ministryofjustice / dns-iac

DNS records as infrastructure-as-code

❗ Archived Repository ❗

This repository has been archived. If you want more information as to why, please read our Architectural Decision Record (ADR) to Archive DNS-IAC

If you require any assistance with domain management contact #ask-operations-engineering Slack channel or [email protected].

Please note that this file is generated, if you wish to make changes please make them here

This repository aims to hold most of the Ministry of Justice's DNS estate.

This repository currently manages the following domains:

Tracked	Hosted Zone
✅	cjit.gov.uk
✅	moneyclaim.gov.uk
✅	petp.co.uk
✅	cjs.gov.uk
✅	xhibit.justice.gov.uk
✅	courts.gov.uk
✅	employmentappeals.gov.uk
✅	service.justice.gov.uk
✅	magistrates.org.uk
✅	ima-citizensrights.org.uk
✅	brookhouseinvestigation.independent.gov.uk
✅	webchat.justice.gov.uk
✅	trackmycrime.net
✅	dsd.io
✅	cjsdigital.org
✅	judicialconduct.gov.uk
✅	hmctsformfinder.justice.gov.uk
✅	cjsm.justice.gov.uk
✅	admin.tribunalsdecisions.service.gov.uk
✅	hmiprobation.gov.uk
✅	criminal-justice.royal-commission.uk
✅	victiminformationservice.org.uk
✅	ccrc.gov.uk
✅	obr.uk
✅	dugganinquest.independent.gov.uk
✅	cjsonline.gov.uk
✅	cicap.gov.uk
✅	prisonvisits.service.gov.uk
✅	osscsc.gov.uk
✅	hmiprisons.gov.uk
✅	ybtj.justice.gov.uk
✅	miscarriage-justice-compensation.service.gov.uk
✅	civilclaims.service.gov.uk
✅	lawcommission.gov.uk
✅	publicguardian.gov.uk
✅	transporttribunal.gov.uk
✅	yjils.justice.gov.uk
✅	webapps.judiciary.gov.uk
✅	familyjusticecouncil.org.uk
✅	ahmlr.gov.uk
✅	civillegaladvice.service.gov.uk
✅	asylum-support-tribunal.gov.uk
✅	rpts.gov.uk
✅	yjbpublications.justice.gov.uk
✅	intranet.justice.gov.uk
✅	hillsboroughinquests.independent.gov.uk
✅	sts.test.justice.gov.uk
✅	hmprisonservice.gov.uk
✅	civilappeals.gov.uk
✅	certificatedbailiffs.justice.gov.uk
✅	informationtribunal.gov.uk
✅	financeandtaxtribunals.gov.uk
✅	courttribunalformfinder.service.gov.uk
✅	ubi.courtfunds.gov.uk
✅	judicialconduct.judiciary.gov.uk
✅	judicialombudsman.gov.uk
✅	test.justice.gov.uk
✅	producttracker.justice.gov.uk
✅	landstribunal.gov.uk
✅	casetracker.justice.gov.uk
✅	legal-aid-checker.justice.gov.uk
✅	criminal-justice-system.gov.uk
✅	possessionclaim.gov.uk
✅	blogs.justice.gov.uk
✅	xhibit.gov.uk
✅	pensionsappealtribunals.gov.uk
✅	in-addr.justice.gov.uk
✅	immigrationappealsonline.justice.gov.uk
✅	carestandardstribunal.gov.uk
✅	sentencingcouncil.gov.uk
✅	digital.justice.gov.uk
✅	judicialappointments.gov.uk
✅	tribunalsdecisions.service.gov.uk
✅	judiciary.gov.uk
✅	justice.gov.uk
✅	video.service.justice.gov.uk
✅	et.dsd.io
✅	checklegalaid.service.gov.uk
✅	devl.justice.gov.uk
✅	tribunals.gov.uk
✅	ukgovwales.gov.uk
✅	courtfunds.gov.uk
✅	immigrationservicestribunal.gov.uk
✅	g.justice.gov.uk
✅	obr.co.uk
✅	appeals-service.gov.uk
✅	yjb.gov.uk
✅	dca.gov.uk
✅	appeal-tax-tribunal.service.gov.uk
✅	ospt.gov.uk
✅	paroleboard.gov.uk
✅	employmenttribunals.service.gov.uk
✅	admin.courttribunalformfinder.service.gov.uk
✅	exchange.gov.uk
❌	public-guardian.com
❌	ministry-justice.co.uk
❌	probationservice.org
❌	nationaloffendersmanagementservice.org
❌	253.33.194.in-addr.arpa
❌	victimandwitnessinformation.org.uk
❌	tribunalsservice.uk
❌	tribunal.org.uk
❌	legal-aid-agency.com
❌	nationaloffendermanagementservice.org.uk
❌	73.135.18.in-addr.arpa
❌	hmcts.uk
❌	probation-service.org.uk
❌	ministryofjustice.net
❌	justiceministry.org.uk
❌	prisons-service.net
❌	hmpps.uk
❌	sentencing-council.uk
❌	llrs.justice.gov.uk
❌	dutysolicitors.org.uk
❌	ministryjustice.net
❌	sentencingcouncil.com
❌	sentencingcouncil.org
❌	hermajestysprisonsservice.co.uk
❌	sifocc.org.uk
❌	independentpublicadvocate.com
❌	nationaloffendermanagementservice.net
❌	national-offenders-management-service.org.uk
❌	dutysolicitors.org
❌	sentencing-council.org.uk
❌	her-majestys-court-service.org.uk
❌	imacitizensrights.co.uk
❌	preprod-ho-nfd.com
❌	prisons-service.com
❌	courtsandtribunals.com
❌	justice-ministry.com
❌	probation-service.com
❌	courtsandtribunals.org.uk
❌	tribunalsservice.co.uk
❌	hmpps.org
❌	prisonservice.org
❌	ministry-of-justice.com
❌	tribunalsservice.org.uk
❌	sentencing-council.net
❌	mojprint.org
❌	independentpublicadvocate.net
❌	justiceministry.org
❌	dom1print.uk
❌	office-of-the-public-guardian.org
❌	courts-service.org
❌	ministry-justice.net
❌	office-of-the-public-guardian.uk
❌	legal-aid-agency.uk
❌	her-majestys-court-service.com
❌	247sexualabusesupport.org.uk
❌	tribunals-service.org
❌	prisonsservice.com
❌	helpwithcourtfees.dsd.io
❌	probationservice.org.uk
❌	hermajestysprisonservice.org.uk
❌	independentpublicadvocate.org
❌	her-majestys-prison-service.com
❌	tribunalservice.co.uk
❌	her-majestys-courts-service.org.uk
❌	public-guardian.net
❌	independentpublicadvocate.org.uk
❌	tribunal-service.net
❌	mojprint.net
❌	mhrt.org.uk
❌	justiceministry.uk
❌	her-majestys-courts-service.org
❌	public-guardian.co.uk
❌	hermajestyscourtsservice.uk
❌	prison-service.uk
❌	nationaloffendersmanagementservice.com
❌	nationaloffendermanagementservice.co.uk
❌	public-guardian.org.uk
❌	officeofthepublicguardian.org
❌	ima-citizensrights.uk
❌	mojfax.net
❌	civil-casetracker.justice.gov.uk
❌	national-offenders-management-service.co.uk
❌	trackmycrime.co.uk
❌	youth-justice-board.com
❌	courtservice.net
❌	independentpublicadvocate.uk
❌	tribunalsservice.org
❌	court-service.net
❌	ima-citizensrights.net
❌	justicegov.uk
❌	tribunalservice.org.uk
❌	ministry-of-justice.uk
❌	dom1print.org
❌	courtsandtribunals.co.uk
❌	nationaloffendersmanagementservice.net
❌	hermajestyscourtsservice.co.uk
❌	her-majestys-court-service.co.uk
❌	prisons-service.org.uk
❌	youth-justice.uk
❌	159.9.3.in-addr.arpa
❌	courtservice.org
❌	trackmycrime.com
❌	ministryjustice.org
❌	tribunalservice.net
❌	imacitizensrights.uk
❌	tribunalsservice.net
❌	prisons-service.org
❌	her-majestys-prison-service.org.uk
❌	prisonservice.uk
❌	office-of-the-public-guardian.org.uk
❌	tribunalservice.org
❌	cica.gov.uk
❌	her-majestys-prisons-service.com
❌	technicalaccountingcentreofexcellence.uk
❌	tribunalservice.uk
❌	courtsandtribunals.org
❌	hmcs.uk
❌	hermajestyscourtservice.net
❌	courtsservice.org.uk
❌	hermajestysprisonservice.net
❌	tribunal-service.com
❌	justice-ministry.org.uk
❌	courtsandtribunals.net
❌	probation-service.net
❌	laadev.co.uk
❌	her-majestys-courts-service.uk
❌	dom1fax.co.uk
❌	hermajestysprisonandprobationservice.net
❌	legal-aid-agency.co.uk
❌	prisonsservice.uk
❌	hermajestyscourtservice.uk
❌	courts-service.co.uk
❌	youthjusticeboard.co.uk
❌	ima-citizensright.uk
❌	dom1fax.net
❌	her-majestys-prison-and-probation-service.org.uk
❌	imacitizensrights.net
❌	nationaloffendersmanagementservice.uk
❌	probationservice.uk
❌	247rapesupport.org.uk
❌	court-service.org.uk
❌	legal-aid-agency.org.uk
❌	victimscode.org.uk
❌	tribunalsservice.com
❌	officeofthepublicguardian.net
❌	sentencing-council.org
❌	dom1print.com
❌	courts-service.org.uk
❌	hmcs.org.uk
❌	ima-citizensright.co.uk
❌	office-of-the-public-guardian.co.uk
❌	her-majestys-court-service.org
❌	youthjustice.net
❌	officeofthepublicguardian.co.uk
❌	ministryjustice.co.uk
❌	hermajestyscourtservice.co.uk
❌	2.149.51.in-addr.arpa
❌	her-majestys-prisons-service.co.uk
❌	8.132.18.in-addr.arpa
❌	trackmycrime.org
❌	publicguardian.org.uk
❌	her-majestys-courts-service.com
❌	tribunals-review.org.uk
❌	officeofthepublicguardian.com
❌	uknpm.org
❌	nationaloffendermanagementservice.uk
❌	hermajestysprisonandprobationservice.co.uk
❌	ministryjustice.com
❌	sentencingcouncil.co.uk
❌	ministry-justice.org.uk
❌	prisonsservice.co.uk
❌	newfuturesnetwork.gov.uk
❌	her-majestys-prison-service.uk
❌	siffoc.org
❌	justice-ministry.net
❌	courtsservice.uk
❌	hmppsinsights.co.uk
❌	tribunals-service.com
❌	youth-justice-board.co.uk
❌	ministry-of-justice.org.uk
❌	ministry-justice.com
❌	nationaloffendermanagementservice.org
❌	hermajestysprisonservice.co.uk
❌	mojprint.co.uk
❌	prisons-service.co.uk
❌	trackmycrime.info
❌	judiciary.uk
❌	sirius-opg.co.uk
❌	independentpublicadvocate.co.uk
❌	youthjusticeboard.uk
❌	ministry-of-justice.org
❌	hermajestysprisonandprobationservice.org
❌	sentencing-council.co.uk
❌	mojfax.co.uk
❌	hermajestysprisonandprobationservice.uk
❌	dom1fax.org
❌	hermajestysprisonsservice.com
❌	officeofthepublicguardian.org.uk
❌	ima-citizensrights.com
❌	her-majestys-prison-service.org
❌	moj.org.uk
❌	ima-citizensright.org
❌	victimscommissioner.org.uk
❌	justice-ministry.uk
❌	courtsservice.co.uk
❌	tribunals-service.uk
❌	sentencing-council.com
❌	hermajestysprisonservice.uk
❌	prisons-service.uk
❌	imacitizensrights.org
❌	her-majestys-prison-and-probation-service.net
❌	her-majestys-prisons-service.org
❌	legalaidagency.uk
❌	officeofthepublicguardian.uk
❌	mojfax.com
❌	nationaloffendersmanagementservice.co.uk
❌	ima-citizenrights.org
❌	nationaloffendermanagementservice.com
❌	andrewmalkinsoninquiry.uk
❌	justice-ministry.org
❌	judiciary.org.uk
❌	dom1fax.uk
❌	imacitizensrights.com
❌	hermajestysprisonsservice.net
❌	youth-justice-board.uk
❌	her-majestys-prison-and-probation-service.uk
❌	probation-service.co.uk
❌	prison-service.org
❌	ministry-of-justice.net
❌	legal-aid-agency.net
❌	ima-citizensright.org.uk
❌	mojprint.uk
❌	hermajestysprisonsservice.org
❌	prisonsservice.org.uk
❌	office-of-the-public-guardian.com
❌	tribunals-service.org.uk
❌	certificates.justice.gov.uk
❌	hermajestyscourtsservice.net
❌	her-majestys-court-service.uk
❌	prison-service.org.uk
❌	courts-service.uk
❌	tribunals-service.net
❌	courts.org.uk
❌	taxcentreofexcellence.uk
❌	youthjusticeboard.org
❌	hermajestyscourtsservice.org.uk
❌	national-offenders-management-service.net
❌	probation-service.org
❌	hermajestyscourtservice.org.uk
❌	probation-service.uk
❌	mojfax.org
❌	justiceministry.co.uk
❌	legal-aid.org.uk
❌	her-majestys-courts-service.co.uk
❌	hermajestysprisonservice.org
❌	legal-aid-agency.org
❌	national-offenders-management-service.uk
❌	ima-citizensrights.org
❌	creatingfutureopportunities.gov.uk
❌	justice-ministry.co.uk
❌	govfsl.com
❌	her-majestys-prison-service.net
❌	sentencingcouncil.org.uk
❌	ima-citizenrights.org.uk
❌	imacitizensrights.org.uk
❌	her-majestys-prison-and-probation-service.co.uk
❌	hermajestysprisonandprobationservice.org.uk
❌	her-majestys-court-service.net
❌	prisonsservice.org
❌	ministryjustice.uk
❌	publicguardian.uk
❌	hwf.dsd.io
❌	sentencingcouncil.net
❌	hermajestyscourtservice.com
❌	noms.org.uk
❌	her-majestys-prisons-service.org.uk
❌	her-majestys-prison-and-probation-service.com
❌	hmpps.org.uk
❌	youthjusticeboard.org.uk
❌	prisonsservice.net
❌	public-guardian.uk
❌	preprod-ho-nfd.co.uk
❌	hermajestysprisonsservice.org.uk
❌	courts-service.net
❌	youthjusticeboard.com
❌	her-majestys-prisons-service.net
❌	courts-service.com
❌	office-of-the-public-guardian.net
❌	ministryjustice.org.uk
❌	her-majestys-prison-and-probation-service.org
❌	national-offenders-management-service.com
❌	ministry-justice.org
❌	tribunal-service.org
❌	national-offenders-management-service.org
❌	hermajestysprisonservice.com
❌	youth-justice-board.org
❌	hermajestyscourtsservice.com
❌	her-majestys-prison-service.co.uk
❌	public-guardian.org
❌	victimsinformationservice.org.uk
❌	her-majestys-prisons-service.uk
❌	nationaloffendersmanagementservice.org.uk
❌	hermajestysprisonandprobationservice.com
❌	dom1fax.com
❌	cjsm.co.uk
❌	legalaidagency.net
❌	dom1print.net
❌	tribunal-service.uk
❌	mojfax.uk
❌	tribunals-service.co.uk
❌	her-majestys-courts-service.net
❌	youth-justice-board.org.uk
❌	justiceministry.net
❌	hermajestyscourtservice.org
❌	youthjusticeboard.net
❌	hermajestyscourtsservice.org
❌	youth-justice-board.net
❌	ima-citizensrights.co.uk
❌	trackmycrime.org.uk
❌	is-prod.dsd.io
❌	dom1print.co.uk
❌	test-ho-nfd.co.uk
❌	hermajestysprisonsservice.uk
❌	ministry-justice.uk
❌	court-service.org
❌	prisonservice.org.uk

Scripts

Fetch CloudWatch Metrics

The aim of this script is to provide information on the number of DNS queries made for a particular hosted zone over a specified time period.

This information can the be used to help determine whether or not it's safe to decommission a domain. It's worth noting that this information is only for new DNS queries for a domain, and does not account for any domain fetched from the cache on the resolver server, as this falls outside the available metrics for Route53.

Example Usage

python3 fetch-cloudwatch-metrics.py -z <Hosted Zone ID> -d 60

For more information on optional perameters for the script, run:

python3 fetch-cloudwatch-metrics.py -h

dns-iac's Issues

User access removed, access is now via a team

Hi there

The user benmillar-cgi either had direct member access to the repository or had direct member access and access via a team.

Access is now only via a team.

If the user was already in a team, then their direct access to the repository has been removed.

If the user was not in a team, then the user will have been added to an automated generated team named repository-name-<read|write|maintain|admin>-team and their direct access to the repository has been removed.

The list of Org teams can be found at https://github.com/orgs/ministryofjustice/teams or https://github.com/orgs/moj-analytical-services/teams.

The user will have the same level of access to the repository via the team.

The first user added to a team is made a team maintainer, this enables that user to manage the users within the team.

Users with admin access are added to the admin team as a team maintainer.

If you have any questions, please contact us in #ask-operations-engineering on Slack.

This issue can be closed.

Remove send-money-to-prisoner.service.gov.uk zone from module

send-money-to-prisoner.service.gov.uk was migrated to Cloud Platform a long time ago.

DNS is now managed by Cloud Platform, and the top level domain appears to have been delegated at the GDS end.

There appears to be no trace of the NS records in the legacy zone. This zone can be removed from DNS-IAC.

A branch protection setting is not enabled: codeowners require reviews

Hi there
The default branch protection setting called codeowners require review is not enabled for this repository
This option affects a pull request, i.e a PR will need to be reviewed and approved by a CODEOWNER before it can be merged.
See repository settings/Branches/Branch protection rules
Either add a new Branch protection rule or edit the existing branch protection rule and select the Require review from Code Owners option
Create a .github/CODEOWNERS file
Add a or multiple entries of @ministryofjustice/team_name to the CODEOWNERS file
The team_name shall be a team from within the MoJ teams: https://github.com/orgs/ministryofjustice/teams
See GH Codeowners documentation: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
See the repository standards: https://github.com/ministryofjustice/github-repository-standards
See the report: https://operations-engineering-reports.cloud-platform.service.justice.gov.uk/github_repositories
Please contact Operations Engineering on Slack #ask-operations-engineering, if you need any assistance