cleanup

dns-do.sudo.is.tf

@@ -1,4 +1,6 @@
-# will be a delegated zone .htznr.sudo.is
+### do.sudo.is
+
+## delegated to digitalocean
 
 resource "digitalocean_domain" "do-sudo-is" {
   name       = "do.sudo.is"

dns-htznr.sudo.is.tf

@@ -1,12 +1,12 @@
-# will be a delegated zone .htznr.sudo.is
+### htznr.sudo.is
+
+## delegated to digitalocean
 
 resource "digitalocean_domain" "htznr-sudo-is" {
   name       = "htznr.sudo.is"
   ip_address = local.fsn_lb_ip
 }
 
-
-# currently just flat dotted dns records .hcloud.sudo.is
 resource "digitalocean_record" "fra1-auth-g0-hcloud" {
   domain = digitalocean_domain.htznr-sudo-is.name
   type   = "A"

dns-oci.sudo.is.tf

@@ -1,8 +1,11 @@
-# will become a delegated zone .oci.sudo.is
+### oci.sudo.is
+
+## delegated to digitalocean.com
 resource "digitalocean_domain" "oci-sudo-is" {
   name       = "oci.sudo.is"
   ip_address = local.fsn_lb_ip
 }
+# but should be private ip
 resource "digitalocean_record" "lon-matrix-bridges-g0" {
   domain = digitalocean_domain.oci-sudo-is.name
   type   = "A"

dns-vpn.sudo.is.tf

@@ -1,8 +0,0 @@
-resource "cloudflare_record" "broker-vpn-sudois" {
-  zone_id = cloudflare_zone.sudois.id
-  type     = "CNAME"
-  name     = "broker.vpn"
-  value    = "ber0.sudo.is"
-  proxied  = false
-  ttl      = 60
-}

dns-wg.sudo.is.tf

@@ -15,3 +15,13 @@ resource "digitalocean_record" "mainframe-wg-sudo-is" {
   value    = "10.102.47.128"
   ttl      = 60
 }
+
+# old, flattened dns record on sudo.is
+resource "cloudflare_record" "broker-vpn-sudois" {
+  zone_id = cloudflare_zone.sudois.id
+  type     = "CNAME"
+  name     = "broker.vpn"
+  value    = "ber0.sudo.is"
+  proxied  = false
+  ttl      = 60
+}