Ansible: Add iodef tag to the CAA record.

Get an email for failed CSRs.

Ansible/roles/router/files/nsd/nehe.sr

@@ -2,7 +2,7 @@
 $TTL 1h
 $ORIGIN nehe.sr.
 @               IN      SOA     ns1.shore.co.il.     hostmaster (
-        2021050201
+        2024122601
         1h
         5m
         4w
@@ -15,6 +15,7 @@ $ORIGIN nehe.sr.
         IN      SPF     "v=spf1 +mx -all"
         IN      MX      10      smtp.shore.co.il.
         IN      CAA     128 issue "letsencrypt.org"
+        IN      CAA     128 iodef "mailto:security@shore.co.il"
 
 
 _imaps._tcp IN  SRV 0 1 993 imap.shore.co.il.

Ansible/roles/router/files/nsd/nehes.co

@@ -2,7 +2,7 @@
 $TTL 1h
 $ORIGIN nehes.co.
 @               IN      SOA     ns1.shore.co.il.     hostmaster (
-        2021071401
+        2024122601
         1h
         5m
         4w
@@ -15,6 +15,7 @@ $ORIGIN nehes.co.
         IN      SPF     "v=spf1 +mx -all"
         IN      MX      10      smtp.shore.co.il.
         IN      CAA     128 issue "letsencrypt.org"
+        IN      CAA     128 iodef "mailto:security@shore.co.il"
 
 
 _imaps._tcp IN  SRV 0 1 993 imap.shore.co.il.

Ansible/roles/router/files/nsd/shore.co.il

@@ -2,7 +2,7 @@
 $TTL 1h
 $ORIGIN shore.co.il.
 @               IN      SOA     ns1     hostmaster (
-        2024020301 ; Serial
+        2024122601 ; Serial
         4h         ; Refresh
         1h         ; Retry
         4w         ; Expire
@@ -16,6 +16,7 @@ $ORIGIN shore.co.il.
         IN      SPF     "v=spf1 +mx -all"
         IN      MX      10      smtp
         IN      CAA     128 issue "letsencrypt.org"
+        IN      CAA     128 iodef "mailto:security@shore.co.il"
 
 ns1     IN      A       62.219.131.121
         IN      SPF     "v=spf1 -all"