initial commit

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

playbooks/dns.yml

@@ -0,0 +1,23 @@
+---
+# Manage DNS zones on Hetzner Cloud
+#
+# Zone definitions live in $LINDERHOF_DIR/group_vars/all/dns.yml
+# (generated from inventory/group_vars/all/dns.yml.setup by setup.sh).
+#
+# To add DKIM keys after first mail deployment:
+#   docker exec mailserver cat /tmp/docker-mailserver/rspamd/dkim/<domain>/mail.pub
+# Then add to vault.yml:
+#   ansible-vault edit $LINDERHOF_DIR/group_vars/all/vault.yml
+#   dkim_keys:
+#     example.com: "v=DKIM1; k=rsa; p=..."
+# And uncomment the mail._domainkey record in dns.yml.
+#
+# Usage: ansible-playbook playbooks/dns.yml
+- name: Manage DNS zones on Hetzner Cloud
+  hosts: localhost
+  connection: local
+  gather_facts: false
+
+  roles:
+    - role: dns
+      tags: dns