pez-infra/terraform
Rasmus Wejlgaard cd8ab2a704 Remove bogus PTR records from Cloudflare forward zone
PTR record for 83.94.248.182 (copenhagen-a) incorrectly claimed to be
mail.pez.sh. PTR records in a forward DNS zone don't control actual
reverse DNS (that's managed by the ISP), and this record was misleading.

Also removed the mail-ptr record which had a similarly misplaced
in-addr.arpa reference in the forward zone.

Fixes PESO-76
2026-03-28 21:07:49 +00:00
..
.gitignore initial commit 2026-03-28 12:39:41 +00:00
cloudflare_account.tf initial commit 2026-03-28 12:39:41 +00:00
cloudflare_dns.tf Remove bogus PTR records from Cloudflare forward zone 2026-03-28 21:07:49 +00:00
Makefile initial commit 2026-03-28 12:39:41 +00:00
providers.tf initial commit 2026-03-28 12:39:41 +00:00
README.md initial commit 2026-03-28 12:39:41 +00:00
secrets.enc.yaml initial commit 2026-03-28 12:39:41 +00:00
vars.tf initial commit 2026-03-28 12:39:41 +00:00

Terraform

Infrastructure-as-code for cloud and edge services. Uses OpenTofu (drop-in Terraform replacement).

What's managed

  • Cloudflare DNS — All pez.sh records (A, CNAME, MX, TXT)

CI/CD

The original GitHub Actions workflow (apply.yml) ran plan on push to master, then applied with manual approval via a prod environment gate. This workflow lived in the standalone pez-terraform repo and would need adapting for the monorepo structure (e.g., path-filtered triggers).

Provider versions

Provider Source Version
Cloudflare cloudflare/cloudflare ~> 5.18
OpenTofu >= 1.6.0

Migrated from

This directory replaces the standalone pez-terraform repo.