templates/wikimedia.org - operations/dns

	; vim: set expandtab:smarttab
	; {{ serial_comment }}
	@ 600 IN SOA ns0.wikimedia.org. hostmaster.wikimedia.org. {{ serial_num }} 12H 2H 2W 600

	; Name servers

	@ 2D IN NS ns0
	@ 2D IN NS ns1
	@ 2D IN NS ns2
	ns0 2D IN A 208.80.154.238
	ns0 2D IN AAAA 2620:0:861:53::1
	ns1 2D IN A 208.80.153.231
	ns1 2D IN AAAA 2620:0:860:53::1
	ns2 2D IN A 198.35.27.27
	ns2 2D IN AAAA 2a02:ec80:53::1

	; Mail exchangers

	@ 300 IN MX 10 mx-in1001
	@ 300 IN MX 10 mx-in2001

	; Canonical names
	@ 180 IN DYNA geoip!text-addrs

	; Google Webmaster Tools verification record for search management
	@ 600 IN TXT "google-site-verification=uzfgD0YiIqSQgRdSQXlkA7NByyyOZDp-n0SZ3nozpDM"
	@ 600 IN TXT "google-site-verification=APNaeC69s87mS4z-sfYqFYONgimBx4Bw22eCIaYEd_g"
	; Google postmaster tools verification
	@ 600 IN TXT "google-site-verification=kNuWHjx0DQyl3xCPh6uGCRASncmkKK2d578rjruEFs8"
	; 1Password site verification, requested in T352579
	@ 600 IN TXT "1password-site-verification=ZAZP5U62WJFMDDZKWJG7TPKFI4"

	; Figma domain verification, requested in T408003
	@ 600 IN TXT "figma-domain-verification=afd2ee0a37aa0bcf8dfc357d0264a8a0664a703c006e7076a65b3b6fc50957ff-1761151942"

	; Miro domain verification, requested in T423199
	@ 600 IN TXT "miro-verification=1a9ff05c8b96053eaea1f94784e1a314480c3a69"

	; SPF txt and rr records

	; ip4:74.121.51.111 - acoustic mass emailer, @fr-tech
	@ 600 IN TXT "v=spf1 include:_cidrs.wikimedia.org include:_spf.google.com ip4:74.121.51.111 ~all"
	@ 600 IN TXT "FC0MOB7SKLHj0AsevTnJvE0W0YYQkPVYOX3UMrINOSk="
	@ 600 IN TXT "MS=ms70322281"
	@ 600 IN TXT "yahoo-verification-key=tiU1x5OT7PmpcbQzS7N5PxKzC+BYkl+9tZYh38G5vDk=" ; T370963
	@ 600 IN TXT "jamf-site-verification=NxGVeSleTFBLZiknd4D94A"

	; SPF records for DSN, null sender: <>, emails from MXs
	mx-in1001 1H IN TXT "v=spf1 include:_cidrs.wikimedia.org ~all"
	mx-in2001 1H IN TXT "v=spf1 include:_cidrs.wikimedia.org ~all"
	mx-out1001 1H IN TXT "v=spf1 include:_cidrs.wikimedia.org ~all"
	mx-out2001 1H IN TXT "v=spf1 include:_cidrs.wikimedia.org ~all"

	; SPF record for WMF netblocks which may send mail
	; ip4:208.80.152.0/22 - eqiad + codfw
	; ip6:2620:0:860::/56 - codfw
	; ip6:2620:0:861::/56 - eqiad
	_cidrs 1H IN TXT "v=spf1 ip4:208.80.152.0/22 ip6:2620:0:860::/56 ip6:2620:0:861::/56 ~all"
	; SPF records for dayforce: T371304
	dayforce 1H IN TXT "v=spf1 ip4:67.231.158.158 ip4:67.231.151.29 ip4:67.231.152.177 ip4:208.84.65.220 ~all"

	; Shopify, store.wikimedia.org, requested in T355835
	mailern1j 1H IN CNAME 327bdf87d37c.p413.email.myshopify.com.
	; Shopify, wikimediafoundation.myshopify.com, requested in T355833
	mailer2i3 1H IN CNAME edd08f1c196d.p234.email.myshopify.com.

	; CAA records for wikimedia.org - all types for Digicert, LE and pki.goog
	@ 5M IN CAA 0 issue "digicert.com"
	@ 5M IN CAA 0 issue "letsencrypt.org"
	@ 5M IN CAA 0 issue "pki.goog"
	@ 5M IN CAA 0 iodef "mailto:dns-admin@wikimedia.org"
	; CAA records for *.email.wikimedia.org - all types for LE and Amazon
	; digicert added in T346394
	email 5M IN CAA 0 issue "amazon.com"
	email 5M IN CAA 0 issue "letsencrypt.org"
	email 5M IN CAA 0 issue "digicert.com"
	email 5M IN CAA 0 iodef "mailto:dns-admin@wikimedia.org"

	; DKIM policy records & ADSP (also see DMARC below); policy is "some mails /may/ be signed"
	_domainkey 1H IN TXT "o=~; r=postmaster@wikimedia.org;"
	_adsp._domainkey 1H IN TXT "dkim=unknown;"

	; DKIM selector keys
	fundraising._domainkey 1H IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC61rCxt6xGKmVoId8fqGM1UTnBugf5chUdQfoCDpsgXqQVF1tOacwj3bF9fQdnqVhWeoGwiWOhfB13k/cfPKELgsJKKXEyk7cyBTV4BQ2JqmbPS4m0dD+imISrviPKjNG4uHA4FrjzYiVuv8EzZQw7tUtJuMC26BXZYqi/5YIpFQIDAQAB"
	wikimedia._domainkey 1H IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC49AATZHm1B+6V90esy7TkZnitTupAOlPisTyJSbIF5G1iXVzYljo8ZHdeYdXpgfOp79avTxz23YQXJRNWv7QqO8RuTrS8DSQhYMjwIkJkZ+VA4O2NI2bueaUVM67JylpxzIi3LajjII+CEspMBKHwqTygTQAr8uRXIGYfTcb+4wIDAQAB"
	wiki-mail._domainkey 1H IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZG4udzEAJiq1D0TG+5BYil0vuh8/iuBmsrmAZQcWYaMcBIlthxg0a/5xktMpE4A6w135mgl/q61dbDnT6d3Y3veWMOy0xI0q/wS9DCmRqU2VIb7L/Asjp9evwzEJywODigjOohkk4+/aIbppU1/GLGCoc6b9h7m0iandPkKTXwIDAQAB"
	google._domainkey 1H IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwyTx0t/PibozaSBs+TcKL6G5lK0CMzwYzX46GUIkbIU1SfAwvwdsbq3JaSRmO+WAt9Tv3zQIJvXAV++tVq3VWsc4mKdtJCz4piY8LrDAor+kvyUMyZlYfO6YPkDNUCLbKBCMp7Fyd3gGvI9cjAmFSFrbLmXnMDQQocFYDfoXD2wIDAQAB"
	; Silverpop - mass-email contractor for fundraising (T130414, T210445)
	spop2048._domainkey 1H IN TXT "k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z2VWoyhd44UxaCnnaohFF3rFTYgad2onWyv9k4Jot/wNLR6GRSOV2MeZ84ypFP0xtMrzxVCTYSARdgMggoNSBP1TT4orhaOmJc9vbPsKUzJmYV6LHIxWP4QYcQJ26MLgQz6Cmj0l/E5wrxiIJIbPSHejQtZasDSsg+tsHjPL8jvUll29KF5rBdMKAd0nZvq1K1dp+FeoBh3J6eNoJiV4OdSTmMf3hXIrk6AwVE57eYz155SKpaDRYSO0d1CJnl0qoh38yG3saV6Hl0y+5HprsQ1rSTK4PNbWe3v1wCz1Aa8m5s1cbo1iK06v2F49jOIn0/HKAUZMaP9LXeapab2yQIDAQAB"
	; Fundraise Up - payment provider for fundraising (T345354)
	fun-avlmpsru._domainkey 1H IN TXT "v=DKIM1; k=rsa; h=sha256; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQChcMpa+Pz2WtZgaGlHDde7FddPDU+AKXwsRXraoMRzPqDqTczwyrr3Qqck7j2xvhmV0vOPrtSsZRcduvnLM9aB8VEeHkoAqPaGMEQPs2X3Zk1ERNgIBhoVxkB7cMlbcAohTVnTAS0/GMa9c2LqXN1LXcfd3Z44sCZZWxl/0wpSzQIDAQAB"
	; Dayforce; see T370961 and later T371304.
	corporate._domainkey.dayforce 1H IN TXT "v=DKIM1; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H3BNOCDnkie+TlLF+Uxf0w/QiaJI4OsKk2hcO3dFwr4M0UmETt7yAT21VLP6POkkLxHbMJEgT0mkJtotCnt5N5ZGGEwW+w+9aR6tspDz8R7LKfJZVp1sMZ6aj9elWaFqXQeksmTzADK9b3lT321EDMX1oeT1JRnv7aB1/FpX+V9LFdHyI1v9Ffpld+/b+hz0tCQNtcb0QWTN8BEFTN/N5G2zSVusvNXPDsIdl55HYo0cqIzZZU/Mw5PNF+xdXwo6tD1vcRLm7O9Jrq5ZcRioRLhZpt0q76Kzkmn5Uh8Pg8ErL1W0BDAywpTwh95+b7E2xm+8tRp6PaMyMUtingCbQIDAQAB"
	; Shopify, store.wikimedia.org, requested in T355835
	n1j._domainkey 1H IN CNAME dkim1.327bdf87d37c.p413.email.myshopify.com.
	n1j2._domainkey 1H IN CNAME dkim2.327bdf87d37c.p413.email.myshopify.com.
	n1j3._domainkey 1H IN CNAME dkim3.327bdf87d37c.p413.email.myshopify.com.
	; Shopify, wikimediafoundation.myshopify.com, requested in T355833
	2i3._domainkey 1H IN CNAME dkim1.edd08f1c196d.p234.email.myshopify.com.
	2i32._domainkey 1H IN CNAME dkim2.edd08f1c196d.p234.email.myshopify.com.
	2i33._domainkey 1H IN CNAME dkim3.edd08f1c196d.p234.email.myshopify.com.
	; Mailchimp; see T362921
	k2._domainkey 1H IN CNAME dkim2.mcsv.net.
	k3._domainkey 1H IN CNAME dkim3.mcsv.net.

	; DMARC record
	_dmarc 600 IN TXT "v=DMARC1; p=reject; rua=mailto:dmarc-rua@wikimedia.org;"

	; DMARC external domain verification for other WMF domains delivering to @wikimedia.org
	mediawiki.org._report._dmarc 1H IN TXT "v=DMARC1;"
	w.wiki._report._dmarc 1H IN TXT "v=DMARC1;"
	wikibooks.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikidata.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikifunctions.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikimedia.cloud._report._dmarc 1H IN TXT "v=DMARC1;"
	wikimedia.community._report._dmarc 1H IN TXT "v=DMARC1;"
	wikimedia.social._report._dmarc 1H IN TXT "v=DMARC1;"
	wikimedia.support._report._dmarc 1H IN TXT "v=DMARC1;"
	wikimediacloud.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikimediafoundation.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikinews.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikipedia.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikiquote.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikisource.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikiversity.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikivoyage.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wiktionary.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wmfusercontent.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikimedia-dns.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikimedia-ech.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wikiworkshop.org._report._dmarc 1H IN TXT "v=DMARC1;"
	wmftest.org._report._dmarc 1H IN TXT "v=DMARC1;"

	; Mail records for pr.wikimedia.org
	pr 300 IN MX 10 mx-in1001
	pr 300 IN MX 10 mx-in2001
	pr 1H IN TXT "amazonses:QeZasSSTVw5sDiCQmdzG4z4UuLgkRtceplXtv2SI2BY="
	lecokkzzn6akfzusmban7ufr6xw2g5ye._domainkey.pr 1H IN CNAME lecokkzzn6akfzusmban7ufr6xw2g5ye.dkim.amazonses.com.
	kilujm6hbzryz5wrq5l3dkb5la5rrxgc._domainkey.pr 1H IN CNAME kilujm6hbzryz5wrq5l3dkb5la5rrxgc.dkim.amazonses.com.
	4njdxtpft2kiksyew6qbqcxnxip4cjer._domainkey.pr 1H IN CNAME 4njdxtpft2kiksyew6qbqcxnxip4cjer.dkim.amazonses.com.

	; Google apps
	googlef3fe6c2a164e9650 1H IN CNAME google.com.

	; Github domain verification (T207364)
	; @wikimedia.org email addresses
	_github-challenge-wikimedia 1H IN TXT "373abc3cc8"
	; Profile URL https://www.wikimedia.org/ https://doc.wikimedia.org/
	_github-challenge-wikimedia.www 1H IN TXT "992c2700d4"
	_github-challenge-wikimedia.doc 1H IN TXT "93192ca59a"

	; Google Site Verification for gsuite-test.wikimedia.org
	gsuite-test 600 IN TXT "google-site-verification=TI8r5YSBh1J5ztVl_neyqh5Sqp-3XeOQC8Yvm516w9I"

	; Matrix/Element domain verification for foundation.wikimedia.org T261531
	_matrix._tcp.foundation 1H IN SRV 10 5 443 wikimediafoundation.ems.host.

	; send v3 clients in thw wikimedia.org domain to eqiad
	_etcd-client-ssl._tcp 5M IN SRV 0 1 4001 conf1007.eqiad.wmnet.
	_etcd-client-ssl._tcp 5M IN SRV 0 1 4001 conf1008.eqiad.wmnet.
	_etcd-client-ssl._tcp 5M IN SRV 0 1 4001 conf1009.eqiad.wmnet.

	; Corporate office name server delegation
	corp 1D IN NS ns1.corp
	corp 1D IN NS ns2.corp
	ns1.corp 1H IN A 198.73.209.15 ; wmf-zone-validator-ignore=MISSING_PTR_FOR_NAME_AND_IP
	ns2.corp 1H IN A 198.73.209.16 ; wmf-zone-validator-ignore=MISSING_PTR_FOR_NAME_AND_IP

	; DNS Records related to links.email.wikimedia.org - T188561
	email 1H IN MX 10 reply.email.wikimedia.org.
	email 1H IN MX 20 mail3880.wikimedia1.mkt4477.com.
	email 1H IN TXT "v=spf1 ip4:74.121.51.111 -all"
	www.email 1H IN CNAME email.wikimedia.org.
	open.email 1M IN CNAME e7384e80868814ad.acs4.tc.
	links.email 1M IN CNAME 9d14b5ea2f72945a.acs4.tc.
	content.email 1M IN CNAME 9aa106a026bff032.acs4.tc.
	bounce.email 1H IN A 52.3.180.22
	bounce.email 1H IN MX 5 bounce.email.wikimedia.org.
	bounce.email 1H IN TXT "v=spf1 a ip4:74.121.51.111 -all"
	reply.email 1H IN A 52.3.180.22
	reply.email 1H IN MX 5 reply.email.wikimedia.org.
	reply.email 1H IN TXT "v=spf1 a ip4:74.121.51.111 -all"

	spop1024._domainkey.email 1H IN TXT "k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDkkVXsWmUfiM+mhp33gqUfjpRoe92/jR/DxHOH/5UEXu1/zfy1Niu23GOsOMiAclXdyG8CDR7cuikdYHZiAYry7crqkKkTWCPrt0YvTTVgS4aIPsfcR59FsTzy3tEpmETPOs31XgRRfXKzI591XsWCxLo6cSTjeHxo0tQGJWejMQIDAQAB"
	; AWS validation CNAME for Acoustic - T188561 T336000
	_c02d3189682d060e348d305b652c2ece.email 1M IN CNAME _d727f5c7066e58d1a23773f6b6ce9dc2.fmfdpfvvyn.acm-validations.aws.

	; DNS Records related to lp.email.wikimedia.org - T336000, T384931
	lp.email 1M IN CNAME pages04.net.
	; AWS validation CNAME for Acoustic landing page - T384931
	_45077a66a799e60855d7546ffdab9847.lp.email 1M IN CNAME _6f10127d42f52c65ff9c62e50e7fd9c9.zfyfvmchrl.acm-validations.aws.


	; "dyna.wikimedia.org." is the focal point of CNAMEs across all our zones for
	; most cases that ultimately map to text-addrs. By using longer-TTL CNAMEs
	; pointing to the dynamic short-TTL entry here, we increase DNS cache hitrates
	; in the general case across all languages/projects, especially when
	; considering edns client subnet fragmentation. Some exceptions still need
	; their own DYNA record rather than a CNAME, such as zone root entries and any
	; name which has other metadata alongside its addresses (e.g. MX, SPF, DMARC).
	; (www.wikipedia.org was a better/previous choice, but it was moved here due to
	; interactions with selective CN censorhsip at the DNS level)
	; February 2024: We reduced this to 300 seconds from the earlier 600 seconds: T140365#9509590
	; May 2025: We reduced this further to 180 seconds from 300 seconds above: T394312.
	dyna 180 IN DYNA geoip!text-addrs

	dumps 1H IN CNAME dumps-lb.eqiad
	dumps-rsync 1H IN CNAME dumps-lb.eqiad

	lists 180 IN DYNA geoip!text-addrs
	lists 1H IN MX 10 lists1004
	lists 1H IN TXT "v=spf1 mx ~all"
	; DMARC record, keep none policy for now, as more work is required, https://phabricator.wikimedia.org/T379517
	_dmarc.lists 1H IN TXT "v=DMARC1; p=none; rua=mailto:dmarc-rua@wikimedia.org;"
	_domainkey.lists 1H IN TXT "o=~; r=postmaster@wikimedia.org;"
	_adsp._domainkey.lists 1H IN TXT "dkim=unknown;"
	wikimedia._domainkey.lists 1H IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7iVvYIGUbjtvFcLTUuN9Lsc1w17f8QHc01BxIr6jHJUMAMyxHSchdU6Il/hX1Or3JyOfdBi35SGqotI3G86xxQE7PZD7u+EediP5uhRTn+opv+nX5hEuxlnty8mPXem0DHhfSL0+3Ciu5WD0mNATb4NwC9jQjy2FzaLHn9D44PwIDAQAB"

	; Debugging tools
	reflect-edns 10 IN DYNA reflect!edns ; Returns explicit EDNS-Client-Subnet, or all-zeros if not present
	reflect-dns 10 IN DYNA reflect!dns ; Returns the recursor exit IP only, ignores EDNS-Client-Subnet
	reflect-both 10 IN DYNA reflect!both ; Returns both of the above together in one response (if no ednsc, returns just 1 record)
	reflect 10 IN DYNA reflect ; GeoDNS debugging - returns best of either above, like real geoip resolution does

	; Geodynamic records
	text-lb 1D IN CNAME dyna.wikimedia.org.
	ncredir-lb 180 IN DYNA geoip!ncredir-addrs
	; February 2024: We reduced this to 300 seconds from the earlier 600 seconds: T140365#9509590
	upload 180 IN DYNA geoip!upload-addrs
	maps 600 IN CNAME upload.wikimedia.org.
	m 1D IN CNAME dyna.wikimedia.org.
	donate 180 IN DYNA geoip!text-addrs
	donate 300 IN MX 10 mx-in1001
	donate 300 IN MX 10 mx-in2001
	donate 5M IN TXT "v=spf1 ip4:185.15.59.0/24 ip4:208.80.152.0/22 ip6:2620:0:860::/46 include:_spf.google.com ip4:74.121.51.111 ~all"
	; Google site verification for https://postmaster.google.com
	donate 300 IN TXT "google-site-verification=JjhlduqLloGdWYGuMopl6ZyeNHh5Exph9dISsMGSo90"
	_dmarc.donate 600 IN TXT "v=DMARC1; p=reject; rua=mailto:dmarc-rua@wikimedia.org;"

	; Servers (alphabetic order) << WHAT PART ABOUT THIS IS SO HARD TO UNDERSTAND?

	; Automated DNS includes
	; Hosts in these sites are completely automated and should be updated via Netbox (except for frack)
	; See https://wikitech.wikimedia.org/wiki/DNS/Netbox
	$INCLUDE netbox/wikimedia.org-ulsfo
	$INCLUDE netbox/wikimedia.org-eqsin
	$INCLUDE netbox/wikimedia.org-esams
	$INCLUDE netbox/wikimedia.org-eqiad
	$INCLUDE netbox/wikimedia.org-codfw
	$INCLUDE netbox/wikimedia.org-drmrs
	$INCLUDE netbox/wikimedia.org-magru

	; Fundraising tech hosts (no automation)
	analytics-codfw 1H IN A 208.80.152.238
	analytics-eqiad 1H IN A 208.80.155.4
	civicrm-codfw 1H IN A 208.80.152.232
	civicrm-eqiad 1H IN A 208.80.155.17
	civicrm 1H IN A 208.80.155.17
	; To be removed after 202602015 - dwisehaupt
	;civi1002 1H IN A 208.80.155.17 ; wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP
	frack-default-nat-codfw 1H IN A 208.80.152.230
	frack-default-nat-eqiad 1H IN A 208.80.155.6
	frack-payments-nat-codfw 1H IN A 208.80.152.229
	frack-payments-nat-eqiad 1H IN A 208.80.155.7
	frbast-eqiad 1H IN A 208.80.155.18
	frbast-codfw 1H IN A 208.80.152.234
	frdata-eqiad 1H IN A 208.80.155.16
	frdata-codfw 1H IN A 208.80.152.237
	frdev-eqiad 1H IN A 208.80.155.14
	frmon-eqiad 1H IN A 208.80.155.9
	frmon-codfw 1H IN A 208.80.152.235
	frmx1001 1H IN A 208.80.155.15
	frmx1002 1H IN A 208.80.155.11
	frmx2002 1H IN A 208.80.152.228

	payments-codfw 1H IN A 208.80.152.227
	payments-eqiad 1H IN A 208.80.155.20
	payments-staging 1H IN A 208.80.155.10

	payments-listener-codfw 1H IN A 208.80.152.233
	payments-listener-eqiad 1H IN A 208.80.155.19

	; Fundraising tech service aliases

	analytics-codfw.frdev 1D IN CNAME analytics-codfw
	analytics-eqiad.frdev 1D IN CNAME analytics-eqiad
	analytics.frdev 1H IN CNAME analytics-codfw.frdev
	civi 1H IN CNAME civicrm-eqiad
	civi.frdev 1H IN CNAME frdev-eqiad
	civicrm.frdev 1H IN CNAME frdev-eqiad
	donorpreferences 1H IN CNAME frdata-eqiad
	fundraising 1H IN CNAME frdata-eqiad
	fundraising.frdev 1H IN CNAME frdata-eqiad
	frbast 1H IN CNAME frbast-eqiad
	frdata 1H IN CNAME frdata-eqiad
	frmon 1H IN CNAME frmon-eqiad
	frmon.frdev 1H IN CNAME frmon-eqiad
	metabase.frdev 1H IN CNAME analytics-codfw.frdev
	payments 5M IN CNAME payments-eqiad
	payments-listener 5M IN CNAME payments-listener-eqiad
	payments-listener.frdev 1H IN CNAME frdev-eqiad
	reports.frdev 1H IN CNAME frdev-eqiad
	superset.frdev 1H IN CNAME analytics-codfw.frdev

	civicrm 300 IN MX 10 mx-in1001
	civicrm 300 IN MX 10 mx-in2001

	; SPF records for DSN, null sender: <>, emails from civicrm and frmxs
	civicrm 1H IN TXT "v=spf1 include:_cidrs.wikimedia.org ~all"
	frmx1001 1H IN TXT "v=spf1 include:_cidrs.wikimedia.org ~all"
	frmx2002 1H IN TXT "v=spf1 include:_cidrs.wikimedia.org ~all"

	; digicert validation - T411785
	_dnsauth.payments 1H IN CNAME _4js5rqrk984hlcbg5a3al06j2cxjiol.dcv.digicert.com.

	; Service aliases

	;;; eqiad
	ntp.eqiad 1H IN CNAME ntp-a.anycast.wmnet.

	;;; ulsfo
	ntp.ulsfo 1H IN CNAME ntp-a.anycast.wmnet.

	;;; codfw
	ntp.codfw 1H IN CNAME ntp-a.anycast.wmnet.

	;;; esams
	ntp.esams 1H IN CNAME ntp-a.anycast.wmnet.

	;;; eqsin
	ntp.eqsin 1H IN CNAME ntp-a.anycast.wmnet.

	;;; drmrs
	ntp.drmrs 1H IN CNAME ntp-a.anycast.wmnet.

	;;; magru
	ntp.magru 1H IN CNAME ntp-a.anycast.wmnet.

	; Round Robin LVS Service records

	;;; eqiad (only records not auto-generated from Netbox)
	donate-lb.eqiad 1H IN A 208.80.154.224 ; same IP of text-lb wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP
	donate-lb.eqiad 1H IN AAAA 2620:0:861:ed1a::1 ; same IP of text-lb wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP
	donate-lb.eqiad 1H IN MX 10 mx-in1001
	donate-lb.eqiad 1H IN MX 50 mx-in2001

	; These legacy entries should eventually move to RESTBase
	cxserver 1D IN CNAME dyna.wikimedia.org.

	; ORES
	ores 1D IN CNAME dyna.wikimedia.org.
	ores-legacy 1D IN CNAME dyna.wikimedia.org.

	;;; ulsfo (only records not auto-generated from Netbox)
	donate-lb.ulsfo 1H IN A 198.35.26.224 ; same IP of text-lb wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP
	donate-lb.ulsfo 1H IN AAAA 2620:0:863:ed1a::1 ; same IP of text-lb wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP
	donate-lb.ulsfo 1H IN MX 10 mx-in1001
	donate-lb.ulsfo 1H IN MX 50 mx-in2001

	;;; eqsin (only records not auto-generated from Netbox)
	donate-lb.eqsin 1H IN A 103.102.166.224 ; same IP of text-lb wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP
	donate-lb.eqsin 1H IN AAAA 2001:df2:e500:ed1a::1 ; same IP of text-lb wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP
	donate-lb.eqsin 1H IN MX 10 mx-in1001
	donate-lb.eqsin 1H IN MX 50 mx-in2001

	;;; codfw
	donate-lb.codfw 1H IN A 208.80.153.224 ; same IP of text-lb wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP
	donate-lb.codfw 1H IN AAAA 2620:0:860:ed1a::1 ; same IP of text-lb wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP

	;;; esams (only records not auto-generated from Netbox)
	donate-lb.esams 1H IN A 185.15.59.224 ; same IP of text-lb wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP
	donate-lb.esams 1H IN AAAA 2a02:ec80:300:ed1a::1 ; same IP of text-lb wmf-zone-validator-ignore=TOO_MANY_PUBLIC_NAMES,MISSING_PTR_FOR_NAME_AND_IP
	donate-lb.esams 1H IN MX 10 mx-in1001
	donate-lb.esams 1H IN MX 50 mx-in2001

	; GeoIP Mappings (T332025)
	measure-eqiad 1D IN CNAME upload-lb.eqiad.wikimedia.org.
	measure-codfw 1D IN CNAME upload-lb.codfw.wikimedia.org.
	measure-esams 1D IN CNAME upload-lb.esams.wikimedia.org.
	measure-ulsfo 1D IN CNAME upload-lb.ulsfo.wikimedia.org.
	measure-eqsin 1D IN CNAME upload-lb.eqsin.wikimedia.org.
	measure-drmrs 1D IN CNAME upload-lb.drmrs.wikimedia.org.
	measure-magru 1D IN CNAME upload-lb.magru.wikimedia.org.

	; Mobile

	advisory.m 1D IN CNAME dyna.wikimedia.org.
	ae.m 1D IN CNAME dyna.wikimedia.org.
	am.m 1D IN CNAME dyna.wikimedia.org.
	amical.m 1D IN CNAME dyna.wikimedia.org.
	api.m 1D IN CNAME dyna.wikimedia.org.
	ar.m 1D IN CNAME dyna.wikimedia.org.
	az.m 1D IN CNAME dyna.wikimedia.org.
	bd.m 1D IN CNAME dyna.wikimedia.org.
	be.m 1D IN CNAME dyna.wikimedia.org.
	br.m 1D IN CNAME dyna.wikimedia.org.
	ca.m 1D IN CNAME dyna.wikimedia.org.
	chapcom.m 1D IN CNAME dyna.wikimedia.org.
	checkuser.m 1D IN CNAME dyna.wikimedia.org.
	cn.m 1D IN CNAME dyna.wikimedia.org.
	co.m 1D IN CNAME dyna.wikimedia.org.
	commons.m 1D IN CNAME dyna.wikimedia.org.
	dk.m 1D IN CNAME dyna.wikimedia.org.
	donate.m 1D IN CNAME dyna.wikimedia.org.
	ec.m 1D IN CNAME dyna.wikimedia.org.
	ee.m 1D IN CNAME dyna.wikimedia.org.
	electcom.m 1D IN CNAME dyna.wikimedia.org.
	et.m 1D IN CNAME dyna.wikimedia.org.
	id.m 1D IN CNAME dyna.wikimedia.org.
	initiatives.m 1D IN CNAME dyna.wikimedia.org.
	id-internal.m 1D IN CNAME dyna.wikimedia.org.
	incubator.m 1D IN CNAME dyna.wikimedia.org.
	fdc.m 1D IN CNAME dyna.wikimedia.org.
	fixcopyright.m 1D IN CNAME dyna.wikimedia.org.
	foundation.m 1D IN CNAME dyna.wikimedia.org.
	fi.m 1D IN CNAME dyna.wikimedia.org.
	ge.m 1D IN CNAME dyna.wikimedia.org.
	gr.m 1D IN CNAME dyna.wikimedia.org.
	hi.m 1D IN CNAME dyna.wikimedia.org.
	legalteam.m 1D IN CNAME dyna.wikimedia.org.
	mai.m 1D IN CNAME dyna.wikimedia.org.
	meta.m 1D IN CNAME dyna.wikimedia.org.
	mk.m 1D IN CNAME dyna.wikimedia.org.
	mx.m 1D IN CNAME dyna.wikimedia.org.
	ng.m 1D IN CNAME dyna.wikimedia.org.
	nl.m 1D IN CNAME dyna.wikimedia.org.
	no.m 1D IN CNAME dyna.wikimedia.org.
	nostalgia.m 1D IN CNAME dyna.wikimedia.org.
	nyc.m 1D IN CNAME dyna.wikimedia.org.
	nz.m 1D IN CNAME dyna.wikimedia.org.
	office.m 1D IN CNAME dyna.wikimedia.org.
	ombuds.m 1D IN CNAME dyna.wikimedia.org.
	otrs-wiki.m 1D IN CNAME dyna.wikimedia.org.
	outreach.m 1D IN CNAME dyna.wikimedia.org.
	quality.m 1D IN CNAME dyna.wikimedia.org.
	pa-us.m 1D IN CNAME dyna.wikimedia.org.
	pl.m 1D IN CNAME dyna.wikimedia.org.
	pt.m 1D IN CNAME dyna.wikimedia.org.
	punjabi.m 1D IN CNAME dyna.wikimedia.org.
	rs.m 1D IN CNAME dyna.wikimedia.org.
	romd.m 1D IN CNAME dyna.wikimedia.org.
	ru.m 1D IN CNAME dyna.wikimedia.org.
	se.m 1D IN CNAME dyna.wikimedia.org.
	species.m 1D IN CNAME dyna.wikimedia.org.
	steward.m 1D IN CNAME dyna.wikimedia.org.
	strategy.m 1D IN CNAME dyna.wikimedia.org.
	test-commons.m 1D IN CNAME dyna.wikimedia.org.
	th.m 1D IN CNAME dyna.wikimedia.org.
	tr.m 1D IN CNAME dyna.wikimedia.org.
	u4c.m 1D IN CNAME dyna.wikimedia.org.
	ua.m 1D IN CNAME dyna.wikimedia.org.
	usability.m 1D IN CNAME dyna.wikimedia.org.
	ve.m 1D IN CNAME dyna.wikimedia.org.
	vote.m 1D IN CNAME dyna.wikimedia.org.
	vrt-wiki.m 1D IN CNAME dyna.wikimedia.org.
	wb.m 1D IN CNAME dyna.wikimedia.org.
	wikimania.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2005.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2006.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2007.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2008.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2009.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2010.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2011.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2012.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2013.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2014.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2015.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2016.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2017.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2018.m 1D IN CNAME dyna.wikimedia.org.
	wikimania2019.m 1D IN CNAME dyna.wikimedia.org.
	wikimaniateam.m 1D IN CNAME dyna.wikimedia.org.
	wikipedia-it-arbcom.m 1D IN CNAME dyna.wikimedia.org.
	wikipedia-pl-arbcom.m 1D IN CNAME dyna.wikimedia.org.
	wikipedia-pl-sysop.m 1D IN CNAME dyna.wikimedia.org.
	wikipedia-zh-arbcom.m 1D IN CNAME dyna.wikimedia.org.

	; Cams

	; Service aliases (alphabetical order)

	; alertmanager API only, no UI.
	; Should be used only when client's config doesn't come from puppet
	alertmanager-eqiad 5M IN CNAME alert1002
	alertmanager-codfw 5M IN CNAME alert2002

	; alerts dashboard/UI
	alerts 5M IN CNAME alert1002

	annual 1D IN CNAME dyna.wikimedia.org.

	apt 300/10 IN DYNA metafo!disc-apt
	apt-staging 1D IN CNAME dyna.wikimedia.org.

	archiva 1H IN CNAME archiva1002

	benefactors 180 IN DYNA geoip!text-addrs
	benefactors 300 IN MX 10 mx-in1001
	benefactors 300 IN MX 10 mx-in2001
	benefactors 1H IN TXT "v=spf1 include:wikimedia.org include:spf.mandrillapp.com -all"
	mandrill._domainkey.benefactors 1H IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;"


	; Mexico Awareness Campaign (T207816)
	bienvenida 1D IN CNAME dyna.wikimedia.org.

	cloudtestidm 1D IN CNAME dyna.wikimedia.org.

	commons-query 1D IN CNAME dyna.wikimedia.org.

	community-crm 180 IN DYNA geoip!text-addrs
	community-crm 300 IN MX 10 mx-in1001
	community-crm 300 IN MX 10 mx-in2001
	community-crm 1H IN TXT "v=spf1 include:_cidrs.wikimedia.org ~all"

	config-master 1D IN CNAME dyna.wikimedia.org.

	contint 5M IN CNAME contint1002.wikimedia.org.

	datahub 1D IN CNAME dyna.wikimedia.org.
	datahub-next 1D IN CNAME dyna.wikimedia.org.

	design 1D IN CNAME dyna.wikimedia.org.

	dbtree 1D IN CNAME dyna.wikimedia.org.

	debmonitor 1D IN CNAME dyna.wikimedia.org.
	debmonitor-next 1D IN CNAME dyna.wikimedia.org.

	dev 1D IN CNAME dyna.wikimedia.org.
	developer 1D IN CNAME dyna.wikimedia.org.
	developers 1D IN CNAME dyna.wikimedia.org.
	doc 1D IN CNAME dyna.wikimedia.org.
	docker-registry 1D IN CNAME dyna.wikimedia.org.
	docs 1D IN CNAME dyna.wikimedia.org.

	helm-charts 1D IN CNAME dyna.wikimedia.org.

	ldap-labs.eqiad 1H IN CNAME seaborgium
	ldap-labs.codfw 1H IN CNAME serpens
	ldap-rw.eqiad 1H IN CNAME seaborgium
	ldap-rw-next.eqiad 1H IN CNAME ldap-rw1001
	ldap-rw.codfw 1H IN CNAME serpens
	ldap-rw-next.codfw 1H IN CNAME ldap-rw2001

	; Gerrit records
	gerrit 300 IN TXT "google-site-verification=ln5JczWUiGqT4sK3yohGgNDKCtUixySt94iBjJKrfak"
	gerrit 180 IN DYNA geoip!gerrit-addrs
	gerrit-spare 180 IN DYNA geoip!gerrit-addrs
	gerrit-replica 180 IN DYNA geoip!gerrit-addrs

	; Gitlab records
	gitlab 300 IN TXT "v=spf1 include:_cidrs.wikimedia.org ~all"
	gitlab 300 IN A 208.80.154.145
	gitlab 300 IN AAAA 2620:0:861:2:208:80:154:145
	gitlab 300 IN TXT "google-site-verification=LKETzxPAjLXm4Bq4G-y-kohjataeTuV3I2-qZny5doU" ; to check spam rates in https://postmaster.google.com
	gitlab-replica-b 300 IN A 208.80.153.8
	gitlab-replica-b 300 IN AAAA 2620:0:860:1:208:80:153:8
	gitlab-replica-a 300 IN A 208.80.154.15
	gitlab-replica-a 300 IN AAAA 2620:0:861:1:208:80:154:15

	graphite 1D IN CNAME dyna.wikimedia.org.
	grafana 1D IN CNAME dyna.wikimedia.org.
	grafana-next 1D IN CNAME dyna.wikimedia.org. ; to replace grafana-beta which has a confusing name
	grafana-rw 1D IN CNAME dyna.wikimedia.org.
	grafana-next-rw 1D IN CNAME dyna.wikimedia.org. ; for sso on grafana-next
	parsoid-rt-tests 1D IN CNAME dyna.wikimedia.org.
	performance 1D IN CNAME dyna.wikimedia.org.
	horizon 1D IN CNAME dyna.wikimedia.org.
	wikitech 1D IN CNAME dyna.wikimedia.org.

	; hcaptcha T397841
	hcaptcha 1D IN CNAME dyna.wikimedia.org.
	assets-hcaptcha 1D IN CNAME dyna.wikimedia.org.
	imgs-hcaptcha 1D IN CNAME dyna.wikimedia.org.
	report-hcaptcha 1D IN CNAME dyna.wikimedia.org.
	sentry-hcaptcha 1D IN CNAME dyna.wikimedia.org.

	icinga 5M IN CNAME alert1002
	icinga-extmon 5M IN CNAME alert1002

	idm 5M IN CNAME idm1001.wikimedia.org.
	idm-test 5M IN CNAME idm-test1001.wikimedia.org.

	idp 5M IN CNAME idp2005.wikimedia.org.
	idp-test 5M IN CNAME idp-test1005.wikimedia.org.
	cloudidp-dev 5M IN CNAME dyna.wikimedia.org.

	intake-logging 180 IN DYNA geoip!text-next
	intake-analytics 1D IN CNAME dyna.wikimedia.org.

	integration 1D IN CNAME dyna.wikimedia.org.
	irc 5M IN CNAME irc2003

	klaxon 5M IN CNAME alert1002
	requestctl 5M IN CNAME alert1002

	metamonitoring 5M IN CNAME alert1002
	metamonitoring-active 5M IN CNAME alert1002
	metamonitoring-passive 5M IN CNAME alert2002

	ldap-eqiad 1H IN CNAME seaborgium
	ldap-codfw 1H IN CNAME serpens

	phabricator 180 IN DYNA geoip!text-addrs
	phabricator 300 IN MX 10 mx-in1001
	phabricator 300 IN MX 10 mx-in2001
	phabricator 1H IN TXT "v=spf1 include:_cidrs.wikimedia.org ~all"
	; Google site verification for https://postmaster.google.com
	phabricator 1H IN TXT "google-site-verification=3HEEpR1KW0brOBi5FUW8c9z0zIshraxZv0wkm2pfqtc"

	login 1D IN CNAME dyna.wikimedia.org.

	librenms 1H IN CNAME netmon1003

	netbox 1D IN CNAME dyna.wikimedia.org.
	netbox-exports 1D IN CNAME dyna.wikimedia.org.

	orchestrator 5M IN CNAME dborch1002

	people 1D IN CNAME dyna.wikimedia.org.

	piwik 1D IN CNAME dyna.wikimedia.org.

	; policy.wikimedia.org was once on wordpress cluster T110203, then came back to WMF T310738
	policy 5M IN CNAME dyna.wikimedia.org.

	prometheus-eqiad 1H IN CNAME dyna.wikimedia.org.
	prometheus-codfw 1H IN CNAME dyna.wikimedia.org.
	prometheus-esams 1H IN CNAME dyna.wikimedia.org.
	prometheus-ulsfo 1H IN CNAME dyna.wikimedia.org.
	prometheus-eqsin 1H IN CNAME dyna.wikimedia.org.
	prometheus-drmrs 1H IN CNAME dyna.wikimedia.org.
	prometheus-magru 1H IN CNAME dyna.wikimedia.org.

	puppetboard 1D IN CNAME dyna.wikimedia.org.
	puppetboard-idptest 1D IN CNAME dyna.wikimedia.org.
	puppetboard-samltest 1D IN CNAME dyna.wikimedia.org.

	releases 1D IN CNAME dyna.wikimedia.org.
	releases-jenkins 1D IN CNAME dyna.wikimedia.org.

	research 1D IN CNAME dyna.wikimedia.org.

	rt 1H IN CNAME dyna.wikimedia.org.

	secure 1D IN CNAME dyna.wikimedia.org.

	security 1D IN CNAME dyna.wikimedia.org.

	stream 1D IN CNAME dyna.wikimedia.org.

	svn 1D IN CNAME dyna.wikimedia.org.

	tendril 1D IN CNAME dyna.wikimedia.org.

	toolhub 1D IN CNAME dyna.wikimedia.org.

	toolsadmin 1D IN CNAME dyna.wikimedia.org.
	toolsadmin-toolsbeta 1D IN CNAME dyna.wikimedia.org.

	url-downloader.eqiad 5M IN CNAME urldownloader1004
	url-downloader.codfw 5M IN CNAME urldownloader2004
	url-downloader 5M IN CNAME url-downloader.eqiad

	zuul 1D IN CNAME dyna.wikimedia.org.

	; Wikis (alphabetic order)

	advisors 1D IN CNAME dyna.wikimedia.org.
	advisory 1D IN CNAME dyna.wikimedia.org.
	ae 1H IN CNAME dyna.wikimedia.org.
	affcom 1D IN CNAME dyna.wikimedia.org.
	am 1D IN CNAME dyna.wikimedia.org.
	amical 1D IN CNAME dyna.wikimedia.org.
	api 1D IN CNAME dyna.wikimedia.org.
	auditcom 1D IN CNAME dyna.wikimedia.org.
	ar 1D IN CNAME dyna.wikimedia.org.
	az 1D IN CNAME dyna.wikimedia.org.
	bd 1D IN CNAME dyna.wikimedia.org.
	be 1D IN CNAME dyna.wikimedia.org.
	board 1D IN CNAME dyna.wikimedia.org.
	boardgovcom 1D IN CNAME dyna.wikimedia.org.
	bookshelf 1D IN CNAME dyna.wikimedia.org.
	br 1D IN CNAME dyna.wikimedia.org.
	ca 1D IN CNAME dyna.wikimedia.org.
	ch 1D IN CNAME dyna.wikimedia.org.
	chair 1D IN CNAME dyna.wikimedia.org.
	chapcom 1D IN CNAME dyna.wikimedia.org.
	checkuser 1D IN CNAME dyna.wikimedia.org.
	cn 1D IN CNAME dyna.wikimedia.org.
	co 1D IN CNAME dyna.wikimedia.org.
	collab 1D IN CNAME dyna.wikimedia.org.
	comcom 1D IN CNAME dyna.wikimedia.org.
	commons 1D IN CNAME dyna.wikimedia.org.
	dk 1D IN CNAME dyna.wikimedia.org.
	ec 1D IN CNAME dyna.wikimedia.org.
	educacao 1D IN CNAME dyna.wikimedia.org.
	education 1D IN CNAME dyna.wikimedia.org.
	ee 1D IN CNAME dyna.wikimedia.org.
	electcom 1D IN CNAME dyna.wikimedia.org.
	et 1D IN CNAME dyna.wikimedia.org.
	exec 1D IN CNAME dyna.wikimedia.org.
	fdc 1D IN CNAME dyna.wikimedia.org.
	fi 1D IN CNAME dyna.wikimedia.org.
	fixcopyright 1D IN CNAME dyna.wikimedia.org.
	foundation 1D IN CNAME dyna.wikimedia.org.
	ge 1D IN CNAME dyna.wikimedia.org.
	gr 1D IN CNAME dyna.wikimedia.org.
	grants 1D IN CNAME dyna.wikimedia.org.
	hi 1D IN CNAME dyna.wikimedia.org.
	hu 1D IN CNAME dyna.wikimedia.org.
	id 1D IN CNAME dyna.wikimedia.org.
	id-internal 1D IN CNAME dyna.wikimedia.org.
	iegcom 1D IN CNAME dyna.wikimedia.org.
	il 1D IN CNAME dyna.wikimedia.org.
	incubator 1D IN CNAME dyna.wikimedia.org.
	initiatives 1D IN CNAME dyna.wikimedia.org.
	internal 1D IN CNAME dyna.wikimedia.org.
	it 1D IN CNAME dyna.wikimedia.org.
	kr 1D IN CNAME dyna.wikimedia.org.
	legalteam 1D IN CNAME dyna.wikimedia.org.
	mai 1D IN CNAME dyna.wikimedia.org.
	meta 1D IN CNAME dyna.wikimedia.org.
	mk 1D IN CNAME dyna.wikimedia.org.
	movementroles 1D IN CNAME dyna.wikimedia.org.
	mx 1D IN CNAME dyna.wikimedia.org.
	ng 1D IN CNAME dyna.wikimedia.org.
	nl 1D IN CNAME dyna.wikimedia.org.
	no 1D IN CNAME dyna.wikimedia.org.
	noboard-chapters 1D IN CNAME dyna.wikimedia.org.
	nostalgia 1D IN CNAME dyna.wikimedia.org.
	nyc 1D IN CNAME dyna.wikimedia.org.
	nz 1D IN CNAME dyna.wikimedia.org.
	office 1D IN CNAME dyna.wikimedia.org.
	ombuds 1D IN CNAME dyna.wikimedia.org.
	ombudsmen 1D IN CNAME dyna.wikimedia.org.
	otrs-wiki 1D IN CNAME dyna.wikimedia.org.
	outreach 1D IN CNAME dyna.wikimedia.org.
	pa-us 1D IN CNAME dyna.wikimedia.org.
	pt 1D IN CNAME dyna.wikimedia.org.
	punjabi 1D IN CNAME dyna.wikimedia.org.
	pl 1D IN CNAME dyna.wikimedia.org.
	projectcom 1D IN CNAME dyna.wikimedia.org.
	quality 1D IN CNAME dyna.wikimedia.org.
	romd 1D IN CNAME dyna.wikimedia.org.
	rs 1D IN CNAME dyna.wikimedia.org.
	ru 1D IN CNAME dyna.wikimedia.org.
	se 1D IN CNAME dyna.wikimedia.org.
	searchcom 1D IN CNAME dyna.wikimedia.org.
	spcom 1D IN CNAME dyna.wikimedia.org.
	species 1D IN CNAME dyna.wikimedia.org.
	steward 1D IN CNAME dyna.wikimedia.org.
	strategy 1D IN CNAME dyna.wikimedia.org.
	techconduct 1D IN CNAME dyna.wikimedia.org.
	test-commons 1D IN CNAME dyna.wikimedia.org.
	th 1D IN CNAME dyna.wikimedia.org.
	tr 1D IN CNAME dyna.wikimedia.org.
	transitionteam 1D IN CNAME dyna.wikimedia.org.
	u4c 1D IN CNAME dyna.wikimedia.org.
	ua 1D IN CNAME dyna.wikimedia.org.
	uk 1D IN CNAME dyna.wikimedia.org.
	usability 1D IN CNAME dyna.wikimedia.org.
	ve 1D IN CNAME dyna.wikimedia.org.
	vote 1D IN CNAME dyna.wikimedia.org.
	vrt-wiki 1D IN CNAME dyna.wikimedia.org.
	wb 1D IN CNAME dyna.wikimedia.org.
	wikimania 1D IN CNAME dyna.wikimedia.org.
	wikimania2005 1D IN CNAME dyna.wikimedia.org.
	wikimania2006 1D IN CNAME dyna.wikimedia.org.
	wikimania2007 1D IN CNAME dyna.wikimedia.org.
	wikimania2008 1D IN CNAME dyna.wikimedia.org.
	wikimania2009 1D IN CNAME dyna.wikimedia.org.
	wikimania2010 1D IN CNAME dyna.wikimedia.org.
	wikimania2011 1D IN CNAME dyna.wikimedia.org.
	wikimania2012 1D IN CNAME dyna.wikimedia.org.
	wikimania2013 1D IN CNAME dyna.wikimedia.org.
	wikimania2014 1D IN CNAME dyna.wikimedia.org.
	wikimania2015 1D IN CNAME dyna.wikimedia.org.
	wikimania2016 1D IN CNAME dyna.wikimedia.org.
	wikimania2017 1D IN CNAME dyna.wikimedia.org.
	wikimania2018 1D IN CNAME dyna.wikimedia.org.
	wikimania2019 1D IN CNAME dyna.wikimedia.org.
	wikimaniateam 1D IN CNAME dyna.wikimedia.org.
	wikipedia-pl-arbcom 1D IN CNAME dyna.wikimedia.org.
	wikipedia-pl-sysop 1D IN CNAME dyna.wikimedia.org.
	wikipedia-it-arbcom 1D IN CNAME dyna.wikimedia.org.
	wikipedia-zh-arbcom 1D IN CNAME dyna.wikimedia.org.
	www 1D IN CNAME dyna.wikimedia.org.

	; Common domain for auth cookie sharing between wikis
	auth 1D IN CNAME dyna.wikimedia.org.

	; Other websites (NO wikis!)
	2030 1D IN CNAME dyna.wikimedia.org.
	airflow 1D IN CNAME dyna.wikimedia.org.
	airflow-analytics-product 1D IN CNAME dyna.wikimedia.org.
	airflow-analytics-test 1D IN CNAME dyna.wikimedia.org.
	airflow-fr-tech 1D IN CNAME dyna.wikimedia.org.
	airflow-ml 1D IN CNAME dyna.wikimedia.org.
	airflow-platform-eng 1D IN CNAME dyna.wikimedia.org.
	airflow-research 1D IN CNAME dyna.wikimedia.org.
	airflow-search 1D IN CNAME dyna.wikimedia.org.
	airflow-sre 1D IN CNAME dyna.wikimedia.org.
	airflow-test-k8s 1D IN CNAME dyna.wikimedia.org.
	airflow-wikidata 1D IN CNAME dyna.wikimedia.org.
	airflow-wmde 1D IN CNAME dyna.wikimedia.org.
	analytics 1D IN CNAME dyna.wikimedia.org.
	blog 1H IN CNAME blog-wikimedia-org.go-vip.net.
	bugs 1D IN CNAME dyna.wikimedia.org.
	bugzilla 1D IN CNAME dyna.wikimedia.org.
	bug-attachment 1D IN CNAME dyna.wikimedia.org.
	careers 1D IN CNAME dyna.wikimedia.org.
	gh-mail 1H IN MX 10 mxa.mailgun.org.
	gh-mail 1H IN MX 10 mxb.mailgun.org.
	gh-mail 1H IN TXT "v=spf1 include:mg-spf.greenhouse.io ~all"
	; Updates requested in T348335
	email.gh-mail 1H IN CNAME mailgun.org.
	mailo._domainkey 1H IN TXT "k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDsCM/wv9cgbIAwNt2mDHSxgeEmwvvJW99zCdy9J2yuFykNA2r7ZEXjl33CsoEqODCorPFEsgn3zg8ixSetXcujgUR0YuNRYSbhnaK+lW1nDyjYsW2G6Snev7Wz20tpGMGIQbVQPMOJNSl5yoBnvZBPB5Uajvu0pZTcKJMSnlGd7wIDAQAB"
	codesearch 1D IN CNAME dyna.wikimedia.org.
	coffee 1D IN CNAME dyna.wikimedia.org.
	cs 1D IN CNAME dyna.wikimedia.org.
	cz 1D IN CNAME dyna.wikimedia.org.
	datasets 1D IN CNAME dyna.wikimedia.org.
	datasets-config 1D IN CNAME dyna.wikimedia.org.
	datasets-config-next 1D IN CNAME dyna.wikimedia.org.
	diff 1H IN CNAME blog-wikimedia-org.go-vip.net.
	download 1D IN CNAME dyna.wikimedia.org.
	etherpad 1D IN CNAME dyna.wikimedia.org.
	growthbook 1D IN CNAME dyna.wikimedia.org.
	growthbook-next 1D IN CNAME dyna.wikimedia.org.
	growthbook-api 1D IN CNAME dyna.wikimedia.org.
	growthbook-api-next 1D IN CNAME dyna.wikimedia.org.
	jobs 1D IN CNAME dyna.wikimedia.org.
	labs 1D IN CNAME dyna.wikimedia.org.
	; deprecated but kept for compatibility, see RT #6769
	labsconsole 1D IN CNAME dyna.wikimedia.org.
	logstash 1D IN CNAME dyna.wikimedia.org.
	moon 1D IN CNAME dyna.wikimedia.org.
	mpic 1D IN CNAME dyna.wikimedia.org.
	mpic-next 1D IN CNAME dyna.wikimedia.org.
	netbox-next 1D IN CNAME dyna.wikimedia.org.
	noc 1D IN CNAME dyna.wikimedia.org.
	old-bugzilla 1D IN CNAME dyna.wikimedia.org.
	one 1H IN CNAME messaging-wikimedia-org.go-vip.net.
	planet 1D IN CNAME dyna.wikimedia.org.
	test-kitchen 1D IN CNAME dyna.wikimedia.org.
	test-kitchen-next 1D IN CNAME dyna.wikimedia.org.
	ar.planet 1D IN CNAME dyna.wikimedia.org.
	bg.planet 1D IN CNAME dyna.wikimedia.org.
	cs.planet 1D IN CNAME dyna.wikimedia.org.
	da.planet 1D IN CNAME dyna.wikimedia.org.
	de.planet 1D IN CNAME dyna.wikimedia.org.
	el.planet 1D IN CNAME dyna.wikimedia.org.
	en.planet 1D IN CNAME dyna.wikimedia.org.
	es.planet 1D IN CNAME dyna.wikimedia.org.
	fo.planet 1D IN CNAME dyna.wikimedia.org.
	fr.planet 1D IN CNAME dyna.wikimedia.org.
	gmq.planet 1D IN CNAME dyna.wikimedia.org.
	id.planet 1D IN CNAME dyna.wikimedia.org.
	is.planet 1D IN CNAME dyna.wikimedia.org.
	it.planet 1D IN CNAME dyna.wikimedia.org.
	nb.planet 1D IN CNAME dyna.wikimedia.org.
	nn.planet 1D IN CNAME dyna.wikimedia.org.
	no.planet 1D IN CNAME dyna.wikimedia.org.
	pl.planet 1D IN CNAME dyna.wikimedia.org.
	pt.planet 1D IN CNAME dyna.wikimedia.org.
	ro.planet 1D IN CNAME dyna.wikimedia.org.
	ru.planet 1D IN CNAME dyna.wikimedia.org.
	sq.planet 1D IN CNAME dyna.wikimedia.org.
	sv.planet 1D IN CNAME dyna.wikimedia.org.
	uk.planet 1D IN CNAME dyna.wikimedia.org.
	zh.planet 1D IN CNAME dyna.wikimedia.org.
	puppet 5M IN CNAME puppetmaster1001.eqiad.wmnet.
	superset 1D IN CNAME dyna.wikimedia.org.
	superset-next 1D IN CNAME dyna.wikimedia.org.
	transparency 1D IN CNAME dyna.wikimedia.org.
	transparency-archive 1D IN CNAME dyna.wikimedia.org.
	search 1D IN CNAME dyna.wikimedia.org.
	shop 1D IN CNAME dyna.wikimedia.org.
	soundlogo 1H IN CNAME wikimediasoundlogo.go-vip.net.
	spiderpig 1D IN CNAME dyna.wikimedia.org.
	store 1H IN CNAME c.ssl.shopify.com.
	static-bugzilla 1D IN CNAME dyna.wikimedia.org.
	static-codereview 1D IN CNAME dyna.wikimedia.org.
	stats 1D IN CNAME dyna.wikimedia.org.
	status 1D IN CNAME dyna.wikimedia.org.
	techblog 5M IN CNAME techblog-wikimedia-org.go-vip.net.
	ticket 1D IN CNAME dyna.wikimedia.org.
	mirrors 5M IN CNAME mirror1001
	yarn 1D IN CNAME dyna.wikimedia.org.
	turnilo 1D IN CNAME dyna.wikimedia.org.
	turnilo-next 1D IN CNAME dyna.wikimedia.org.
	schema 1D IN CNAME dyna.wikimedia.org.
	thanos 1D IN CNAME dyna.wikimedia.org.
	trace 1D IN CNAME dyna.wikimedia.org.
	os-reports 1D IN CNAME dyna.wikimedia.org.
	enterprise 1D IN CNAME dyna.wikimedia.org.
	unseen 1D IN CNAME dyna.wikimedia.org.
	wmf-navigator 1D IN CNAME dyna.wikimedia.org.
	zarcillo 1D IN CNAME dyna.wikimedia.org.
	wikitech-static 5M IN A 3.126.27.158 ; wmf-zone-validator-ignore=MISSING_PTR_FOR_NAME_AND_IP
	labtesthorizon 1D IN CNAME dyna.wikimedia.org.

templates/wikimedia.org - operations/dns - Gitiles