From: Mark Wooding <mdw@distorted.org.uk>
Date: Wed, 27 Jan 2016 14:23:16 +0000 (+0000)
Subject: odin.lisp: Provide a TLSA record for the `odin' webserver.
X-Git-Url: https://git.distorted.org.uk/~mdw/zones/commitdiff_plain/955664e600e285294a1980d84f733d3d77d1e722

odin.lisp: Provide a TLSA record for the `odin' webserver.
---

diff --git a/odin.lisp b/odin.lisp
index c84fd22..7625322 100644
--- a/odin.lisp
+++ b/odin.lisp
@@ -15,7 +15,9 @@
        (gandi6-ns :ip gandi-ns6))
 
   ;; Web service.
-  ((@ www) :svc stratocaster)
+  ((@ www) :svc stratocaster
+	   :tlsa (:https (:service-certificate-constraint
+			  :public-key :sha-256 #p"https-stratocaster")))
 
   ;; Mail servers
   :mx ((mail :ip stratocaster))