X-Git-Url: https://git.distorted.org.uk/~mdw/zones/blobdiff_plain/a1ab9d7efb02c2185980c2fd6a0a417a0f5a2b62..68db42b5ebc64048ef43426511d1b4cca61292ef:/distorted.lisp

diff --git a/distorted.lisp b/distorted.lisp
index 4a4b05a..4794842 100644
--- a/distorted.lisp
+++ b/distorted.lisp
@@ -79,13 +79,8 @@
 		     (chiark.ns :ip chiark.greenend.org.uk))
 
   ;; Mail servers.
-  ((@ mail blackhole)
-   :mx mail
-   :srv ((:smtp mail)))
-  ((lists bugs cryptomail)
-   :ttl 300
-   :mx mail
-   :srv ((:smtp old-mail)))
+  ((@ mail blackhole) :mx mail :srv ((:smtp mail)))
+  ((lists) :ttl 300 :mx lists :srv ((:smtp lists)))
 
   (stratocaster.20140403._domainkey
    :dkim ("stratocaster-20140403"
@@ -147,6 +142,8 @@
   ;; Colocated services.
   ((irc vox keys) (colo :svc jazz.colo :sshfp "jazz")
 		  (jump :svc jazz.jump :sshfp "jazz"))
+  (lists (colo :svc telecaster.colo :sshfp "telecaster")
+	 (jump :svc telecaster.jump :sshfp "telecaster"))
   ((git www mail) (colo :svc stratocaster.colo :sshfp "stratocaster")
 		  (jump :svc stratocaster.jump :sshfp "stratocaster"))
   ((www @) :tlsa (:https (:service-certificate-constraint
@@ -155,6 +152,8 @@
 		      :certificate :sha-256 #p"distorted-ca")))
   (www-cache :tlsa (3127 (:trust-anchor-assertion
 			  :certificate :sha-256 #p"distorted-ca")))
+  (lists :tlsa ((:smtp :https) (:trust-anchor-assertion
+				:certificate :sha-256 #p"distorted-ca")))
   (mail :tlsa ((:smtp :submission :imap)
 	       (:trust-anchor-assertion
 		:certificate :sha-256 #p"distorted-ca")))
@@ -170,7 +169,6 @@
 	       (dmz :svc artist.dmz))
   (mirror (dmz :svc roadstar.dmz :sshfp "roadstar")
 	  (unsafe :svc roadstar.unsafe :sshfp "roadstar"))
-  ((wiki bugs old-mail i2p) :svc vampire :sshfp "vampire")
 
   ;; Internal services.
   #+view/inside ((news lpr) :svc vampire.unsafe :sshfp "vampire")
@@ -340,11 +338,11 @@
        (vampire.ns :ip vampire.dmz))
   (gibson :addr gibson.unsafe)
   (crybaby :addr crybaby.unsafe)
-  (lespaul :addr lespaul.safe)
-  (invader :addr invader.safe)
-  (marauder :addr marauder.safe)
+  (lespaul :addr lespaul.unsafe)
+  (gretsch :addr gretsch.unsafe)
   (haze :addr haze.unsafe)
-  (gretsch :addr gretsch.unsafe))
+  (invader :addr invader.safe)
+  (marauder :addr marauder.safe))
 
 (defzone nicko.org
   (richmond :addr richmond.jump))