From 13d861e97b0253a20a07e4671affba6fb92f7324 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Mon, 6 Jan 2014 12:46:32 +0100
Subject: [PATCH] tlsa record for lists

---
 modules/roles/manifests/lists.pp | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/modules/roles/manifests/lists.pp b/modules/roles/manifests/lists.pp
index e429aba95..d501244ae 100644
--- a/modules/roles/manifests/lists.pp
+++ b/modules/roles/manifests/lists.pp
@@ -2,4 +2,11 @@ class roles::lists {
 	ssl::service { 'lists.debian.org':
 		notify => Service['apache2'],
 	}
+
+	dnsextras::tlsa_record{ 'tlsa-mailport':
+		zone     => 'debian.org',
+		certfile => "/etc/puppet/modules/exim/files/certs/${::fqdn}.crt",
+		port     => 25,
+		hostname => $::fqdn,
+	}
 }
-- 
2.20.1