prole/infrastructure/inventory/group_vars/all/dns.yml

---
prole_domain: prole.org

# Source of truth imported from name.com export (A/CNAME/MX/TXT)
# Notes:
# - "name: '@'" means the zone apex (prole.org)
# - no IPv6 records included (per request)
prole_dns_records:
  - name: aventage
    type: A
    value: 10.0.0.206
    ttl: 300

  - name: book.svc
    type: A
    value: 185.158.133.1
    ttl: 300

  - name: fairyland
    type: A
    value: 10.0.0.208
    ttl: 300

  - name: k8s
    type: CNAME
    value: zinfandel.prole.org
    ttl: 300

  - name: loghost
    type: A
    value: 10.0.0.3
    ttl: 300

  - name: mc
    type: A
    value: 73.15.20.166
    ttl: 300

  - name: merlin
    type: A
    value: 10.0.0.6
    ttl: 300

  - name: morana
    type: A
    value: 10.0.0.66
    ttl: 300

  - name: morgoth
    type: A
    value: 10.0.0.204
    ttl: 300

  - name: myrddin
    type: A
    value: 10.0.0.3
    ttl: 300

  - name: ollama
    type: A
    value: 73.15.20.166
    ttl: 300

  - name: pi
    type: A
    value: 10.0.0.5
    ttl: 300

  - name: "@"
    type: MX
    value: alt1.aspmx.l.google.com
    ttl: 3600
    priority: 5

  - name: "@"
    type: MX
    value: alt2.aspmx.l.google.com
    ttl: 3600
    priority: 5

  - name: "@"
    type: MX
    value: alt3.aspmx.l.google.com
    ttl: 3600
    priority: 10

  - name: "@"
    type: MX
    value: alt4.aspmx.l.google.com
    ttl: 3600
    priority: 10

  - name: "@"
    type: MX
    value: aspmx.l.google.com
    ttl: 3600
    priority: 1

  - name: raspberry
    type: A
    value: 10.0.0.4
    ttl: 300

  - name: retropie
    type: A
    value: 10.0.0.207
    ttl: 300

  - name: svc
    type: A
    value: 73.15.20.166
    ttl: 300

  - name: synology
    type: A
    value: 10.0.0.203
    ttl: 300

  - name: www
    type: CNAME
    value: ghs.googlehosted.com
    ttl: 300

  - name: zinfandel
    type: A
    value: 10.0.0.205
    ttl: 300

  - name: _lovable.book.svc
    type: TXT
    value: lovable_verify=a6369596ca0ae0b00fde155591c566c05a9844302a70727ba69a74b56c58927f
    ttl: 300

# Traefik Load Balancer addresses for k3s front-door
prole_traefik_lb_ips:
  - 10.0.0.3
  - 10.0.0.6

# k3s Front Door names (normalized to prole.org)
prole_k3s_front_door_names:
  - git
  - svc
  - api
  - db
  - supabase
  - registry

# Convenience list: internal RFC1918 A records only (useful for Samba AD DNS population)
prole_internal_a_records:
  - fqdn: aventage.prole.org
    ipv4s: [10.0.0.206]
  - fqdn: fairyland.prole.org
    ipv4s: [10.0.0.208]
  - fqdn: loghost.prole.org
    ipv4s: [10.0.0.3]
  - fqdn: merlin.prole.org
    ipv4s: [10.0.0.6]
  - fqdn: morana.prole.org
    ipv4s: [10.0.0.66]
  - fqdn: morgoth.prole.org
    ipv4s: [10.0.0.204]
  - fqdn: myrddin.prole.org
    ipv4s: [10.0.0.3]
  - fqdn: pi.prole.org
    ipv4s: [10.0.0.5]
  - fqdn: raspberry.prole.org
    ipv4s: [10.0.0.4]
  - fqdn: retropie.prole.org
    ipv4s: [10.0.0.207]
  - fqdn: synology.prole.org
    ipv4s: [10.0.0.203]
  - fqdn: zinfandel.prole.org
    ipv4s: [10.0.0.205]

# k3s front-door records (public and internal.prole.org)
prole_k3s_dns_records:
  - fqdn: git.prole.org
    ipv4s: [10.0.0.3, 10.0.0.6]
  - fqdn: git.internal.prole.org
    ipv4s: [10.0.0.3, 10.0.0.6]
  - fqdn: svc.prole.org
    ipv4s: [10.0.0.3, 10.0.0.6]
  - fqdn: svc.internal.prole.org
    ipv4s: [10.0.0.3, 10.0.0.6]
  - fqdn: api.prole.org
    ipv4s: [10.0.0.3, 10.0.0.6]
  - fqdn: api.internal.prole.org
    ipv4s: [10.0.0.3, 10.0.0.6]
  - fqdn: db.prole.org
    ipv4s: [10.0.0.3, 10.0.0.6]
  - fqdn: db.internal.prole.org
    ipv4s: [10.0.0.3, 10.0.0.6]
  - fqdn: supabase.prole.org
    ipv4s: [10.0.0.3, 10.0.0.6]
  - fqdn: supabase.internal.prole.org
    ipv4s: [10.0.0.3, 10.0.0.6]

prole_k3s_cname_records:
  - fqdn: registry.prole.org
    target: svc.prole.org
  - fqdn: registry.internal.prole.org
    target: svc.internal.prole.org