Read about what I learnt while implementing this Terraform Provider.
This provider is on published on the Terraform registry.
You can find resources and data sources
documentation
there or here.
Requirements
- Terraform > v1.0
- Go 1.16 (to build the provider plugin)
Installing and Using this Plugin
You most likely want to download the provider from Terraform
Registry.
If you want or need to install the provider locally, take a look at
INSTALL.
This provider is published and available there. If you want to use it, just
add the following to your terraform.tf
:
terraform {
required_providers {
hetznerdns = {
source = "timohirt/hetznerdns"
version = "2.1.0"
}
}
required_version = ">= 1.0"
}
Then run terraform init
to download the provider.
Authentication
Once installed you have three options to provide the required API token that
is used to authenticate at the Hetzner DNS API.
Enter API Token when needed
You can enter it every time you run terraform
.
Add the following to your terraform.tf
:
variable "hetznerdns_token" {}
provider "hetznerdns" {
apitoken = var.hetznerdns_token
}
Now, assign your API token to hetznerdns_token
in terraform.tfvars
:
hetznerdns_token = "kkd993i3kkmm4m4m4"
You don't have to enter the API token anymore.
Inject the API Token via the Environment
Assign the API token to HETZNER_DNS_API_TOKEN
env variable.
export HETZNER_DNS_API_TOKEN=<your api token>
The provider uses this token and you don't have to enter it
anymore.
Example Usage
# Specify a zone for a domain (example.com)
resource "hetznerdns_zone" "example_com" {
name = "example.com"
ttl = 60
}
# Handle root (example.com)
resource "hetznerdns_record" "example_com_root" {
zone_id = hetznerdns_zone.example_com.id
name = "@"
value = hcloud_server.server_name.ipv4_address
type = "A"
# You only need to set a TTL if it's different from the zone's TTL above
ttl = 300
}
# Handle wildcard subdomain (*.example.com)
resource "hetznerdns_record" "all_example_com" {
zone_id = hetznerdns_zone.example_com.id
name = "*"
value = hcloud_server.server_name.ipv4_address
type = "A"
}
# Handle specific subdomain (books.example.com)
resource "hetznerdns_record" "books_example_com" {
zone_id = hetznerdns_zone.example_com.id
name = "books"
value = hcloud_server.server_name.ipv4_address
type = "A"
}
# Handle email (MX record with priority 10)
resource "hetznerdns_record" "example_com_email" {
zone_id = hetznerdns_zone.example_com.id
name = "@"
value = "10 mail.example.com"
type = "MX"
}
# SPF record
resource "hetznerdns_record" "example_com_spf" {
zone_id = hetznerdns_zone.example_com.id
name = "@"
# The entire value needs to be enclosed in quotes in the zone file, if it contains a space or a quote. For Terraform, you need to escape these "inner" quotes:
value = "\"v=spf1 ip4:1.2.3.4 -all\""
# Or let `jsonencode()` take care of the escaping:
value = jsonencode("v=spf1 ip4:1.2.3.4 -all")
type = "TXT"
}