Add globalsign.com to CAA list

[dns.git] / src / openstreetmap.js

diff --git a/src/openstreetmap.js b/src/openstreetmap.js
index 5eea2331311b182a9efb870299e57c0d2d63510a..57006d609797124d4bb803bc64d3b39c20f915d4 100644 (file)
--- a/src/openstreetmap.js
+++ b/src/openstreetmap.js
@@ -1,9 +1,11 @@
 D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
 
-  // Publish CAA records indicating that only letsencrypt should issue certificates
+  // Publish CAA records indicating that only letsencrypt and globalsign (Fastly) should issue certificates
 
   CAA("@", "issue", "letsencrypt.org", CF_TTL_ANY),
   CAA("@", "issuewild", "letsencrypt.org", CF_TTL_ANY),
+  CAA("@", "issue", "globalsign.com", CF_TTL_ANY),
+  CAA("@", "issuewild", "globalsign.com", CF_TTL_ANY),
   CAA("@", "iodef", "mailto:hostmaster@openstreetmap.org"),
 
   // Use shenron as the MX host
@@ -28,6 +30,10 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
 
   TXT("_mta-sts", "v=STSv1; id=202001291805Z"),
   TXT("_smtp._tls", "v=TLSRPTv1; rua=mailto:postmaster@openstreetmap.org"),
+  
+  // Fastly cert domain ownership confirmation
+
+  TXT("@", "_globalsign-domain-verification=ps00GlW1BzY9c2_cwH_pFqRkvzZyaCVZ-3RLssRG6S"),
 
   // Delegate MTA-STS policy for subdomains
 
@@ -113,16 +119,16 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
 
   A("spike-08", SPIKE08_IPV4),
   AAAA("spike-08", SPIKE08_IPV6),
-  // A("@", SPIKE08_IPV4, TTL("10m")),
-  // AAAA("@", SPIKE08_IPV6, TTL("10m")),
-  // A("www", SPIKE08_IPV4, TTL("10m")),
-  // AAAA("www", SPIKE08_IPV6, TTL("10m")),
-  // A("api", SPIKE08_IPV4, TTL("10m")),
-  // AAAA("api", SPIKE08_IPV6, TTL("10m")),
-  // A("maps", SPIKE08_IPV4, TTL("10m")),
-  // AAAA("maps", SPIKE08_IPV6, TTL("10m")),
-  // A("mapz", SPIKE08_IPV4, TTL("10m")),
-  // AAAA("mapz", SPIKE08_IPV6, TTL("10m")),
+  A("@", SPIKE08_IPV4, TTL("10m")),
+  AAAA("@", SPIKE08_IPV6, TTL("10m")),
+  A("www", SPIKE08_IPV4, TTL("10m")),
+  AAAA("www", SPIKE08_IPV6, TTL("10m")),
+  A("api", SPIKE08_IPV4, TTL("10m")),
+  AAAA("api", SPIKE08_IPV6, TTL("10m")),
+  A("maps", SPIKE08_IPV4, TTL("10m")),
+  AAAA("maps", SPIKE08_IPV6, TTL("10m")),
+  A("mapz", SPIKE08_IPV4, TTL("10m")),
+  AAAA("mapz", SPIKE08_IPV6, TTL("10m")),
   A("spike-08.ams", SPIKE08_INTERNAL),
   A("spike-08.oob", SPIKE08_OOB),
 
@@ -168,12 +174,6 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
   A("grindtooth.ucl", GRINDTOOTH_INTERNAL),
   A("grindtooth.oob", GRINDTOOTH_OOB),
 
-  A("stormfly-01", STORMFLY01_IPV4),
-  AAAA("stormfly-01", STORMFLY01_IPV6),
-  // A("taginfo", STORMFLY01_IPV4, TTL("10m")),
-  // AAAA("taginfo", STORMFLY01_IPV6, TTL("10m")),
-  A("stormfly-01.oob", STORMFLY01_OOB),
-
   // Tile servers
 
   A("orm", ORM_IPV4),
@@ -423,9 +423,12 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
   AAAA("sarkany", SARKANY_IPV6),
   A("cmok", CMOK_IPV4),
   AAAA("cmok", CMOK_IPV6),
-  A("stormfly-02", STORMFLY02_IPV4),
-  AAAA("stormfly-02", STORMFLY02_IPV6),
-  A("stormfly-02.oob", STORMFLY02_OOB),
+  A("stormfly-03", STORMFLY03_IPV4),
+  AAAA("stormfly-03", STORMFLY03_IPV6),
+  A("stormfly-03.oob", STORMFLY03_OOB),
+  A("stormfly-04", STORMFLY04_IPV4),
+  AAAA("stormfly-04", STORMFLY04_IPV6),
+  A("stormfly-04.oob", STORMFLY04_OOB),
   A("rimfaxe", RIMFAXE_IPV4),
   AAAA("rimfaxe", RIMFAXE_IPV6),
   A("culebre", CULEBRE_IPV4),
@@ -528,13 +531,6 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER),
 
   // Spare
 
-  A("stormfly-03", STORMFLY03_IPV4),
-  AAAA("stormfly-03", STORMFLY03_IPV6),
-  A("stormfly-03.oob", STORMFLY03_OOB),
-
-  A("stormfly-04", STORMFLY04_IPV4),
-  AAAA("stormfly-04", STORMFLY04_IPV6),
-  A("stormfly-04.oob", STORMFLY04_OOB),
 
   // Donation site