tlsa record for lists

diff --git a/modules/roles/manifests/lists.pp b/modules/roles/manifests/lists.pp
index e429aba..d501244 100644 (file)
--- a/modules/roles/manifests/lists.pp
+++ b/modules/roles/manifests/lists.pp
@@ -2,4 +2,11 @@ class roles::lists {
        ssl::service { 'lists.debian.org':
                notify => Service['apache2'],
        }
+
+       dnsextras::tlsa_record{ 'tlsa-mailport':
+               zone     => 'debian.org',
+               certfile => "/etc/puppet/modules/exim/files/certs/${::fqdn}.crt",
+               port     => 25,
+               hostname => $::fqdn,
+       }
 }