distorted.lisp: Include the correct TLSA record details for SMTP.

[zones] / odin.lisp

diff --git a/odin.lisp b/odin.lisp
index 45e95cd5f277c7707f4db72eb048e9a7fa7568ab..f17fc24b98702361cdb04d59b6bb35e791433f21 100644 (file)
--- a/odin.lisp
+++ b/odin.lisp
@@ -11,18 +11,22 @@ (defzone odin.gg
   ;; Nameservers
   :ns ((radius-ns :ip radius)
        (precision-ns :ip precision)
   ;; Nameservers
   :ns ((radius-ns :ip radius)
        (precision-ns :ip precision)

-       ns6.gandi.net.)
+       (telecaster-ns :ip telecaster)
+       (national-ns :ip national))

 
   ;; Web service.
 
   ;; Web service.

-  ((@ www) :svc stratocaster)
+  ((@ www) :svc stratocaster
+          :tlsa (:https (:service-certificate-constraint
+                         :public-key :sha-256 #p"https-stratocaster")))
+
+  ;; Certification.
+  :caa ((:issue "letsencrypt.org")
+       (:issue "distorted.org.uk"))

 
   ;; Mail servers
   :mx ((mail :ip stratocaster))
   :srv ((:smtp mail))
 
   (stratocaster.20140403._domainkey
 
   ;; Mail servers
   :mx ((mail :ip stratocaster))
   :srv ((:smtp mail))
 
   (stratocaster.20140403._domainkey

-   :dkim ("dkim-stratocaster.20140403.pub"
-         :v "DKIM1"
-         :k "rsa"
-         :h "sha256"
-         :s "email")))
+   :dkim ("stratocaster-20140403"
+         :v "DKIM1" :k "rsa" :h "sha256" :s "email")))