From 955664e600e285294a1980d84f733d3d77d1e722 Mon Sep 17 00:00:00 2001
From: Mark Wooding <mdw@distorted.org.uk>
Date: Wed, 27 Jan 2016 14:23:16 +0000
Subject: [PATCH] odin.lisp: Provide a TLSA record for the `odin' webserver.

---
 odin.lisp | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/odin.lisp b/odin.lisp
index c84fd22..7625322 100644
--- a/odin.lisp
+++ b/odin.lisp
@@ -15,7 +15,9 @@
        (gandi6-ns :ip gandi-ns6))
 
   ;; Web service.
-  ((@ www) :svc stratocaster)
+  ((@ www) :svc stratocaster
+	   :tlsa (:https (:service-certificate-constraint
+			  :public-key :sha-256 #p"https-stratocaster")))
 
   ;; Mail servers
   :mx ((mail :ip stratocaster))
-- 
2.11.0