$TTL 60
@       IN  SOA ns-mephisto.kunbox.net.    hostmaster.kunbox.net. (
        ${SERIAL}
        3600
        600
        86400
        300
    )


${NAMESERVERS}

$ORIGIN kunbox.net.

; ends up on rx300.kunbox.net
@                   IN  A       31.47.232.106
                    IN  AAAA    2a00:f820:528::2

; Needs to have a working Mail address, otherwise Telekom goes mimimi
                    IN  MX      10 mail.franzi.business.
                    IN  TXT     "v=spf1 mx ~all"

; delegate acme stuff to psql-managed zone
_acme-challenge     IN  CNAME   _acme-challenge.kunbox.net.le.kunbox.net.
_acme-challenge.home IN CNAME   _acme-challenge.home.kunbox.net.le.kunbox.net.

; Mail servers
mta-sts             IN  CNAME   rx300

; legacy Nameservers
ns-1                IN  A       34.89.208.78
ns-2                IN  A       35.187.109.249
ns-3                IN  A       35.228.143.71

; temp, while updating names
; XXX remove 2023-07-01
ns-primary          IN  CNAME  ns-mephisto
ns-ionos            IN  CNAME  ns-mephisto
ns-digitalocean     IN  CNAME  ns-ghirahim

% for record in sorted(metadata_records):
${record}
% endfor

; Please note there's no _dmarc record in here. We use this domain to
; send out dmarc reports to other domains, so there shouldn't be a
; record here to avoid creating loops.
; We're still publishing DKIM keys and have enabled TLSRPT, though.
_mta-sts            IN  TXT     "v=STSv1;id=20201111;"
_smtp._tls          IN  TXT     "v=TLSRPTv1;rua=mailto:hostmaster@kunbox.net"
_token._dnswl       IN  TXT     "6akc10htbgmg56e072w0w2n0wql4oezu"

2019._domainkey     IN  TXT     ( "v=DKIM1; k=rsa; "
    "p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkg6UAcu3V98hal1UVf6yB0WT1CKDS0AK83CUlSP8bUwraPxkxK1nkQOUsmjbQs6a3FhdsKprMi32GeUaTVvZg81JIybPk3jNugfNWfSjs2TXPomYu+XD2pmmbR3cZlzC5NGR2nmBFt/P/S2ihPHj35KziiBIwK1TdvOi1M2+upCjK33Icco0ByCm0gJpD2O0cbqcBcUKqd6X440"
    "vYhNXH1ygp0e91P0iRnvS9sg6yD0xjD8kD6j/8GfxBY+9bpU3EvDoBgyJSbjw5b6PUVJbKMXzw1NIRNj0SXKs5BakjS8+7u62vR11IPCYRwy+yr0rDT0tNegM7gStIIgoTpOoQIDAQAB"
) ;
uO4aNejDvVdw8BKne3KJIqAvCQMJ0416._domainkey IN TXT ( "v=DKIM1; k=rsa; "
    "p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh5Ym9PO7r+wdOIKfopvHzn3KU3qT6IlCG/gvvbmIqoeFQfRbAe3gQmcG6RcLue55cJQGhI6y2r0lm59ZeoHR40aM+VabAOlplekM7xWmoXb/9vG2OZLIqAyF4I+7GQmTN6B9keBHp9SWtDUkI0B0G9neZ5MkXJP705M0duxritqQlb4YvCZwteHiyckKcg9aE9j+GF2EEawBoVDp"
    "oveoB3+wgde3lWEUjjwKFtXNXxuN354o6jgXgPNWtIEdPMLfK/o0CaCjZNlzaLTsTegY/+67hdHFqDmm8zXO9s+Xiyfq7CVq21t7wDhQ2W1agj+up6lH82FMh5rZNxJ6XB0yQIDAQAB"
) ;

f2k1.de._report._dmarc          IN  TXT "v=DMARC1"
franzi.business._report._dmarc  IN  TXT "v=DMARC1"
kunsmann.eu._report._dmarc      IN  TXT "v=DMARC1"
kunsmann.info._report._dmarc    IN  TXT "v=DMARC1"
salonkatrin.de._report._dmarc   IN  TXT "v=DMARC1"