SRV" type = "SRV"
ttl = 3600 ttl = 3600
data { data {
service = "_kerberos-master" service = "_kerberos-master"
proto = "_udp" proto = "_udp"
name = "gensokyo.zone" name = cloudflare_zone.gensokyo-zone_zone.zone
priority = 0 priority = 0
weight = 100 weight = 100
port = 88 port = 88
target = "idp.gensokyo.zone." target = local.idp_fqdn
} }
} }
resource "cloudflare_record" "kerberos_tcp" { resource "cloudflare_record" "kerberos_tcp" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_kerberos._tcp" name = "@"
type = "SRV" type = "SRV"
ttl = 3600 ttl = 3600
data { data {
service = "_kerberos" service = "_kerberos"
proto = "_tcp" proto = "_tcp"
name = "gensokyo.zone" name = cloudflare_zone.gensokyo-zone_zone.zone
priority = 0 priority = 0
weight = 100 weight = 100
port = 88 port = 88
target = "idp.gensokyo.zone." target = local.idp_fqdn
} }
} }
resource "cloudflare_record" "kerberos_udp" { resource "cloudflare_record" "kerberos_udp" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_kerberos._udp" name = "@"
type = "SRV" type = "SRV"
ttl = 3600 ttl = 3600
data { data {
service = "_kerberos" service = "_kerberos"
proto = "_udp" proto = "_udp"
name = "gensokyo.zone" name = cloudflare_zone.gensokyo-zone_zone.zone
priority = 0 priority = 0
weight = 100 weight = 100
port = 88 port = 88
target = "idp.gensokyo.zone." target = local.idp_fqdn
} }
} }
@ -74,7 +78,11 @@ resource "cloudflare_record" "kerberos_uri_tcp" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_kerberos" name = "_kerberos"
type = "URI" type = "URI"
value = "0 100 \"krb5srv:m:tcp:idp.gensokyo.zone.\"" priority = 0
data {
weight = 100
content = "krb5srv:m:tcp:${local.idp_fqdn}."
}
ttl = 3600 ttl = 3600
} }
@ -82,39 +90,43 @@ resource "cloudflare_record" "kerberos_uri_udp" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_kerberos" name = "_kerberos"
type = "URI" type = "URI"
value = "0 100 \"krb5srv:m:udp:idp.gensokyo.zone.\"" priority = 0
data {
weight = 100
content = "krb5srv:m:udp:${local.idp_fqdn}."
}
ttl = 3600 ttl = 3600
} }
resource "cloudflare_record" "kpasswd_tcp" { resource "cloudflare_record" "kpasswd_tcp" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_kpasswd._tcp" name = "@"
type = "SRV" type = "SRV"
ttl = 3600 ttl = 3600
data { data {
service = "_kpasswd" service = "_kpasswd"
proto = "_tcp" proto = "_tcp"
name = "gensokyo.zone" name = cloudflare_zone.gensokyo-zone_zone.zone
priority = 0 priority = 0
weight = 100 weight = 100
port = 464 port = 464
target = "idp.gensokyo.zone." target = local.idp_fqdn
} }
} }
resource "cloudflare_record" "kpasswd_udp" { resource "cloudflare_record" "kpasswd_udp" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_kpasswd._udp" name = "@"
type = "SRV" type = "SRV"
ttl = 3600 ttl = 3600
data { data {
service = "_kpasswd" service = "_kpasswd"
proto = "_udp" proto = "_udp"
name = "gensokyo.zone" name = cloudflare_zone.gensokyo-zone_zone.zone
priority = 0 priority = 0
weight = 100 weight = 100
port = 464 port = 464
target = "idp.gensokyo.zone." target = local.idp_fqdn
} }
} }
@ -122,7 +134,11 @@ resource "cloudflare_record" "kpasswd_uri_tcp" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_kpasswd" name = "_kpasswd"
type = "URI" type = "URI"
value = "0 100 \"krb5srv:m:tcp:idp.gensokyo.zone.\"" priority = 0
data {
weight = 100
content = "krb5srv:m:tcp:${local.idp_fqdn}."
}
ttl = 3600 ttl = 3600
} }
@ -130,23 +146,27 @@ resource "cloudflare_record" "kpasswd_uri_udp" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_kpasswd" name = "_kpasswd"
type = "URI" type = "URI"
value = "0 100 \"krb5srv:m:udp:idp.gensokyo.zone.\"" priority = 0
data {
weight = 100
content = "krb5srv:m:udp:${local.idp_fqdn}."
}
ttl = 3600 ttl = 3600
} }
resource "cloudflare_record" "ldap" { resource "cloudflare_record" "ldap" {
zone_id = cloudflare_zone.gensokyo-zone_zone.id zone_id = cloudflare_zone.gensokyo-zone_zone.id
name = "_ldap._tcp" name = "@"
type = "SRV" type = "SRV"
ttl = 3600 ttl = 3600
data { data {
service = "_ldap" service = "_ldap"
proto = "_tcp" proto = "_tcp"
name = "gensokyo.zone" name = cloudflare_zone.gensokyo-zone_zone.zone
priority = 0 priority = 0
weight = 100 weight = 100
port = 389 port = 389
target = "idp.gensokyo.zone." target = local.idp_fqdn
} }
} }
@ -155,5 +175,5 @@ resource "cloudflare_record" "idp-ca" {
name = "idp-ca" name = "idp-ca"
type = "CNAME" type = "CNAME"
ttl = 60 ttl = 60
value = "idp.gensokyo.zone." value = local.idp_fqdn
} }