linderhof/playbooks/dns.yml

---
# Manage DNS zones on Hetzner Cloud
#
# Zone definitions live in $LINDERHOF_DIR/group_vars/all/dns.yml
# (generated from inventory/group_vars/all/dns.yml.setup by setup.sh).
#
# DKIM records are managed automatically by dkim_sync.yml — do not add manually.
#
# Usage: ansible-playbook playbooks/dns.yml
- name: Manage DNS zones on Hetzner Cloud
  hosts: localhost
  connection: local
  gather_facts: false

  roles:
    - role: dns
      tags: dns
initial commit Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-02-27 15:09:25 -07:00			`---`
			`# Manage DNS zones on Hetzner Cloud`
			`#`
			`# Zone definitions live in $LINDERHOF_DIR/group_vars/all/dns.yml`
			`# (generated from inventory/group_vars/all/dns.yml.setup by setup.sh).`
			`#`
Automate DKIM sync and add Hetzner resource labels - Add dkim_sync.yml: generates DKIM keys for all mail_domains, writes keys to stack config (group_vars/all/dkim.yml), and publishes mail._domainkey TXT records via dns.yml — replaces manual vault editing - Remove dkim_keys from vault.yml.setup (public keys don't need encryption) - Add hcloud_labels to config.yml.setup and apply to server + SSH key in provision role, enabling project-level tagging of Hetzner resources - Fix setup.sh next steps: add missing bootstrap step, replace manual DKIM instructions with dkim_sync.yml - Update CLAUDE.md and README.md accordingly Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-02-28 19:06:24 -07:00			`# DKIM records are managed automatically by dkim_sync.yml — do not add manually.`
initial commit Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-02-27 15:09:25 -07:00			`#`
			`# Usage: ansible-playbook playbooks/dns.yml`
			`- name: Manage DNS zones on Hetzner Cloud`
			`hosts: localhost`
			`connection: local`
			`gather_facts: false`

			`roles:`
			`- role: dns`
			`tags: dns`