distorted.lisp: Publish a TLSA record for `rawk'.

[zones] / distorted.lisp

diff --git a/distorted.lisp b/distorted.lisp
index a2b9a4f..88c9bd2 100644 (file)
--- a/distorted.lisp
+++ b/distorted.lisp
@@ -168,7 +168,10 @@
   (cabal :svc stratocaster.colo :sshfp "stratocaster")
 
   ;; Local services.
-  ((rawk pifi) (unsafe :svc artist.unsafe) (dmz :svc artist.dmz))
+  (rawk (unsafe :svc artist.unsafe) (dmz :svc artist.dmz))
+  (rawk :tlsa (:https (:service-certificate-constraint
+                      :public-key :sha-256
+                      #p"https-artist")))
   (mirror (dmz :svc roadstar.dmz :sshfp "roadstar")
          (unsafe :svc roadstar.unsafe :sshfp "roadstar"))