2 set GW6 2a03:e2c0:2663:1::1
5 set VPS6 2a04:ac00:a:146::25
7 set Y6 21a:af91:8d0e:b05:9645:e4e9:12be:3c39
9 set NS1 uz544mqwggqbf3z4utlhfqn45vpbpq78nc63hpg5u2ut29stkt0pkr.ns7.stargrave.org.
10 set NS2 uz5nulnd504gp3s7sdmdl5l2gxc762hpw926t90k39ltxp67flbccn.ns5.stargrave.org.
12 set NoSPF {"v=spf1 -all"}
13 set ReSPF {"v=spf1 redirect=_spf.stargrave.org"}
19 $DOMAIN. 21600 IN SOA $NS1 admin.$DOMAIN. (
28 _dmarc TXT \"v=DMARC1; p=none\""
36 * { return $dn.$DOMAIN. }
43 if { $dn == "$DOMAIN." } { return @ }
44 return [join [lrange [split $dn .] 0 end-[expr [llength [split $DOMAIN .]] + 1]] .]
50 puts "$dn MX 10 mailfake0.stargrave.org."
51 puts "$dn MX 20 mail2.stargrave.org."
52 puts "$dn MX 30 mailfake1.stargrave.org."
56 proc dane {dn {port ""}} {
58 if {$port == ""} { set port 443 }
59 set dirname [string trimright $dn .]
62 foreach ca [lsort [glob ca/*/*]] {
63 set ca [join [lrange [split $ca /] 1 end] /]
64 if {![file exists [file join ee $ca $dirname]]} { continue }
65 puts "[shorten $dn] CAA 0 issue \"[lindex [split $ca /] end]\""
66 puts "[shorten _$port._tcp.$dn] TLSA 3 1 1 [exec zeasypki dane ee/$ca/$dirname]"
73 set fn ssh/[string trimright $dn .]
74 if {![file exists $fn]} { return }
75 set fd [open "| ssh-keygen -f $fn -r $dn"]
76 while {[gets $fd line] >= 0} {
77 if {[string first "SSHFP 4 2" $line] == -1} { continue }
78 puts "[shorten $dn] [lrange [split $line " "] 2 end]"
83 proc subdomain {dn addrs {flags {}}} {
85 set short [shorten $dn]
87 if {[string first : $addr] == -1} { set atyp A } { set atyp AAAA }
88 puts "$short $atyp $addr"
90 dane $dn [lindex [split [lindex $flags [lsearch $flags dane:*]] :] end]
92 if {[lsearch $flags nospf] == -1} { puts "$short TXT $NoSPF" }
93 if {[lsearch $flags y] != -1} {
94 set short [shorten y.[fqdn $dn]]
95 puts "$short AAAA $Y6"
96 puts "$short TXT $NoSPF"
101 proc pgp {keyid {uid ""}} {
102 if {$uid == ""} { set uid $keyid }
103 set fd [open "| gpg --export-options export-dane --export $keyid"]
104 while {[gets $fd line] >= 0} {
105 if {[string first $uid $line] != -1} { break }
108 set line [split [gets $fd]]
109 set line [lreplace $line 0 0 "[lindex $line 0]._openpgpkey"]
111 while {[gets $fd line] >= 0} {
112 if {$line == ""} { break }