refactor: switch to hcloud dns

Signed-off-by: Sefa Eyeoglu <[e-mail]>

.terraform.lock.hcl

···
 # This file is maintained automatically by "tofu init".
 # Manual edits may be lost in future updates.
 
-provider "registry.opentofu.org/timohirt/hetznerdns" {
-  version     = "2.2.0"
-  constraints = "~> 2.2.0"
+provider "registry.opentofu.org/hetznercloud/hcloud" {
+  version     = "1.57.0"
+  constraints = "1.57.0"
   hashes = [
-    "h1:HyskQAglrOueur79gSCBgx9MNDOs0tz39aNYQiFgxz8=",
-    "zh:5bb0ab9f62be3ed92070235e507f3c290491d51391ef4edcc70df53b65a83019",
-    "zh:5ccdfac7284f5515ac3cff748336b77f21c64760e429e811a1eeefa8ebb86e12",
-    "zh:687c35665139ae37c291e99085be2e38071f6b355c4e1e8957c5a6a3bcdf9caf",
-    "zh:6de27f0d0d1513b3a4b7e81923b4a8506c52759bd466e2b4f8156997b0478931",
-    "zh:85770a9199a4c2d16ca41538d7a0f7a7bfc060678104a1faac19213e6f0a800c",
-    "zh:a5ff723774a9ccfb27d5766c5e6713537f74dd94496048c89c5d64dba597e59e",
-    "zh:bf9ab76fd37cb8aebb6868d73cbe8c08cee36fc25224cc1ef5949efa3c34b06c",
-    "zh:db998fe3bdcd4902e99fa470bb3f355883170cf4c711c8da0b5f1f4510f1be41",
+    "h1:Xk+Whn6wnhEJEeiO/mPII/mOL+buHLj05AKy4TbDz3U=",
+    "zh:016ecc39328f34f6c0ffa413598f354824f7878c89cd031f123edb4bc8a687a2",
+    "zh:10b362dc0847200c987214b129b5f85e2f7d8ad417261a1d2dd04ab74de15603",
+    "zh:194647d9a61dca4f411f44580316b88a11095d7a99679d445f9b0f2c1ba976c4",
+    "zh:1d8aafe2ce7890696385bb3a0c3286e7ee3020416d337f59935406e4c6f91de6",
+    "zh:594585616210fb232fad4ebda2387ecd3f483931e00eff988fca83add6ce7cfc",
+    "zh:65e50be33ffb85580546f119839e1293591cc6d4db729d809931d0408b6ae408",
+    "zh:7d4ed5bd8c477ec304142e2160203a76a0d09c93d224950bda253172b2571038",
+    "zh:90a70a70a266b78c8216903e711904e6969b3957d182602b5d788602ec9ef323",
+    "zh:abb8e28e96fb8de270995873de980896b7cb53cfc550f02c50eaa42884624ba9",
+    "zh:bbf34dca2de6e105ca7204222162a0402d8e9e9a28e1de5ffbaa2c0d6270a059",
+    "zh:c1a9edb693d632dcb5c3c9ee84c97138e08eadb9354e28592efd581f68ac0385",
+    "zh:dadbf1368fae314fe8dcb99ebefbc78409f3fc0e3808cd92ea573b8eee1cae98",
+    "zh:e713e00ca27348abd18da2eeff861905e84050e3e7e008f14a0c63c70ab2ff84",
   ]
 }

duckhub_io.tf

···
-resource "hetznerdns_zone" "duckhub_io" {
+data "hcloud_zone" "duckhub_io" {
   name = "duckhub.io"
-  ttl  = 86400
 }
 
-resource "hetznerdns_record" "root4_duckhub_io" {
-  zone_id = hetznerdns_zone.duckhub_io.id
-  name    = "@"
-  value   = var.universe4
-  type    = "A"
-  ttl     = 3600
+resource "hcloud_zone_rrset" "root4_duckhub_io" {
+  zone = data.hcloud_zone.duckhub_io.name
+  name = "@"
+  type = "A"
+
+  records = [
+    {
+      value   = var.universe4
+      comment = "universe"
+    }
+  ]
+
+  ttl = 3600
 }
 
-resource "hetznerdns_record" "root6_duckhub_io" {
-  zone_id = hetznerdns_zone.duckhub_io.id
-  name    = "@"
-  value   = var.universe6
-  type    = "AAAA"
-  ttl     = 3600
+resource "hcloud_zone_rrset" "root6_duckhub_io" {
+  zone = data.hcloud_zone.duckhub_io.name
+  name = "@"
+  type = "AAAA"
+
+  records = [
+    {
+      value   = var.universe6
+      comment = "universe"
+    }
+  ]
+
+  ttl = 3600
 }
 
-resource "hetznerdns_record" "rootcaa_duckhub_io" {
-  for_each = toset(var.caa_records)
-  zone_id  = hetznerdns_zone.duckhub_io.id
-  name     = "@"
-  value    = each.key
-  type     = "CAA"
+resource "hcloud_zone_rrset" "rootcaa_duckhub_io" {
+  zone = data.hcloud_zone.duckhub_io.name
+  name = "@"
+  type = "CAA"
+
+  records = [for v in var.caa_records : { value = v }]
 }
 
-resource "hetznerdns_record" "cnames_duckhub_io" {
+resource "hcloud_zone_rrset" "cnames_duckhub_io" {
   for_each = toset(["quack"])
-  zone_id  = hetznerdns_zone.duckhub_io.id
+  zone     = data.hcloud_zone.duckhub_io.name
   name     = each.key
-  value    = "${hetznerdns_zone.duckhub_io.name}."
   type     = "CNAME"
+
+  records = [
+    {
+      value = "${data.hcloud_zone.duckhub_io.name}."
+    }
+  ]
 }

honeyarcus_art.tf

···
-resource "hetznerdns_zone" "honeyarcus_art" {
+data "hcloud_zone" "honeyarcus_art" {
   name = "honeyarcus.art"
-  ttl  = 86400
 }
 
-resource "hetznerdns_record" "root4_honeyarcus_art" {
-  zone_id = hetznerdns_zone.honeyarcus_art.id
-  name    = "@"
-  value   = var.universe4
-  type    = "A"
-  ttl     = 3600
+resource "hcloud_zone_rrset" "root4_honeyarcus_art" {
+  zone = data.hcloud_zone.honeyarcus_art.name
+  name = "@"
+  type = "A"
+
+  records = [
+    {
+      value   = var.universe4
+      comment = "universe"
+    }
+  ]
+
+  ttl = 3600
 }
 
-resource "hetznerdns_record" "root6_honeyarcus_art" {
-  zone_id = hetznerdns_zone.honeyarcus_art.id
-  name    = "@"
-  value   = var.universe6
-  type    = "AAAA"
-  ttl     = 3600
+resource "hcloud_zone_rrset" "root6_honeyarcus_art" {
+  zone = data.hcloud_zone.honeyarcus_art.name
+  name = "@"
+  type = "AAAA"
+
+  records = [
+    {
+      value   = var.universe6
+      comment = "universe"
+    }
+  ]
+
+  ttl = 3600
 }
 
-resource "hetznerdns_record" "rootcaa_honeyarcus_art" {
-  for_each = toset(var.caa_records)
-  zone_id  = hetznerdns_zone.honeyarcus_art.id
-  name     = "@"
-  value    = each.key
-  type     = "CAA"
+resource "hcloud_zone_rrset" "rootcaa_honeyarcus_art" {
+  zone = data.hcloud_zone.honeyarcus_art.name
+  name = "@"
+  type = "CAA"
+
+  records = [for v in var.caa_records : { value = v }]
 }

provider.tf

···
 terraform {
   required_providers {
-    hetznerdns = {
-      source  = "timohirt/hetznerdns"
-      version = "~> 2.2.0"
+    hcloud = {
+      source  = "hetznercloud/hcloud"
+      version = "1.57.0"
     }
   }
+
 
   cloud {
     hostname     = "app.terraform.io"
···
   }
 }
 
-variable "hetznerdns_token" {
+variable "hcloud_token" {
   sensitive = true
 }
 
-provider "hetznerdns" {
-  apitoken = var.hetznerdns_token
+provider "hcloud" {
+  token = var.hcloud_token
 }

scrumplex_net.tf

···
-resource "hetznerdns_zone" "scrumplex_net" {
+data "hcloud_zone" "scrumplex_net" {
   name = "scrumplex.net"
-  ttl  = 86400
 }
 
-resource "hetznerdns_record" "root4_scrumplex_net" {
-  zone_id = hetznerdns_zone.scrumplex_net.id
-  name    = "@"
-  value   = var.universe4
-  type    = "A"
-  ttl     = 3600
+resource "hcloud_zone_rrset" "root4_scrumplex_net" {
+  zone = data.hcloud_zone.scrumplex_net.name
+  name = "@"
+  type = "A"
+
+  records = [
+    {
+      value   = var.universe4
+      comment = "universe"
+    }
+  ]
+
+  ttl = 3600
 }
 
-resource "hetznerdns_record" "root6_scrumplex_net" {
-  zone_id = hetznerdns_zone.scrumplex_net.id
-  name    = "@"
-  value   = var.universe6
-  type    = "AAAA"
-  ttl     = 3600
+resource "hcloud_zone_rrset" "root6_scrumplex_net" {
+  zone = data.hcloud_zone.scrumplex_net.name
+  name = "@"
+  type = "AAAA"
+
+  records = [
+    {
+      value   = var.universe6
+      comment = "universe"
+    }
+  ]
+
+  ttl = 3600
 }
 
-resource "hetznerdns_record" "rootcaa_scrumplex_net" {
-  for_each = toset(var.caa_records)
-  zone_id  = hetznerdns_zone.scrumplex_net.id
-  name     = "@"
-  value    = each.key
-  type     = "CAA"
+resource "hcloud_zone_rrset" "rootcaa_scrumplex_net" {
+  zone = data.hcloud_zone.scrumplex_net.name
+  name = "@"
+  type = "CAA"
+
+  records = [for v in var.caa_records : { value = v }]
 }
 
-resource "hetznerdns_record" "cnames_scrumplex_net" {
+resource "hcloud_zone_rrset" "cnames_scrumplex_net" {
   for_each = toset(["x", "live", "skins", "grafana", "beta"])
-  zone_id  = hetznerdns_zone.scrumplex_net.id
+  zone     = data.hcloud_zone.scrumplex_net.name
   name     = each.key
-  value    = "${hetznerdns_zone.scrumplex_net.name}."
   type     = "CNAME"
+
+  records = [
+    {
+      value = "${data.hcloud_zone.scrumplex_net.name}."
+    }
+  ]
 }
 
-resource "hetznerdns_record" "play_scrumplex_net" {
-  zone_id = hetznerdns_zone.scrumplex_net.id
-  name    = "play"
-  value   = "home.sefa.cloud."
-  type    = "CNAME"
+resource "hcloud_zone_rrset" "play_scrumplex_net" {
+  zone = data.hcloud_zone.scrumplex_net.name
+  name = "play"
+  type = "CNAME"
+
+  records = [
+    {
+      value = "home.sefa.cloud."
+    }
+  ]
 }
 
 # Verifications
 
-resource "hetznerdns_record" "verify_bing_scrumplex_net" {
-  zone_id = hetznerdns_zone.scrumplex_net.id
-  name    = "3835887576857d098bf556039da5a1ed"
-  value   = "verify.bing.com."
-  type    = "CNAME"
+resource "hcloud_zone_rrset" "verify_bing_scrumplex_net" {
+  zone = data.hcloud_zone.scrumplex_net.name
+  name = "3835887576857d098bf556039da5a1ed"
+  type = "CNAME"
+
+  records = [
+    {
+      value = "verify.bing.com."
+    }
+  ]
 }
 
-resource "hetznerdns_record" "atproto_scrumplex_net" {
-  zone_id = hetznerdns_zone.scrumplex_net.id
-  name    = "_atproto"
-  value   = "did=did:plc:cryskse2nxtwd4feybx3vhcq"
-  type    = "TXT"
+resource "hcloud_zone_rrset" "atproto_scrumplex_net" {
+  zone = data.hcloud_zone.scrumplex_net.name
+  name = "_atproto"
+  type = "TXT"
+
+  records = [
+    {
+      value = "\"did=did:plc:cryskse2nxtwd4feybx3vhcq\""
+    }
+  ]
 }
 
-resource "hetznerdns_record" "discord_scrumplex_net" {
-  zone_id = hetznerdns_zone.scrumplex_net.id
-  name    = "_discord"
-  value   = "dh=6b63a4f3f7bd4c47da77cc7dd3ecfb8060dcc8e5"
-  type    = "TXT"
+resource "hcloud_zone_rrset" "discord_scrumplex_net" {
+  zone = data.hcloud_zone.scrumplex_net.name
+  name = "_discord"
+  type = "TXT"
+
+  records = [
+    {
+      value = "\"dh=6b63a4f3f7bd4c47da77cc7dd3ecfb8060dcc8e5\""
+    }
+  ]
 }
 
-resource "hetznerdns_record" "roottxt_scrumplex_net" {
-  for_each = tomap({
-    google    = "\"google-site-verification=NaynR7Wx8QUQ6X_LjIZn510VZ6Xk7OCwy-fXoNLkbzw\""
-    ariadne   = "openpgp4fpr:e173237ac782296d98f5adace13dfd4b47127951"
-    abuseipdb = "\"abuseipdb-verification=OL4gRvY2\""
-  })
-  zone_id = hetznerdns_zone.scrumplex_net.id
-  name    = "@"
-  value   = each.value
-  type    = "TXT"
+resource "hcloud_zone_rrset" "roottxt_scrumplex_net" {
+  zone = data.hcloud_zone.scrumplex_net.name
+  name = "@"
+  type = "TXT"
+
+  records = [
+    {
+      value   = "\"google-site-verification=NaynR7Wx8QUQ6X_LjIZn510VZ6Xk7OCwy-fXoNLkbzw\""
+      comment = "google"
+    },
+    {
+      value   = "\"openpgp4fpr:e173237ac782296d98f5adace13dfd4b47127951\""
+      comment = "ariadne"
+    },
+    {
+      value   = "\"abuseipdb-verification=OL4gRvY2\""
+      comment = "abuseipdb"
+    },
+    {
+      value   = "\"v=spf1 include:mailbox.org -all\""
+      comment = "mailbox.org SPF"
+    }
+  ]
 }
 
 # Mailbox.org records
 
-resource "hetznerdns_record" "mbomx_scrumplex_net" {
-  for_each = toset(["10 mxext1.mailbox.org.", "20 mxext3.mailbox.org.", "10 mxext2.mailbox.org."])
-  zone_id  = hetznerdns_zone.scrumplex_net.id
-  name     = "@"
-  value    = each.key
-  type     = "MX"
+resource "hcloud_zone_rrset" "mbomx_scrumplex_net" {
+  zone = data.hcloud_zone.scrumplex_net.name
+  name = "@"
+  type = "MX"
+
+  records = [
+    {
+      value = "10 mxext1.mailbox.org."
+    },
+    {
+      value = "20 mxext3.mailbox.org."
+    },
+    {
+      value = "10 mxext2.mailbox.org."
+    }
+  ]
 }
 
-resource "hetznerdns_record" "mbotxt_scrumplex_net" {
+resource "hcloud_zone_rrset" "mbotxt_scrumplex_net" {
   for_each = tomap({
-    "@"                  = "\"v=spf1 include:mailbox.org -all\""
     _dmarc               = "\"v=DMARC1; p=none; rua=mailto:[e-mail]; ruf=mailto:[e-mail]; fo=1; pct=25; adkim=r; aspf=r\""
     "mbo0001._domainkey" = "\"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K4PavXoNY8eGK2u61LIQlOHS8f5sWsCK5b+HMOfo0M+aNHwfqlVdzi/IwmYnuDKuXYuCllrgnxZ4fG4yVaux58v9grVsFHdzdjPlAQfp5rkiETYpCMZwgsmdseJ4CoZaosPHLjPumFE/Ua2WAQQljnunsM9TONM9L6KxrO9t5IISD1XtJb0bq1lVI/e72k3m\" \"nPd/q77qzhTDmwN4TSNJZN8sxzUJx9HNSMRRoEIHSDLTIJUK+Up8IeCx0B7CiOzG5w/cHyZ3AM5V8lkqBaTDK46AwTkTVGJf59QxUZArG3FEH5vy9HzDmy0tGG+053/x4RqkhqMg5/ClDm+lpZqWwIDAQAB\""
     "mbo0002._domainkey" = "\"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxEKIg2c48ecfmy/+rj35sBOhdfIYGNDCMeHy0b36DX6MNtS7zA/VDR2q5ubtHzraL5uUGas8kb/33wtrWFYxierLRXy12qj8ItdYCRugu9tXTByEED05WdBtRzJmrb8YBMfeK0E0K3wwoWfhIk/wzKbjMkbqYBOTYLlIcVGQWzOfN7/n3n+VChfu6sGFK3k2\" \"qrJNnw22iFy4C8Ks7j77+tCpm0PoUwA2hOdLrRw3ldx2E9PH0GVwIMJRgekY6cS7DrbHrj/AeGlwfwwCSi9T23mYvc79nVrh2+82ZqmkpZSTD2qq+ukOkyjdRuUPck6e2b+x141Nzd81dIZVfOEiwIDAQAB\""
   })
-  zone_id = hetznerdns_zone.scrumplex_net.id
-  name    = each.key
-  value   = each.value
-  type    = "TXT"
+  zone = data.hcloud_zone.scrumplex_net.name
+  name = each.key
+  type = "TXT"
+  records = [
+    {
+      value = each.value
+    }
+  ]
 }

scrumplex_rocks.tf

···
-resource "hetznerdns_zone" "scrumplex_rocks" {
+data "hcloud_zone" "scrumplex_rocks" {
   name = "scrumplex.rocks"
-  ttl  = 86400
 }
 
-resource "hetznerdns_record" "root4_scrumplex_rocks" {
-  zone_id = hetznerdns_zone.scrumplex_rocks.id
-  name    = "@"
-  value   = var.universe4
-  type    = "A"
-  ttl     = 3600
+resource "hcloud_zone_rrset" "root4_scrumplex_rocks" {
+  zone = data.hcloud_zone.scrumplex_rocks.name
+  name = "@"
+  type = "A"
+
+  records = [
+    {
+      value   = var.universe4
+      comment = "universe"
+    }
+  ]
+
+  ttl = 3600
 }
 
-resource "hetznerdns_record" "root6_scrumplex_rocks" {
-  zone_id = hetznerdns_zone.scrumplex_rocks.id
-  name    = "@"
-  value   = var.universe6
-  type    = "AAAA"
-  ttl     = 3600
+resource "hcloud_zone_rrset" "root6_scrumplex_rocks" {
+  zone = data.hcloud_zone.scrumplex_rocks.name
+  name = "@"
+  type = "AAAA"
+
+  records = [
+    {
+      value   = var.universe6
+      comment = "universe"
+    }
+  ]
+
+  ttl = 3600
 }
 
-resource "hetznerdns_record" "rootcaa_scrumplex_rocks" {
-  for_each = toset(var.caa_records)
-  zone_id  = hetznerdns_zone.scrumplex_rocks.id
-  name     = "@"
-  value    = each.key
-  type     = "CAA"
+resource "hcloud_zone_rrset" "rootcaa_scrumplex_rocks" {
+  zone = data.hcloud_zone.scrumplex_rocks.name
+  name = "@"
+  type = "CAA"
+
+  records = [for v in var.caa_records : { value = v }]
 }
 
-resource "hetznerdns_record" "cnames_scrumplex_rocks" {
+resource "hcloud_zone_rrset" "cnames_scrumplex_rocks" {
   for_each = toset(["x"])
-  zone_id  = hetznerdns_zone.scrumplex_rocks.id
+  zone     = data.hcloud_zone.scrumplex_rocks.name
   name     = each.key
-  value    = "${hetznerdns_zone.scrumplex_rocks.name}."
   type     = "CNAME"
+
+  records = [
+    {
+      value = "${data.hcloud_zone.scrumplex_rocks.name}."
+    }
+  ]
 }
 
 # Verifications
 
-resource "hetznerdns_record" "roottxt_scrumplex_rocks" {
-  for_each = tomap({
-    ariadne = "openpgp4fpr:e173237ac782296d98f5adace13dfd4b47127951"
-  })
-  zone_id = hetznerdns_zone.scrumplex_rocks.id
-  name    = "@"
-  value   = each.value
-  type    = "TXT"
+resource "hcloud_zone_rrset" "roottxt_scrumplex_rocks" {
+  zone = data.hcloud_zone.scrumplex_rocks.name
+  name = "@"
+  type = "TXT"
+
+  records = [
+    {
+      value   = "\"openpgp4fpr:e173237ac782296d98f5adace13dfd4b47127951\""
+      comment = "ariadne"
+    }
+  ]
 }

sefa_cloud.tf

···
-resource "hetznerdns_zone" "sefa_cloud" {
+data "hcloud_zone" "sefa_cloud" {
   name = "sefa.cloud"
-  ttl  = 86400
 }
 
-resource "hetznerdns_record" "rootcaa_sefa_cloud" {
-  for_each = toset(var.caa_records)
-  zone_id  = hetznerdns_zone.sefa_cloud.id
-  name     = "@"
-  value    = each.key
-  type     = "CAA"
+resource "hcloud_zone_rrset" "rootcaa_sefa_cloud" {
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = "@"
+  type = "CAA"
+
+  records = [for v in var.caa_records : { value = v }]
 }
 
-resource "hetznerdns_record" "cosmos4_sefa_cloud" {
-  zone_id = hetznerdns_zone.sefa_cloud.id
-  name    = "cosmos"
-  value   = "10.0.0.11"
-  type    = "A"
+resource "hcloud_zone_rrset" "cosmos4_sefa_cloud" {
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = "cosmos"
+  type = "A"
+
+  records = [
+    {
+      value = "10.0.0.11"
+    }
+  ]
 }
 
-resource "hetznerdns_record" "cosmos6_sefa_cloud" {
-  zone_id = hetznerdns_zone.sefa_cloud.id
-  name    = "cosmos"
-  value   = "fd19:783f:b287:0:dea6:32ff:fe54:1a63"
-  type    = "AAAA"
+resource "hcloud_zone_rrset" "cosmos6_sefa_cloud" {
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = "cosmos"
+  type = "AAAA"
+
+  records = [
+    {
+      value = "fd19:783f:b287:0:dea6:32ff:fe54:1a63"
+    }
+  ]
 }
 
-resource "hetznerdns_record" "cosmoscnames_sefa_cloud" {
+resource "hcloud_zone_rrset" "cosmoscnames_sefa_cloud" {
   for_each = toset([
     "asf",
   ])
-  zone_id = hetznerdns_zone.sefa_cloud.id
-  name    = "${each.key}.cosmos"
-  value   = "cosmos.sefa.cloud."
-  type    = "CNAME"
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = "${each.key}.cosmos"
+  type = "CNAME"
+
+  records = [
+    {
+      value = "cosmos.sefa.cloud."
+    }
+  ]
 }
 
-resource "hetznerdns_record" "eclipse4_sefa_cloud" {
-  zone_id = hetznerdns_zone.sefa_cloud.id
-  name    = "eclipse"
-  value   = "10.10.10.12"
-  type    = "A"
+resource "hcloud_zone_rrset" "eclipse4_sefa_cloud" {
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = "eclipse"
+  type = "A"
+
+  records = [
+    {
+      value = "10.10.10.12"
+    }
+  ]
 }
 
-resource "hetznerdns_record" "eclipse6_sefa_cloud" {
-  zone_id = hetznerdns_zone.sefa_cloud.id
-  name    = "eclipse"
-  value   = "fdcc:546e:5cf:0:da5e:d3ff:feea:f48e"
-  type    = "AAAA"
+resource "hcloud_zone_rrset" "eclipse6_sefa_cloud" {
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = "eclipse"
+  type = "AAAA"
+
+  records = [
+    {
+      value = "fdcc:546e:5cf:0:da5e:d3ff:feea:f48e"
+    }
+  ]
 }
 
-resource "hetznerdns_record" "eclipsecnames_sefa_cloud" {
+resource "hcloud_zone_rrset" "eclipsecnames_sefa_cloud" {
   for_each = toset([
     "nzb",
     "paperless",
···
     "syncthing",
     "torrent",
   ])
-  zone_id = hetznerdns_zone.sefa_cloud.id
-  name    = "${each.key}.eclipse"
-  value   = "eclipse.sefa.cloud."
-  type    = "CNAME"
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = "${each.key}.eclipse"
+  type = "CNAME"
+
+  records = [
+    {
+      value = "eclipse.sefa.cloud."
+    }
+  ]
 }
 
-resource "hetznerdns_record" "cnames_sefa_cloud" {
+resource "hcloud_zone_rrset" "cnames_sefa_cloud" {
   for_each = toset([
     "audiobookshelf",
     "box",
···
     "vault",
     "view",
   ])
-  zone_id = hetznerdns_zone.sefa_cloud.id
-  name    = each.key
-  value   = "${hetznerdns_zone.sefa_cloud.name}."
-  type    = "CNAME"
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = each.key
+  type = "CNAME"
+
+  records = [
+    {
+      value = "${data.hcloud_zone.sefa_cloud.name}."
+    }
+  ]
 }
 
-resource "hetznerdns_record" "cnames_arson_sefa_cloud" {
+resource "hcloud_zone_rrset" "cnames_arson_sefa_cloud" {
   for_each = toset([
     "hass",
   ])
-  zone_id = hetznerdns_zone.sefa_cloud.id
-  name    = each.key
-  value   = "arson.${hetznerdns_zone.sefa_cloud.name}."
-  type    = "CNAME"
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = each.key
+  type = "CNAME"
+
+  records = [
+    {
+      value = "arson.${data.hcloud_zone.sefa_cloud.name}."
+    }
+  ]
 }
 
 # Verifications
 
-resource "hetznerdns_record" "roottxt_sefa_cloud" {
-  for_each = tomap({
-    sendinblue = "Sendinblue-code:40fc54f18aa321c1ef380e8bc74c0f1f"
-  })
-  zone_id = hetznerdns_zone.sefa_cloud.id
-  name    = "@"
-  value   = each.value
-  type    = "TXT"
-}
+resource "hcloud_zone_rrset" "roottxt_sefa_cloud" {
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = "@"
+  type = "TXT"
 
-# Send in Blue records
+  records = [
+    {
+      value   = "\"Sendinblue-code:40fc54f18aa321c1ef380e8bc74c0f1f\""
+      comment = "Brevo/Send in Blue Verification"
+    },
+    {
+      value   = "\"v=spf1 include:spf.sendinblue.com mx ~all\""
+      comment = "Brevo/Send in Blue SPF"
+    }
+  ]
+}
 
-resource "hetznerdns_record" "mbotxt_sefa_cloud" {
+resource "hcloud_zone_rrset" "brevotxt_sefa_cloud" {
   for_each = tomap({
-    "@"               = "\"v=spf1 include:spf.sendinblue.com mx ~all\""
     _dmarc            = "\"v=DMARC1; p=none; sp=none; rua=mailto:[e-mail]!10m; ruf=mailto:[e-mail]!10m; rf=afrf; pct=100; ri=86400\""
     "mail._domainkey" = "\"k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB\""
   })
-  zone_id = hetznerdns_zone.sefa_cloud.id
-  name    = each.key
-  value   = each.value
-  type    = "TXT"
+  zone = data.hcloud_zone.sefa_cloud.name
+  name = each.key
+  type = "TXT"
+
+  records = [
+    {
+      value = each.value
+    }
+  ]
 }