(chiark.ns :ip chiark.greenend.org.uk))
;; Mail servers.
- ((@ mail blackhole)
- :mx mail
- :srv ((:smtp mail)))
- ((lists bugs cryptomail)
- :ttl 300
- :mx mail
- :srv ((:smtp old-mail)))
+ ((@ mail blackhole) :mx mail :srv ((:smtp mail)))
+ ((bugs) :ttl 300 :mx lists :srv ((:smtp bugs)))
+ ((lists) :ttl 300 :mx lists :srv ((:smtp lists)))
(stratocaster.20140403._domainkey
:dkim ("stratocaster-20140403"
;; Colocated services.
((irc vox keys) (colo :svc jazz.colo :sshfp "jazz")
(jump :svc jazz.jump :sshfp "jazz"))
+ ((bugs lists) (colo :svc telecaster.colo :sshfp "telecaster")
+ (jump :svc telecaster.jump :sshfp "telecaster"))
((git www mail) (colo :svc stratocaster.colo :sshfp "stratocaster")
(jump :svc stratocaster.jump :sshfp "stratocaster"))
((www @) :tlsa (:https (:service-certificate-constraint
:certificate :sha-256 #p"http-server-www#1")))
- (git :tlsa (:https (:trust-anchor-assertion
- :certificate :sha-256 #p"distorted-ca")))
+ ((git mail) :tlsa (:https (:trust-anchor-assertion
+ :certificate :sha-256 #p"distorted-ca")))
(www-cache :tlsa (3127 (:trust-anchor-assertion
:certificate :sha-256 #p"distorted-ca")))
+ ((bugs lists) :tlsa (:smtp (:trust-anchor-assertion
+ :certificate :sha-256 #p"distorted-ca")))
(mail :tlsa ((:smtp :submission :imap)
(:trust-anchor-assertion
:certificate :sha-256 #p"distorted-ca")))
(dmz :svc artist.dmz))
(mirror (dmz :svc roadstar.dmz :sshfp "roadstar")
(unsafe :svc roadstar.unsafe :sshfp "roadstar"))
- ((wiki bugs old-mail i2p) :svc vampire :sshfp "vampire")
;; Internal services.
#+view/inside ((news lpr) :svc vampire.unsafe :sshfp "vampire")
(vampire.ns :ip vampire.dmz))
(gibson :addr gibson.unsafe)
(crybaby :addr crybaby.unsafe)
+ (lespaul :addr lespaul.unsafe)
(gretsch :addr gretsch.unsafe)
(haze :addr haze.unsafe)
- (lespaul :addr lespaul.safe)
(invader :addr invader.safe)
(marauder :addr marauder.safe))