geomirror: leverage LUA records for failover+GeoIP

PowerDNS provides a neat way to implement GeoIP-based redirection and automatic failover. With GeoLite2-City database, it is able to select the closest mirror from a list of IPs we provide. Every 60 seconds it also checks if the mirror's HTTPS URL is working as expected; if that check fails, it stops giving it out (this acts as automatic failover).

roles/geomirror/templates/geo.yml.j2

@@ -5,19 +5,20 @@ domains:
     ttl: 3600
     records:
       {{ geo_mirror_domain }}:
-        - soa: mirror.pkgbuild.com. root.archlinux.org. 2022011501 3600 1800 604800 3600
-        - ns: mirror.pkgbuild.com
-      {% for host in groups['geo_mirrors'] %}
-        - ns: {{ host }}
+        - soa: geo.mirror.pkgbuild.com. root.archlinux.org. 2022042701 3600 1800 604800 3600
+      {% for host in groups['geo_mirrors'] + ['mirror.pkgbuild.com'] %}
+        - ns:
+            ttl: 86400
+            content: {{ host }}
       {% endfor %}
         - lua:
-            ttl: 60
+            ttl: 300
             content: >
               A "ifurlup('https://{{ geo_mirror_domain }}/lastupdate',
               {'{{ groups['geo_mirrors'] | map('extract', hostvars, ['ipv4_address']) | join("', '") }}'},
               {selector='pickclosest', useragent='pdns on {{ inventory_hostname }}'})"
         - lua:
-            ttl: 60
+            ttl: 300
             content: >
               AAAA "ifurlup('https://{{ geo_mirror_domain }}/lastupdate',
               {'{{ groups['geo_mirrors'] | map('extract', hostvars, ['ipv6_address']) | join("', '") }}'},