;; Nameservers
:ns ((radius-ns :ip radius)
(precision-ns :ip precision)
- ns6.gandi.net.)
+ (telecaster-ns :ip telecaster)
+ (national-ns :ip national))
;; Web service.
- ((@ www) :svc stratocaster)
+ ((@ www) :svc stratocaster
+ :tlsa (:https (:service-certificate-constraint
+ :public-key :sha-256 #p"https-stratocaster")))
+
+ ;; Certification.
+ :caa ((:issue "letsencrypt.org")
+ (:issue "distorted.org.uk"))
;; Mail servers
- (@ :ttl 300
- :mx ((mail :ip vampire))
- :srv ((:smtp mail))))
+ :mx ((mail :ip stratocaster))
+ :srv ((:smtp mail))
+ :spf ((:version "spf1")
+ (:pass :ip stratocaster.dmz)
+ (:soft :all))
+ (_dmarc :dmarc (:v "DMARC1"
+ :p "quarantine" :sp "quarantine"
+ :adkim "s" :aspf "s"))
+ (_domainkey :dname stratocaster.dkim.distorted.org.uk.))