keys/, distorted.lisp: Add SSHFP recortds for virtual servers.

[zones] / binswood.lisp

;;; Zone file for binswood.org.uk

(load "hosts.lisp" :verbose nil)
(setf *default-zone-admin* "hostmaster@distorted.org.uk")
(setf *default-zone-source* 'radius.distorted.org.uk.)

;; Binswood.  Address range retroactively claimed from Cambridge G-RIN.
(defnet binswood.org.uk 10.165.27.0/24
  (binswood 256))
(defhost binswrt.binswood (binswood 1))
(defhost mango.binswood (binswood 3))

(defzone binswood.org.uk

  ;; Nameservers
  :ns ((radius.ns :ip radius)
       (precision.ns :ip precision)
       (telecaster.ns :ip telecaster)
       (national.ns :ip national)
       (eggle.ns :ip eggle)
       (mythic-beasts-1.ns :ip mythic-ns1)
       (mythic-beasts-2.ns :ip mythic-ns2)
       (mythic-beasts-3.ns :ip mythic-ns3))

  ;; Certification.
  :caa ((:issue "letsencrypt.org")
	(:issue "distorted.org.uk"))

  ;; Internal hosts.
  (binswrt :a binswrt.binswood)
  (mango :a mango.binswood)

  ;; External services.
  ((@ www) :svc stratocaster)

  ;; Dynamic addresses.
  (dyn :ns ((radius.ns.dyn :ip radius)
	    (precision.ns.dyn :ip precision)
	    (telecaster.ns.dyn :ip telecaster)
	    (national.ns.dyn :ip national)
	    (eggle.ns.dyn :ip eggle)))
  (ext :cname ext.dyn))

(defzone (dyn.binswood.org.uk :source telecaster.distorted.org.uk.)
  :ns ((radius.ns :ip radius)
       (precision.ns :ip precision)
       (telecaster.ns :ip telecaster)
       (national.ns :ip national)
       (eggle.ns :ip eggle)))

(defrevzone binswood
  :ns ((radius.ns :ip radius)
       (precision.ns :ip precision))
  :reverse binswood)