From 1b3dfb85bb99b0304bee09244e362bfd49f495be Mon Sep 17 00:00:00 2001
From: Jake Howard <git@theorangeone.net>
Date: Sun, 7 May 2023 18:11:23 +0100
Subject: [PATCH] Add CAA records

---
 terraform/0rng.one.tf         | 10 ++++++++++
 terraform/jakehoward.tech.tf  | 13 +++++++++++++
 terraform/theorangeone.net.tf | 13 +++++++++++++
 3 files changed, 36 insertions(+)

diff --git a/terraform/0rng.one.tf b/terraform/0rng.one.tf
index 699c624..f8eb7a2 100644
--- a/terraform/0rng.one.tf
+++ b/terraform/0rng.one.tf
@@ -41,3 +41,13 @@ resource "gandi_livedns_record" "orngone_apex" {
     linode_instance.casey.ip_address
   ]
 }
+
+resource "gandi_livedns_record" "orngone_caa" {
+  zone = gandi_livedns_domain.orngone.id
+  name = "@"
+  type = "CAA"
+  ttl  = 3600
+  values = [
+    "0 issue \"letsencrypt.org\""
+  ]
+}
diff --git a/terraform/jakehoward.tech.tf b/terraform/jakehoward.tech.tf
index b095781..1238b9d 100644
--- a/terraform/jakehoward.tech.tf
+++ b/terraform/jakehoward.tech.tf
@@ -204,3 +204,16 @@ resource "cloudflare_record" "jakehowardtech_collabora" {
   type    = "A"
   ttl     = 1
 }
+
+resource "cloudflare_record" "jakehowardtech_caa" {
+  zone_id = cloudflare_zone.jakehowardtech.id
+  name    = "@"
+  type    = "CAA"
+  ttl     = 1
+
+  data = {
+    tag   = "issue"
+    flags = 0
+    value = "letsencrypt.org"
+  }
+}
diff --git a/terraform/theorangeone.net.tf b/terraform/theorangeone.net.tf
index c737d45..dcbbe82 100644
--- a/terraform/theorangeone.net.tf
+++ b/terraform/theorangeone.net.tf
@@ -260,3 +260,16 @@ resource "cloudflare_record" "theorangeonenet_mastodon" {
   type    = "A"
   ttl     = 1
 }
+
+resource "cloudflare_record" "theorangeonenet_caa" {
+  zone_id = cloudflare_zone.theorangeonenet.id
+  name    = "@"
+  type    = "CAA"
+  ttl     = 1
+
+  data = {
+    tag   = "issue"
+    flags = 0
+    value = "letsencrypt.org"
+  }
+}