distorted.lisp: Now using LetsEncrypt certificates on other servers.

[zones] / distorted.lisp

diff --git a/distorted.lisp b/distorted.lisp
index 3b0b297..0c22c69 100644 (file)
--- a/distorted.lisp
+++ b/distorted.lisp
@@ -142,9 +142,13 @@
 
   ;; Colocated services.
   ((irc vox keys) (colo :svc jazz.colo :sshfp "jazz")
-                 (jump :svc jazz.jump :sshfp "jazz"))
+                 (jump :svc jazz.jump :sshfp "jazz")
+                 :tlsa (:https (:service-certificate-constraint
+                                :public-key :sha-256 #p"https-jazz")))
   ((bugs lists) (colo :svc telecaster.colo :sshfp "telecaster")
-               (jump :svc telecaster.jump :sshfp "telecaster"))
+               (jump :svc telecaster.jump :sshfp "telecaster")
+               :tlsa (:https (:service-certificate-constraint
+                              :public-key :sha-256 #p"https-telecaster")))
   ((git www mail) (colo :svc stratocaster.colo :sshfp "stratocaster")
                  (jump :svc stratocaster.jump :sshfp "stratocaster"))
   ((www git mail @) :tlsa (:https (:service-certificate-constraint