;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;; This is the zone file for the luci.app domain. This file is used
;;; to populate the zone records in the skia-public GCP project,
;;; which is where our zone file is hosted.
;;;
;;; If you add or change any records in this file then they will
;;; automatically be applied by the `zone-apply` application
;;; running in skia-infra-corp.
;;;
;;; See //skfe/go/zone-apply/README.md for more details.
;;;
;;; Once the changes have propogated you can update the tests in:
;;;
;;;    //skfe/go/dns/dns_test.go
;;;
;;; And then run the tests to confirm the configuration is working
;;; as intended.
;;;
;;;    bazelisk test //skfe/go/dns:dns_test
;;;
;;; See go/skia-dns for details on the registration of skia.org.
;;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

$TTL 3600     ; default TTL 1 hour

;;; SSL/TLS certificates policy
;;; Certification Authority Authorization (CAA) records are
;;; used to specify which certificate authorities (CAs) are
;;; allowed to issue certificates for a domain.
;;; The record below restricts certificate issuance to
;;; Google CA only.

@           86400 IN CAA 0 issue "pki.goog"

;;;; This record is required to validate domains for
;;;; certificate issuance.

_validate_domain 3600 IN CNAME _validate_domain.pki.goog.

;;; Master A record. Hosted in the GCP project skia-infra-public.
@          300      IN A 34.110.212.89

;;; CNAME all the hosts for this domain.
*          3600    IN CNAME luci.app.

;;; config subdomain A record and AAAA record. Hosted in Cloud Run service
;;; luci-config in GCP Project luci-config.
config     300     IN A 216.239.32.21
config     300     IN A 216.239.34.21
config     300     IN A 216.239.36.21
config     300     IN A 216.239.38.21
config     300     IN AAAA 2001:4860:4802:32::15
config     300     IN AAAA 2001:4860:4802:34::15
config     300     IN AAAA 2001:4860:4802:36::15
config     300     IN AAAA 2001:4860:4802:38::15

;;; config-dev subdomain A record and AAAA record. Hosted in Cloud Run service
;;; luci-config-dev in GCP Project luci-config-dev.
config-dev 300     IN A 216.239.32.21
config-dev 300     IN A 216.239.34.21
config-dev 300     IN A 216.239.36.21
config-dev 300     IN A 216.239.38.21
config-dev 300     IN AAAA 2001:4860:4802:32::15
config-dev 300     IN AAAA 2001:4860:4802:34::15
config-dev 300     IN AAAA 2001:4860:4802:36::15
config-dev 300     IN AAAA 2001:4860:4802:38::15

;;; TXT records for site verification
config     3600    IN TXT "google-site-verification=RQ5PG1uJSEsw-ypgV7fSHduKsVeLOAji3JIAINecC8A"
config-dev 3600    IN TXT "google-site-verification=xhhLX2KKlm_Eq8crnrbqSkAueTKVaRKUjvqhxi8P-tw"


;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;; End of luci.app.zone
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;