$TTL 300
$ORIGIN miraheze.org.

@		SOA ns1.wikitide.net. hostmaster.wikitide.net. (
		20221005000001	; serial
		7200		; refresh
		30M		; retry
		3D		; expire
		900		; ncache
)

; Wildcard services
@		DYNA	geoip!cp
*		DYNA	geoip!cp

; Name servers
@		NS	ns1.wikitide.net.
@		NS	ns2.wikitide.net.

;; A records
ns1		A	38.46.223.204
		AAAA	2602:294:0:b23::111
ns2		A	51.75.170.66
		AAAA	2001:41d0:801:2000::4089

; Mail exchanges
@		MX	10	smtp.google.com.
phorge		MX	10	smtp.google.com.

; Mail policies
miraheze.org.		TXT	"v=spf1 include:_spf.google.com ~all"

; Mail autodiscovery
_imaps._tcp		IN SRV	0 0 993	imap.gmail.com.
_submission._tcp	IN SRV  0 0 587	smtp.gmail.com.

;; DKIM - Policy: Mail may be signed. Not required.
mail._domainkey		TXT	"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix+gJsqBrYu4mYS5D8o14PLGDrJo8IzmN8HPXV8OKd3zS2WZ4ZHJo7bRdynngryJ+LtZGB1fAM6QQXvA2nNoEEJFfApXnxprTa45k988JDv3uC44iSJO+hlQ4tyxeM0eueF4k4sqOSNIcmbrVRwCJu+kp/1o42majxbhIhUFlqAByvA5LPWOMBGyds2/QxtrtuxfRhSai9Eo/PZb84z+Q5UxhbJtWTDfHFHn1v41gTMFzBBeAdhqkeKQ/jJZqevInX5Qn9fkUj41m05vvecusER0BUNyTNiB/B40VktGmQi70JnrzFQdlRupfKVjuMOBrbCQA1qGyGDE6+bZpyDAmwIDAQAB"

;; DMARC - Policy: Reject - unauthorized mail will not send, remote SMTPs will just drop the mail.
_dmarc		TXT	"v=DMARC1; p=reject; rua=mailto:dmarc@miraheze.org; ruf=mailto:dmarc@miraheze.org; fo=1; adkim=r; aspf=r; pct=100; rf=afrf; ri=86400; sp=none"

; CAA (issue: sectigo.com, letsencrypt.org, iodef: mailto:caapolicy@wikitide.org)
@		TYPE257	\# 18 000569737375657365637469676F2E636F6D
@		TYPE257 \# 22 000569737375656C657473656E63727970742E6F7267
@		TYPE257 \# 36 0005696F6465666D61696C746F3A636161706F6C6963794077696B69746964652E6F7267

; Miscellaneous - GSV should be given to @wikitide.org Google Workspace accounts where possible
miraheze.org.	TXT	"_globalsign-domain-verification=VSF3i19MYIR4UsdgiIyOqPxNXKxpfkWK0jbiKG8VnK"
miraheze.org.   TXT     "google-site-verification=fVCiW2Ct9RPotFUjRb5vj5O0YLOKPQfbBGjDttn07_w"

; Services
m		DYNA	geoip!cp
*.m		DYNA	geoip!cp
static		DYNA	geoip!cp
donate		DYNA	geoip!cp
issue-tracker	DYNA	geoip!cp
phorge		DYNA	geoip!cp
reports         DYNA	geoip!cp
blog		CNAME	issue-tracker

; Load Balancers
mw-lb		DYNA	geoip!cp
swift-lb	DYNA	weighted!swift

; Other