{"id":48110512,"url":"https://github.com/rsclarke/terraform-cloudflare-fastmail-email","last_synced_at":"2026-04-04T16:04:41.631Z","repository":{"id":46205484,"uuid":"336467947","full_name":"rsclarke/terraform-cloudflare-fastmail-email","owner":"rsclarke","description":"MX, SPF, DKIM and DMARC records with MTA-STS policy for email hosted by Fastmail","archived":false,"fork":false,"pushed_at":"2026-03-26T09:39:52.000Z","size":17,"stargazers_count":5,"open_issues_count":0,"forks_count":3,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-03-27T02:11:56.111Z","etag":null,"topics":["cloudflare","dkim","dmarc","email","mta-sts","mx","security","spam-protection","spf","terraform"],"latest_commit_sha":null,"homepage":"https://registry.terraform.io/modules/rsclarke/fastmail-email/cloudflare/latest","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rsclarke.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"rsclarke","thanks_dev":"u/gh/rsclarke"}},"created_at":"2021-02-06T06:01:33.000Z","updated_at":"2026-03-26T09:37:40.000Z","dependencies_parsed_at":"2022-09-11T02:24:04.553Z","dependency_job_id":null,"html_url":"https://github.com/rsclarke/terraform-cloudflare-fastmail-email","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/rsclarke/terraform-cloudflare-fastmail-email","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rsclarke%2Fterraform-cloudflare-fastmail-email","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rsclarke%2Fterraform-cloudflare-fastmail-email/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rsclarke%2Fterraform-cloudflare-fastmail-email/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rsclarke%2Fterraform-cloudflare-fastmail-email/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rsclarke","download_url":"https://codeload.github.com/rsclarke/terraform-cloudflare-fastmail-email/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rsclarke%2Fterraform-cloudflare-fastmail-email/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31278285,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-01T06:57:45.811Z","status":"ssl_error","status_checked_at":"2026-04-01T06:57:42.389Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cloudflare","dkim","dmarc","email","mta-sts","mx","security","spam-protection","spf","terraform"],"created_at":"2026-04-04T16:04:40.957Z","updated_at":"2026-04-04T16:04:41.624Z","avatar_url":"https://github.com/rsclarke.png","language":"HCL","funding_links":["https://github.com/sponsors/rsclarke","https://thanks.dev/u/gh/rsclarke"],"categories":[],"sub_categories":[],"readme":"# terraform-cloudflare-fastmail-email\n\nMX, SPF, DKIM and DMARC records with MTA-STS policy (via [terraform-cloudflare-mta-sts](https://github.com/rsclarke/terraform-cloudflare-mta-sts)) for email hosted by Fastmail.\n\nThis creates `cloudflare_dns_record` resources for MX, SPF, DKIM, DMARC and MTA-STS of the given `zone_id` suitable for [fastmail.com](https://fastmail.com).  A Cloudflare Worker as part of the [terraform-cloudflare-mta-sts](https://github.com/rsclarke/terraform-cloudflare-mta-sts) dependency serves the MTA-STS policy.\n\nThe SPF policy includes Fastmail by default and rejects all others (`-all`), additional terms can be specified using the `spf_terms` variable.\n\nThe DMARC policy is set to reject and you must provide an email address for DMARC Aggregate and Failure reports through the `dmarc_rua` and `dmarc_ruf` variables respectively.  Similarly, a TLS aggregate reporting location (`mailto:` or `https:`) must be specified in the `tlsrpt_rua` variable.\n\n## Usage\n\n```terraform\n\nresource \"cloudflare_zone\" \"example_com\" {\n  zone = \"example.com\"\n}\n\nmodule {\n  source = \"rsclarke/fastmail-email/cloudflare\"\n\n  account_id = cloudflare_account.example.id\n  zone_id    = cloudflare_zone.example_com.id\n  zone_name  = cloudflare_zone.example_com.name\n\n  dmarc_rua = [\"dmarc_rua@example.net\"]\n  dmarc_ruf = [\"dmarc_ruf@example.net\", \"dmarc_ruf@example.org\"]\n  spf_terms = [\"-ip4:192.0.2.0/24\", \"+ip6:2001:DB8::/32\"]\n\n  mta_sts_mode    = \"enforce\"\n  mta_sts_mx      = [\"mx.example.net\"]\n  mta_sts_max_age = 604800\n  tlsrpt_rua      = [\"mailto:tls_report@example.org\", \"https://example.org/mta-sts/report\"]\n}\n```\n\n## Providers\n\n| Name | Version |\n|------|---------|\n| cloudflare | `\u003e= 2.0` |\n\n## Inputs\n\n| Name | Description | Type | Required |\n|------|-------------|------|:--------:|\n| account_id | Cloudflare Account ID | `string` | yes |\n| zone_id | Cloudflare Zone ID | `string` | yes |\n| zone_name | Cloudflare Zone Name | `string` | yes |\n| dmarc_rua | Email addresses for DMARC Aggregate reports (excluding `mailto:`), at least one and contains the `@` symbol. | `list(string)` | yes |\n| dmarc_rua | Email addresses for DMARC Failure (or Forensic) reports (excluding `mailto:`), at least one and contains the `@` symbol. | `list(string)` | yes |\n| spf_terms | Additional SPF terms to include, `include:spf.messagingengine.com -all` are already provided. | `list(string)` | no |\n| mta_sts_mode | Sending MTA policy application, [rfc8461#section-5](https://tools.ietf.org/html/rfc8461#section-5).  Default `testing` | `string` | no |\n| mta_sts_mx | List of additional permitted MX hosts for the MTA STS policy. This does not create the resources for. | `list(string)` | no |\n| mta_sts_max_age | Maximum lifetime of the MTA STS policy in seconds, up to 31557600, defaults to 604800 (1 week) | `number` | no |\n| tlsrpt_rua | Locations to which MTA STS aggregate reports about policy violations should be sent, either `mailto:` or `https:` schema. | `list(string)` | yes |\n\n## Outputs\n\nThis module does not expose any outputs.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frsclarke%2Fterraform-cloudflare-fastmail-email","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frsclarke%2Fterraform-cloudflare-fastmail-email","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frsclarke%2Fterraform-cloudflare-fastmail-email/lists"}