(:ftp ftp))
;; Colocated services.
- ((irc vox keys) (colo :svc jazz.colo :sshfp "jazz")
- (jump :svc jazz.jump :sshfp "jazz"))
+ ((irc vox keys wiki) (colo :svc jazz.colo :sshfp "jazz")
+ (jump :svc jazz.jump :sshfp "jazz")
+ :tlsa (:https (:service-certificate-constraint
+ :public-key :sha-256 #p"https-jazz")))
((bugs lists) (colo :svc telecaster.colo :sshfp "telecaster")
- (jump :svc telecaster.jump :sshfp "telecaster"))
+ (jump :svc telecaster.jump :sshfp "telecaster")
+ :tlsa (:https (:service-certificate-constraint
+ :public-key :sha-256 #p"https-telecaster")))
((git www mail) (colo :svc stratocaster.colo :sshfp "stratocaster")
(jump :svc stratocaster.jump :sshfp "stratocaster"))
- ((www @) :tlsa (:https (:service-certificate-constraint
- :public-key :sha-256 #p"https-stratocaster")))
- ((git mail) :tlsa (:https #1=(:trust-anchor-assertion
- :certificate :sha-256 #p"distorted-ca")))
- (www-cache :tlsa (3127 #1#))
+ ((www git mail @) :tlsa (:https (:service-certificate-constraint
+ :public-key :sha-256
+ #p"https-stratocaster")))
+ (www-cache :tlsa (3127 #1=(:trust-anchor-assertion
+ :certificate :sha-256 #p"distorted-ca")))
((bugs lists) :tlsa (:smtp #1#))
(mail :tlsa ((:smtp :submission :imap :imaps) #1#))
:svc #+view/inside stratocaster.colo