tlsa record for lists

diff --git a/modules/roles/manifests/lists.pp b/modules/roles/manifests/lists.pp
index e429aba958b24d21fa814c713c0ae627c17a46a3..d501244ae8d17645b3c89e19d2429ec44c27c980 100644 (file)
--- a/modules/roles/manifests/lists.pp
+++ b/modules/roles/manifests/lists.pp
@@ -2,4 +2,11 @@ class roles::lists {
        ssl::service { 'lists.debian.org':
                notify => Service['apache2'],
        }
+
+       dnsextras::tlsa_record{ 'tlsa-mailport':
+               zone     => 'debian.org',
+               certfile => "/etc/puppet/modules/exim/files/certs/${::fqdn}.crt",
+               port     => 25,
+               hostname => $::fqdn,
+       }
 }