This module creates the necessary DNS records to support MTA-STS and SMTP TLS reporting. In addition, a Cloudflare Worker serves the MTA-STS policy, note that this worker does not accept the reports and you must specify a location which does through the rua variable.
resource "cloudflare_zone" "example_com" {
zone = "example.com"
}
module {
source = "rsclarke/mta-sts/cloudflare"
zone_id = cloudflare_zone.example_com.id
zone_name = cloudflare_zone.example_com.name
mode = "enforce"
mx = ["mx1.example.com", "mx2.example.net"]
max_age = 604800 # 1 week in seconds
rua = ["mailto:[email protected]", "https://example.org/mta-sts/report"]
}| Name | Version |
|---|---|
| cloudflare | >= 2.0 |
| Name | Description | Type | Required |
|---|---|---|---|
| zone_id | Cloudflare Zone ID | string |
yes |
| zone_name | Cloudflare Zone Name | string |
yes |
| mode | Sending MTA policy application, rfc8461#section-5. Default testing |
string |
no |
| mx | List of permitted MX hosts, at least one | list(string) |
yes |
| max_age | Maximum lifetime of the policy in seconds, up to 31557600, defaults to 604800 (1 week) | number |
no |
| rua | Locations to which aggregate reports about policy violations should be sent, either mailto: or https: schema. |
list(string) |
yes |
This module does not expose any outputs.