TTS DNS configuration
This repository holds the source code for configuring DNS for domains managed by GSA TTS, including 18F and the Presidential Innovation Fellows. Please also see the blog post written about this repository and its benefit to government.
Assuming you're TTS staff, it's recommended that you make the change in a branch on this repository itself, rather than on a fork, because the credentials aren't shared with forks. (The
master branch is protected to limit write access only to certain staff, and to ensure history doesn't get overwritten, etc.)
- Is the domain pointing to the right nameservers? In other words, is there a file for the domain under
- Yes: Continue to next step.
- Add a file for the domain (or subdomain, if the second-level domain isn't being added), to create the public hosted zone.
- After the pull request is merged, to get the name servers for your domain check the output for your build in CircleCI. If you need further assistance, check with #admins-dns.
- Change the nameservers for the domain to point to AWS.
.govdomains, this will be done by the "domain manager" in dotgov.gov. The domain manager is likely someone in the respective agency's IT department.
- Add the relevant additional record sets. In Terraform, these are known as
aws_route53_records. Generally speaking, the required arguments are:
evaluate_target_healthis also required and
ttlis not allowed.
ttlis also required and
evaluate_target_healthis not allowed.
It's worth noting that if you are pointing to a CloudFront distro, you should use Route 53's own
alias and not a CNAME record. In fact, CNAMEing a top-level domain (or the top level of a delegated subdomain) is not allowed in DNS. See the various examples in the repo, such as this one.
On merge, changes are deployed to an AWS account hosting the Route53 records automatically by a CircleCI job.
Please note: only production systems with an ATO that are categorized as Low impact should have their DNS configuration here. If you wish to create DNS records for pre-production systems, please use the domain
sandbox.gov which is available in the TTS Sandbox account.
This project is in the public domain within the United States, and copyright and related rights in the work worldwide are waived through the CC0 1.0 Universal public domain dedication.
All contributions to this project will be released under the CC0 dedication. By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.