@ts-cloud/core 0.7.102 → 0.7.104

package/dist/types.d.ts

@@ -426,6 +426,16 @@ export interface InfrastructureConfig {
      */
     realtime?: RealtimeConfig;
     dns?: DnsConfig;
+    /**
+     * Mail DNS for domains this deployment sends mail from.
+     *
+     * A domain that sends mail needs MX, SPF, DKIM and DMARC, and getting any of
+     * them wrong is invisible: mail lands in spam or is dropped by the receiver
+     * with nothing surfaced to the sender. Declaring it here lets the deploy
+     * publish the records rather than leaving them to be typed by hand and
+     * forgotten.
+     */
+    mail?: MailConfig;
     security?: SecurityConfig;
     monitoring?: MonitoringConfig;
     api?: ApiConfig;
@@ -841,6 +851,39 @@ export interface SharedPathSpec {
 }
 /** A shared path: a release-relative path, or {@link SharedPathSpec}. */
 export type SharedPathEntry = string | SharedPathSpec;
+/**
+ * Mail DNS provisioning for a deployment.
+ *
+ * Opt-in: absent means the deploy touches no mail records at all, which is the
+ * right default for the many apps that send nothing.
+ */
+export interface MailConfig {
+    /** Set false to keep the block for reference without publishing records. */
+    enabled?: boolean;
+    /** Mail server hostname that receives for these domains. */
+    host: string;
+    /**
+     * Domains to publish records for. Defaults to every site domain, since a
+     * deployment that sends mail almost always sends as the site it serves.
+     */
+    domains?: string[];
+    /** Public IPv4 authorised in SPF. Defaults to the app server's own IP. */
+    ip?: string;
+    /** Extra SPF mechanisms, e.g. `include:amazonses.com`. */
+    spfIncludes?: string[];
+    /** DKIM selector. Convention is `default`. */
+    dkimSelector?: string;
+    /**
+     * DKIM public key, per domain. Omitting a domain skips only its DKIM record:
+     * publishing an empty key is worse than publishing none, because a broken
+     * signature is a stronger negative signal than an unsigned message.
+     */
+    dkimPublicKeys?: Record<string, string>;
+    /** DMARC policy. `none` (report only) unless stated otherwise. */
+    dmarcPolicy?: 'none' | 'quarantine' | 'reject';
+    /** Address for aggregate DMARC reports. */
+    dmarcReportTo?: string;
+}
 export interface SiteConfig {
     /**
      * Directory to deploy.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ts-cloud/core",
   "type": "module",
-  "version": "0.7.102",
+  "version": "0.7.104",
   "description": "Core CloudFormation generation library for ts-cloud",
   "author": "Chris Breuer <chris@stacksjs.com>",
   "license": "MIT",
@@ -31,7 +31,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@ts-cloud/aws-types": "0.7.102"
+    "@ts-cloud/aws-types": "0.7.104"
   },
   "devDependencies": {
     "typescript": "^7.0.2"