X-Git-Url: https://git.distorted.org.uk/~mdw/zones/blobdiff_plain/2d169acdc49b8012182b327c5deee3a287173cf9..HEAD:/odin.lisp

diff --git a/odin.lisp b/odin.lisp
index c84fd22..fc921ca 100644
--- a/odin.lisp
+++ b/odin.lisp
@@ -12,15 +12,25 @@
   :ns ((radius-ns :ip radius)
        (precision-ns :ip precision)
        (telecaster-ns :ip telecaster)
-       (gandi6-ns :ip gandi-ns6))
+       (national-ns :ip national)
+       (eggle-ns :ip eggle))
 
   ;; Web service.
-  ((@ www) :svc stratocaster)
+  ((@ www) :svc stratocaster
+	   :tlsa (:https (:service-certificate-constraint
+			  :public-key :sha-256 #p"https-stratocaster")))
+
+  ;; Certification.
+  :caa ((:issue "letsencrypt.org")
+	(:issue "distorted.org.uk"))
 
   ;; Mail servers
   :mx ((mail :ip stratocaster))
   :srv ((:smtp mail))
-
-  (stratocaster.20140403._domainkey
-   :dkim ("stratocaster-20140403"
-	  :v "DKIM1" :k "rsa" :h "sha256" :s "email")))
+  :spf ((:version "spf1")
+	(:pass :ip stratocaster.dmz)
+	(:soft :all))
+  (_dmarc :dmarc (:v "DMARC1"
+		  :p "quarantine" :sp "quarantine"
+		  :adkim "s" :aspf "s"))
+  (_domainkey :dname stratocaster.dkim.distorted.org.uk.))