| 1 | ;;; Zone file for odin.gg |
| 2 | |
| 3 | (load "hosts.lisp" :verbose nil) |
| 4 | |
| 5 | (setf *default-zone-admin* "hostmaster@odin.gg") |
| 6 | |
| 7 | (setf *default-zone-source* 'radius.distorted.org.uk.) |
| 8 | |
| 9 | (defzone odin.gg |
| 10 | |
| 11 | ;; Nameservers |
| 12 | :ns ((radius-ns :ip radius) |
| 13 | (precision-ns :ip precision) |
| 14 | (telecaster-ns :ip telecaster) |
| 15 | (national-ns :ip national)) |
| 16 | |
| 17 | ;; Web service. |
| 18 | ((@ www) :svc stratocaster |
| 19 | :tlsa (:https (:service-certificate-constraint |
| 20 | :public-key :sha-256 #p"https-stratocaster"))) |
| 21 | |
| 22 | ;; Certification. |
| 23 | :caa ((:issue "letsencrypt.org") |
| 24 | (:issue "distorted.org.uk")) |
| 25 | |
| 26 | ;; Mail servers |
| 27 | :mx ((mail :ip stratocaster)) |
| 28 | :srv ((:smtp mail)) |
| 29 | :spf ((:version "spf1") |
| 30 | (:pass :ip stratocaster.dmz) |
| 31 | (:soft :all)) |
| 32 | (_dmarc :dmarc (:v "DMARC1" |
| 33 | :p "quarantine" :sp "quarantine" |
| 34 | :adkim "s" :aspf "s")) |
| 35 | (_domainkey :dname stratocaster.dkim.distorted.org.uk.)) |