distorted.lisp: Publish a TLSA record for `rawk'.

This now has active TLS.

diff --git a/distorted.lisp b/distorted.lisp
index 54d5dd80605d947975bae2c146a3c8f9d69b4026..88c9bd271111eb27a9fd457326b368df4c721e80 100644 (file)
--- a/distorted.lisp
+++ b/distorted.lisp
@@ -169,6 +169,9 @@ (defzone distorted.org.uk
 
   ;; Local services.
   (rawk (unsafe :svc artist.unsafe) (dmz :svc artist.dmz))
 
   ;; Local services.
   (rawk (unsafe :svc artist.unsafe) (dmz :svc artist.dmz))

+  (rawk :tlsa (:https (:service-certificate-constraint
+                      :public-key :sha-256
+                      #p"https-artist")))

   (mirror (dmz :svc roadstar.dmz :sshfp "roadstar")
          (unsafe :svc roadstar.unsafe :sshfp "roadstar"))
 
   (mirror (dmz :svc roadstar.dmz :sshfp "roadstar")
          (unsafe :svc roadstar.unsafe :sshfp "roadstar"))