Publish SSHFP records in the DNS.

[zones] / distorted.lisp

diff --git a/distorted.lisp b/distorted.lisp
index 0806e78534bc78281b5764d6970e32ff3a8df09f..1fca34efdae30e5d9c88eba59b2cf7160b709e69 100644 (file)
--- a/distorted.lisp
+++ b/distorted.lisp
@@ -105,25 +105,25 @@ (defzone distorted.org.uk
   (evolution :alias evo)
 
   ;; Colocated services.
-  ((irc vox) (colo :svc jazz.colo)
-            (jump :svc jazz.jump))
-  ((git www mail) (colo :svc stratocaster.colo)
-                 (jump :svc stratocaster.jump))
+  ((irc vox) (colo :svc jazz.colo :sshfp "jazz.sshfp")
+            (jump :svc jazz.jump :sshfp "jazz.sshfp"))
+  ((git www mail) (colo :svc stratocaster.colo :sshfp "stratocaster.sshfp")
+                 (jump :svc stratocaster.jump :sshfp "stratocaster.sshfp"))
   :svc #+view/inside stratocaster.colo
        #-view/inside stratocaster.jump
-  (cabal :svc stratocaster.colo)
-  ((db ftp) (colo :svc telecaster.colo)
-           (jump :svc telecaster.jump))
+  (cabal :svc stratocaster.colo :sshfp "stratocaster.sshfp")
+  ((db ftp) (colo :svc telecaster.colo :sshfp "telecaster.sshfp")
+           (jump :svc telecaster.jump :sshfp "telecaster.sshfp"))
 
   ;; Local services.
   ((rawk pifi) (unsafe :svc artist.unsafe)
               (dmz :svc artist.dmz))
-  (mirror (dmz :svc roadstar.dmz)
-         (unsafe :svc roadstar.unsafe))
-  ((wiki bugs old-mail i2p) :svc vampire)
+  (mirror (dmz :svc roadstar.dmz :sshfp "roadstar.sshfp")
+         (unsafe :svc roadstar.unsafe :sshfp "roadstar.sshfp"))
+  ((wiki bugs old-mail i2p) :svc vampire :sshfp "vampire.sshfp")
 
   ;; Internal services.
-  #+view/inside ((news lpr) :svc vampire.unsafe)
+  #+view/inside ((news lpr) :svc vampire.unsafe :sshfp "vampire.sshfp")
 
   ;; Anonymity services.
   (anon (colo :svc jazz.colo)
@@ -137,19 +137,19 @@ (defzone distorted.org.uk
   ;; Colocated hosts.
   (colo :net colo)
   (jump :net jump)
-  (fender (colo :a fender.colo)
-         (jump :a fender.jump))
-  (precision (colo :a precision.colo)
-            (jump :a precision.jump))
-  (telecaster (colo :a telecaster.colo)
-             (jump :a telecaster.jump))
+  (fender (colo :a fender.colo :sshfp "fender.sshfp")
+         (jump :a fender.jump :sshfp "fender.sshfp"))
+  (precision (colo :a precision.colo :sshfp "precision.sshfp")
+            (jump :a precision.jump :sshfp "precision.sshfp"))
+  (telecaster (colo :a telecaster.colo :sshfp "telecaster.sshfp")
+             (jump :a telecaster.jump :sshfp "telecaster.sshfp"))
   (telecaster :alias tele)
-  (stratocaster (colo :a stratocaster.colo)
-               (jump :a stratocaster.jump))
+  (stratocaster (colo :a stratocaster.colo :sshfp "stratocaster.sshfp")
+               (jump :a stratocaster.jump :sshfp "stratocaster.sshfp"))
   (stratocaster :alias strat)
-  (jazz (colo :a jazz.colo)
-       (jump :a jazz.jump)
-       (iodine :a jazz.iodine))
+  (jazz (colo :a jazz.colo :sshfp "jazz.sshfp")
+       (jump :a jazz.jump :sshfp "jazz.sshfp")
+       (iodine :a jazz.iodine :sshfp "jazz.sshfp"))
 
   ;; Media server (on loan to Good Technology HSTG).
   (jaguar (jump :a jaguar.jump))
@@ -161,23 +161,23 @@ (defzone distorted.org.uk
   (unsafe :net unsafe)
   (safe :net safe)
   (untrusted :net untrusted)
-  (vampire (unsafe :a vampire.unsafe)
-          (dmz :a vampire.dmz)
-          (safe :a vampire.safe)
-          (untrusted :a vampire.untrusted))
-  (ibanez (unsafe :a ibanez.unsafe)
-         (dmz :a ibanez.dmz))
-  (radius (unsafe :a radius.unsafe)
-         (dmz :a radius.dmz)
-         (safe :a radius.safe)
-         (untrusted :a radius.untrusted))
-  (roadstar (unsafe :a roadstar.unsafe)
-           (dmz :a roadstar.dmz))
-  (jem (unsafe :a jem.unsafe)
-       (dmz :a jem.dmz))
-  (artist (unsafe :a artist.unsafe)
-         (dmz :a artist.dmz)
-         (untrusted :a artist.untrusted))
+  (vampire (unsafe :a vampire.unsafe :sshfp "vampire.sshfp")
+          (dmz :a vampire.dmz :sshfp "vampire.sshfp")
+          (safe :a vampire.safe :sshfp "vampire.sshfp")
+          (untrusted :a vampire.untrusted :sshfp "vampire.sshfp"))
+  (ibanez (unsafe :a ibanez.unsafe :sshfp "ibanez.sshfp")
+         (dmz :a ibanez.dmz :sshfp "ibanez.sshfp"))
+  (radius (unsafe :a radius.unsafe :sshfp "radius.sshfp")
+         (dmz :a radius.dmz :sshfp "radius.sshfp")
+         (safe :a radius.safe :sshfp "radius.sshfp")
+         (untrusted :a radius.untrusted :sshfp "radius.sshfp"))
+  (roadstar (unsafe :a roadstar.unsafe :sshfp "roadstar.sshfp")
+           (dmz :a roadstar.dmz :sshfp "roadstar.sshfp"))
+  (jem (unsafe :a jem.unsafe :sshfp "jem.sshfp")
+       (dmz :a jem.dmz :sshfp "jem.sshfp"))
+  (artist (unsafe :a artist.unsafe :sshfp "artist.sshfp")
+         (dmz :a artist.dmz :sshfp "artist.sshfp")
+         (untrusted :a artist.untrusted :sshfp "artist.sshfp"))
 
   ;; DHCP hosts.
   (gibson :cname gibson.dhcp)
@@ -188,9 +188,9 @@ (defzone distorted.org.uk
 
   ;; Virtual network.
   (vpn :net vpn)
-  (crybaby (vpn :a crybaby.vpn))
-  (terror (vpn :a terror.vpn))
-  (orange (vpn :a orange.vpn))
+  (crybaby (vpn :a crybaby.vpn :sshfp "crybaby.sshfp"))
+  (terror (vpn :a terror.vpn :sshfp "terror.sshfp"))
+  (orange (vpn :a orange.vpn :sshfp "orange.sshfp"))
   (iodine :net iodine)
 
   ;; ITS.