distorted.lisp: Include the correct TLSA record details for SMTP.

[zones] / binswood.lisp

diff --git a/binswood.lisp b/binswood.lisp
index 767e1785e0d7de858c3fb1a8c44d1da2f09dd749..322929de3af482dd24f7b75f8a796bac58bc78db 100644 (file)
--- a/binswood.lisp
+++ b/binswood.lisp
@@ -4,25 +4,49 @@ (load "hosts.lisp" :verbose nil)
 (setf *default-zone-admin* "hostmaster@distorted.org.uk")
 (setf *default-zone-source* 'radius.distorted.org.uk.)
 
+;; Binswood.  Address range retroactively claimed from Cambridge G-RIN.
+(defnet binswood.org.uk 10.165.27.0/24
+  (binswood 256))
+(defhost binswrt.binswood (binswood 1))
+(defhost mango.binswood (binswood 3))
+
 (defzone binswood.org.uk
 
   ;; Nameservers
   :ns ((radius.ns :ip radius)
        (precision.ns :ip precision)
+       (telecaster.ns :ip telecaster)
+       (national.ns :ip national)
        (mythic-beasts-1.ns :ip mythic-ns1)
-       (mythic-beasts-2.ns :ip mythic-ns2))
+       (mythic-beasts-2.ns :ip mythic-ns2)
+       (mythic-beasts-3.ns :ip mythic-ns3))
+
+  ;; Certification.
+  :caa ((:issue "letsencrypt.org")
+       (:issue "distorted.org.uk"))
 
   ;; Internal hosts.
-  (netgear :a netgear.binswood)
-  (linksys :a linksys.binswood)
+  (binswrt :a binswrt.binswood)
   (mango :a mango.binswood)
-  (hplaser :a hplaser.binswood)
+
+  ;; External services.
+  ((@ www) :svc stratocaster)
 
   ;; Dynamic addresses.
   (dyn :ns ((radius.ns.dyn :ip radius)
-           (precision.ns.dyn :ip precision)))
+           (vampire.ns.dyn :ip vampire)
+           (precision.ns.dyn :ip precision)
+           (telecaster.ns.dyn :ip telecaster)
+           (national.ns.dyn :ip national)))
   (ext :cname ext.dyn))
 
+(defzone dyn.binswood.org.uk
+  :ns ((radius.ns :ip radius)
+       (vampire.ns :ip vampire)
+       (precision.ns :ip precision)
+       (telecaster.ns :ip telecaster)
+       (national.ns :ip national)))
+
 (defrevzone binswood
   :ns ((radius.ns :ip radius)
        (precision.ns :ip precision))