; vim: set expandtab:smarttab
; {{ serial_comment }}
@ 1H IN SOA ns0.wikimedia.org. hostmaster.wikimedia.org. {{ serial_num }} 12H 2H 2W 1H

; Name servers

@           1D  IN NS   ns0.wikimedia.org.
@           1D  IN NS   ns1.wikimedia.org.
@           1D  IN NS   ns2.wikimedia.org.

; Mail exchangers

@           300 IN MX   10  mx-in1001.wikimedia.org.
@           300 IN MX   10  mx-in2001.wikimedia.org.

; SPF records
@           600 IN TXT  "v=spf1 include:wikimedia.org ~all"

; DMARC record
_dmarc      600 IN TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc-rua@wikimedia.org; ruf=mailto:dmarc-ruf@wikimedia.org;"

; Canonical names
@           600  IN A    192.0.66.2
@           600  IN AAAA 2a04:fa87:fffd::c000:4280

; Facebook verification record (T258284)
@           600 IN TXT  "facebook-domain-verification=orjhfudqyeumf4uber3bpwan5pisu0"
; Search Console (T404974)
@           600 IN TXT  "google-site-verification=M_SODfP3BPr-z8R-YmIdrbm_nEJDG6BpfRXsf-e6P8E"
; Search Console: ITS Service Account
@           600 IN TXT  "google-site-verification=m7jEgoI4DOUy0u6cebxtp7oJT7s3nnNyPWgmPQmNEjc"

; Account verification for Bluesky; see T384350
_atproto    600 IN TXT  "did=did:plc:vwdzejaw4wkxh2wvkjlcubal"

; VS Code extension verification (T400089)
_visual-studio-marketplace-wikimediafoundation  600  IN TXT  "21b0213f-b0be-489d-bb08-52de942999f1"

; DKIM domain policy record
_domainkey  1H  IN TXT  "o=~; r=hostmaster@wikimediafoundation.org;"

; DKIM selector key(s)
fundraising._domainkey  1H  IN TXT  "v=DKIM1; h=sha256; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC61rCxt6xGKmVoId8fqGM1UTnBugf5chUdQfoCDpsgXqQVF1tOacwj3bF9fQdnqVhWeoGwiWOhfB13k/cfPKELgsJKKXEyk7cyBTV4BQ2JqmbPS4m0dD+imISrviPKjNG4uHA4FrjzYiVuv8EzZQw7tUtJuMC26BXZYqi/5YIpFQIDAQAB;"

; CAA records for wikimediafoundation.org - digicert, LE and pki.goog (for
; continued use in our unified certs) plus LE (for Automattic hosting)
@           600 IN CAA 0 issue "digicert.com"
@           600 IN CAA 0 issue "letsencrypt.org"
@           600 IN CAA 0 issue "pki.goog"
@           600 IN CAA 0 iodef "mailto:dns-admin@wikimedia.org"

; Servers (alphabetic order)

; Service aliases

; Wikis (alphabetic order)

www         600  IN A     192.0.66.2
www         600  IN AAAA  2a04:fa87:fffd::c000:4280
m           600  IN A     192.0.66.2
m           600  IN AAAA  2a04:fa87:fffd::c000:4280