;; Nameservers
:ns ((radius-ns :ip radius)
(precision-ns :ip precision)
- (gandi6.ns :ip gandi-ns6))
+ (telecaster-ns :ip telecaster)
+ (national-ns :ip national))
;; Web service.
- ((@ www) :svc stratocaster)
+ ((@ www) :svc stratocaster
+ :tlsa (:https (:service-certificate-constraint
+ :public-key :sha-256 #p"https-stratocaster")))
+
+ ;; Certification.
+ :caa ((:issue "letsencrypt.org")
+ (:issue "distorted.org.uk"))
;; Mail servers
:mx ((mail :ip stratocaster))