terraform {
  required_providers {
    hcloud = {
      source = "hetznercloud/hcloud"
      version = "1.57.0"
    }
    netbox = {
      source = "e-breuninger/netbox"
      version = "5.0.0"
    }
  }
}

resource "hcloud_zone" "avii" {
  name = "avii.ovh"
  mode = "primary"
}

resource "hcloud_zone_rrset" "mx" {
  zone = hcloud_zone.avii.name
  name = "@"
  type = "MX"

  records = [
    { value = "10 mx01.mail.icloud.com.", comment = "Apple Mail" },
    { value = "10 mx02.mail.icloud.com.", comment = "Apple Mail" },
  ]

  change_protection = false
}

resource "hcloud_zone_rrset" "dkim" {
  zone = hcloud_zone.avii.name
  name = "sig1._domainkey"
  type = "CNAME"

  records = [
    { value = "sig1.dkim.avii.ovh.at.icloudmailadmin.com.", comment = "Apple Mail" },
  ]

  change_protection = false
}

resource "hcloud_zone_rrset" "txt" {
  zone = hcloud_zone.avii.name
  name = "@"
  type = "TXT"

  records = [
    { value = provider::hcloud::txt_record("v=spf1 include:icloud.com ~all"), comment = "Apple Mail" },
    { value = provider::hcloud::txt_record("apple-domain=4Y71ffO5sr54SyCR"), comment = "Apple Mail" },
  ]

  change_protection = false
}