chore: refined control script

infra/main.tf

@@ -31,6 +31,17 @@ locals {
     { zone = "luke-else.co.uk", name = "vpn", value = module.vpn.ipv4 },
     { zone = "luke-else.co.uk", name = "traefik.vpn", value = module.vpn.ipv4 },
   ]
+
+  # Microsoft 365 mail records for luke-else.co.uk - carried over from the
+  # domain's old DNS provider (pre-Hetzner), not previously applied here, so
+  # these are genuinely new to the Hetzner zone rather than something to
+  # import.
+  mail_records = [
+    { zone = "luke-else.co.uk", name = "@", type = "MX", value = "0 lukeelse-co-uk01b.mail.protection.outlook.com." },
+    { zone = "luke-else.co.uk", name = "@", type = "TXT", value = "\"v=spf1 include:spf.protection.outlook.com -all\"" },
+    { zone = "luke-else.co.uk", name = "@", type = "TXT", value = "\"google-site-verification=aKLk5BATowKUwNbFcU5zyfu-AIyCW9W9PBStePRjH3U\"" },
+    { zone = "luke-else.co.uk", name = "autodiscover", type = "CNAME", value = "autodiscover.outlook.com." },
+  ]
 }
 
 module "network" {
@@ -87,5 +98,5 @@ module "dns" {
   source = "./modules/dns"
 
   zone_names = var.dns_zones
-  records    = local.dns_records
+  records    = concat(local.dns_records, local.mail_records)
 }