Merge pull request #1805 from cloud-gov/spf-dns

Adding in NAT GW IPs to SPF
cloud-gov · Dec 4, 2024 · 3d97818 · 3d97818
2 parents 729bd5a + 5d2587e
commit 3d97818
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/terraform/stacks/dns/validators.tf b/terraform/stacks/dns/validators.tf
@@ -20,7 +20,7 @@ resource "aws_route53_record" "cloud_gov_cloud_gov_txt" {
   ttl     = 300
 
   records = [
-    "v=spf1 include:mail.zendesk.com include:_spf.google.com ~all",
+    "v=spf1 include:mail.zendesk.com include:_spf.google.com ip4:${data.terraform_remote_state.tooling.outputs.nat_egress_ip_az1} ip4:${data.terraform_remote_state.tooling.outputs.nat_egress_ip_az2} ~all",
     "google-site-verification=jxczK0Pz1ybEFx79BlXIfeX2Cc5vs2YQuqvLnTYF9Bw",
   ]
 }