X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~mdw/git/zones/blobdiff_plain/0d00be3807e24e436fee877c58911498db03508b..668d8477199b901515e9de79341568b13cdb4521:/odin.lisp

diff --git a/odin.lisp b/odin.lisp
index 174e9ed..f17fc24 100644
--- a/odin.lisp
+++ b/odin.lisp
@@ -11,10 +11,17 @@ (defzone odin.gg
   ;; Nameservers
   :ns ((radius-ns :ip radius)
        (precision-ns :ip precision)
-       (gandi6.ns :ip gandi-ns6))
+       (telecaster-ns :ip telecaster)
+       (national-ns :ip national))
 
   ;; Web service.
-  ((@ www) :svc stratocaster)
+  ((@ www) :svc stratocaster
+	   :tlsa (:https (:service-certificate-constraint
+			  :public-key :sha-256 #p"https-stratocaster")))
+
+  ;; Certification.
+  :caa ((:issue "letsencrypt.org")
+	(:issue "distorted.org.uk"))
 
   ;; Mail servers
   :mx ((mail :ip stratocaster))