feat(aws/route53): add DKIM and dystopia.city apex records

[panicboat]

Summary

• Add Google Workspace DKIM public keys for both zones (google._domainkey.panicboat.net, google._domainkey.dystopia.city).
• Add Google Search Console verification TXT record on the dystopia.city apex.
• Add single-record Google Workspace MX (1 smtp.google.com.) on the dystopia.city apex.
• Rename the panicboat DKIM resource to panicboat_net_google_domainkey_txt for symmetry with the newly added dystopia counterpart. State migration used a temporary moved block that has already been consumed and removed within this branch.

Notes

• 2048-bit DKIM keys exceed the 255-char DNS <character-string> limit, so each value is split into two adjacent character-strings inside a single RR (RFC 1035 concatenates them for the receiver). The AWS provider wraps the whole value in outer quotes on our behalf, so only the inner " " boundary is emitted in HCL.
• The moved block was applied and then removed within the same branch; a subsequent terragrunt plan reports "No changes."

Test plan

• terragrunt plan clean before each apply stage.
• terragrunt apply succeeded for each record — visible via aws route53 list-resource-record-sets and dig @8.8.8.8.
• terragrunt plan after removing the moved block reports "No changes."
• Google Search Console verification succeeds for dystopia.city.
• Google Workspace inbound mail delivery to dystopia.city works end-to-end.
• DKIM signing enabled in Google Workspace admin for both domains once the DKIM records are picked up.

Summary by CodeRabbit

• New Features
  • Added Google Workspace email authentication records for panicboat.net and dystopia.city.
  • Added domain verification and mail-routing records for dystopia.city.
  • Updated DNS documentation to cover both domains.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 1c596961-5fb7-4f79-98bf-d1c910096cea

📥 Commits

Reviewing files that changed from the base of the PR and between 712a6a0 and 2c2aaeb.

📒 Files selected for processing (1)

• aws/route53/modules/main.tf

---

📝 Walkthrough

Walkthrough

The Route53 module now documents both hosted zones and adds Google Workspace DKIM, verification TXT, and MX records for panicboat.net and dystopia.city.

Changes

Google Workspace DNS configuration

Layer / File(s)	Summary
Domain records and hosted-zone description aws/route53/modules/main.tf	The module description covers both hosted zones. It adds DKIM TXT records for both domains, a verification TXT record for dystopia.city, and an apex MX record targeting smtp.google.com.

Estimated code review effort: 2 (Simple) | ~10 minutes

Poem

A rabbit checked the DNS with care,
Two domains now send keys through air.
TXT strings split, MX pointing right,
Google records set just right.
Hop, hop—the hosted zones are bright!

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}