common.nix

let
  data = builtins.fromJSON (builtins.readFile ./data.json);
in
{
  TTL = 30;
  SOA = {
    nameServer = "iad0.nichi.link.";
    adminEmail = "noc@nichi.co";
    serial = 0;
    refresh = 14400;
    retry = 3600;
    expire = 604800;
    minimum = 300;
  };
  NS = builtins.map (name: "${name}.") data.nameservers.value;
  DKIM = [
    {
      selector = "20230826";
      k = "rsa";
      p = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/zQOxo7Gt2FLp6XRXtagzbbD5iV67FAONTTespTjkobZHAkupDo+05af5N5+E4BOVqlBKiQVQHTooX1iwKeaIF5XjwI2HFbBVRMiYrNlsTEYQM9TRuRVXOzkmFFdCQiL1mC8LwDgKxuH7Af1myDtXIO/1o6QjG4+Yt9LkEHL5MwIDAQAB";
      s = [ "email" ];
    }
  ];
  DMARC = [
    {
      p = "reject";
      sp = "reject";
      pct = 100;
      adkim = "strict";
      aspf = "strict";
      fo = [ "1" ];
      ri = 604800;
    }
  ];
  CAA = [
    {
      issuerCritical = false;
      tag = "issue";
      value = "letsencrypt.org";
    }
  ];
  SRV = [
    {
      service = "imaps";
      proto = "tcp";
      port = 993;
      target = "iad0.nichi.link.";
    }
    {
      service = "submission";
      proto = "tcp";
      port = 465;
      target = "iad0.nichi.link.";
    }
  ];
  nodes = data.nodes.value;
}