terraform/namecheap.tf

// https://registry.terraform.io/providers/namecheap/namecheap/latest/docs

variable "caladan-ips" {
  type = object({
    v4 = string
    v6 = string
  })
  default = {
    v4 = "139.162.137.29"
    v6 = "2a01:7e01::f03c:92ff:fea2:5d7c"
  }
}

// these are subdomains for services hosted on the host named `caladan`
// both A and AAAA records should be made for them pointing to caladan's ipv4
// and ipv6 respectively
variable "caladan-hostnames" {
  type = set(string)
  default = ["@"]
}

// These are subdomains for services hosted on the host named `narwhal`.
// They are only accessible from my internal network and my internal DNS server
// takes care of that.
// But I set the public A record to caladan's ipv4 just for renewing their
// letsencrypt certificates. No need to set the AAAA record.
variable "narwhal-hostnames" {
  type = set(string)
  default = ["authelia"]
}

provider "namecheap" {
  user_name = "gthar"
  api_user = "gthar"
  client_ip = var.caladan-ips.v4
  use_sandbox = false
}

resource "namecheap_domain_records" "monotremata-xyz" {
  domain = "monotremata.xyz"
  mode = "MERGE"  // maybe eventually move to OVERWRITE

  dynamic "record" {
    for_each = var.caladan-hostnames
    content {
      hostname = record.value
      type = "A"
      address = var.caladan-ips.v4
    }
  }

  dynamic "record" {
    for_each = var.narwhal-hostnames
    content {
      hostname = record.value
      type = "A"
      address = var.caladan-ips.v4
    }
  }

  dynamic "record" {
    for_each = var.caladan-hostnames
    content {
      hostname = record.value
      type = "AAAA"
      address = var.caladan-ips.v6
    }
  }

}