Skip to content

Latest commit

 

History

History
45 lines (32 loc) · 1.52 KB

README.md

File metadata and controls

45 lines (32 loc) · 1.52 KB
Raw

terraform-cloudflare-mta-sts

This module creates the necessary DNS records to support MTA-STS and SMTP TLS reporting. In addition, a Cloudflare Worker serves the MTA-STS policy, note that this worker does not accept the reports and you must specify a location which does through the rua variable.

Usage

resource "cloudflare_zone" "example_com" {
  zone = "example.com"
}

module {
  source = "rsclarke/mta-sts/cloudflare"

  zone_id   = cloudflare_zone.example_com.id
  zone_name = cloudflare_zone.example_com.name

  mode    = "enforce"
  mx      = ["mx1.example.com", "mx2.example.net"]
  max_age = 604800 # 1 week in seconds
  rua     = ["mailto:[email protected]", "https://example.org/mta-sts/report"]
}

Providers

Name Version
cloudflare >= 2.0

Inputs

Name Description Type Required
zone_id Cloudflare Zone ID string yes
zone_name Cloudflare Zone Name string yes
mode Sending MTA policy application, rfc8461#section-5. Default testing string no
mx List of permitted MX hosts, at least one list(string) yes
max_age Maximum lifetime of the policy in seconds, up to 31557600, defaults to 604800 (1 week) number no
rua Locations to which aggregate reports about policy violations should be sent, either mailto: or https: schema. list(string) yes

Outputs

This module does not expose any outputs.