Matthias Johnson
bd90a7e16f
- Add dkim_sync.yml: generates DKIM keys for all mail_domains, writes keys to stack config (group_vars/all/dkim.yml), and publishes mail._domainkey TXT records via dns.yml — replaces manual vault editing - Remove dkim_keys from vault.yml.setup (public keys don't need encryption) - Add hcloud_labels to config.yml.setup and apply to server + SSH key in provision role, enabling project-level tagging of Hetzner resources - Fix setup.sh next steps: add missing bootstrap step, replace manual DKIM instructions with dkim_sync.yml - Update CLAUDE.md and README.md accordingly Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
17 lines
454 B
YAML
17 lines
454 B
YAML
---
|
|
# Manage DNS zones on Hetzner Cloud
|
|
#
|
|
# Zone definitions live in $LINDERHOF_DIR/group_vars/all/dns.yml
|
|
# (generated from inventory/group_vars/all/dns.yml.setup by setup.sh).
|
|
#
|
|
# DKIM records are managed automatically by dkim_sync.yml — do not add manually.
|
|
#
|
|
# Usage: ansible-playbook playbooks/dns.yml
|
|
- name: Manage DNS zones on Hetzner Cloud
|
|
hosts: localhost
|
|
connection: local
|
|
gather_facts: false
|
|
|
|
roles:
|
|
- role: dns
|
|
tags: dns
|