Skip to content

rsclarke/terraform-cloudflare-mta-sts

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

terraform-cloudflare-mta-sts

This module creates the necessary DNS records to support MTA-STS and SMTP TLS reporting. In addition, a Cloudflare Worker serves the MTA-STS policy, note that this worker does not accept the reports and you must specify a location which does through the rua variable.

Usage

resource "cloudflare_zone" "example_com" {
  zone = "example.com"
}

module {
  source = "rsclarke/mta-sts/cloudflare"

  zone_id   = cloudflare_zone.example_com.id
  zone_name = cloudflare_zone.example_com.name

  mode    = "enforce"
  mx      = ["mx1.example.com", "mx2.example.net"]
  max_age = 604800 # 1 week in seconds
  rua     = ["mailto:[email protected]", "https://example.org/mta-sts/report"]
}

Providers

Name Version
cloudflare >= 2.0

Inputs

Name Description Type Required
zone_id Cloudflare Zone ID string yes
zone_name Cloudflare Zone Name string yes
mode Sending MTA policy application, rfc8461#section-5. Default testing string no
mx List of permitted MX hosts, at least one list(string) yes
max_age Maximum lifetime of the policy in seconds, up to 31557600, defaults to 604800 (1 week) number no
rua Locations to which aggregate reports about policy violations should be sent, either mailto: or https: schema. list(string) yes

Outputs

This module does not expose any outputs.