X-Git-Url: https://git.distorted.org.uk/~mdw/zones/blobdiff_plain/b30cc2156fad9cefea07fca2697c0bee69f837de..9c4b512e78d8e3eb2071e4e8c4e644f555b72c59:/odin.lisp

diff --git a/odin.lisp b/odin.lisp
index 8263a74..73abae1 100644
--- a/odin.lisp
+++ b/odin.lisp
@@ -11,12 +11,19 @@
   ;; Nameservers
   :ns ((radius-ns :ip radius)
        (precision-ns :ip precision)
-       ns6.gandi.net.)
+       (telecaster-ns :ip telecaster)
+       (national-ns :ip national))
 
   ;; Web service.
-  ((@ www) :svc stratocaster)
+  ((@ www) :svc stratocaster
+	   :tlsa (:https (:service-certificate-constraint
+			  :public-key :sha-256 #p"https-stratocaster")))
+
+  ;; Certification.
+  :caa ((:issue "letsencrypt.org")
+	(:issue "distorted.org.uk"))
 
   ;; Mail servers
-  (@ :ttl 300
-     :mx ((mail :ip vampire))
-     :srv ((:smtp mail))))
+  :mx ((mail :ip stratocaster))
+  :srv ((:smtp mail))
+  (_domainkey :dname stratocaster.dkim.distorted.org.uk.))