Remove DANE record

It's currently not used by anything, and since switching to Lets' Encrypt, it's even
less useful.

Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>

1 files changed, 5 insertions, 25 deletions

diff --git a/kyriasis.com.zone b/kyriasis.com.zone
index 97af23f..6298d9c 100644
--- a/kyriasis.com.zone
+++ b/kyriasis.com.zone
@@ -45,36 +45,16 @@ ca              CNAME   theos
 wiki            CNAME   theos
 xan             CNAME   theos
 salt            CNAME   theos
-phabricator     CNAME   theos
+gerrit          CNAME   theos
+matrix      30m A       212.71.254.33
+matrix      30m AAAA    2a01:7e00::f03c:91ff:fe6e:f996
+riot        30m A       212.71.254.33
+riot        30m AAAA    2a01:7e00::f03c:91ff:fe6e:f996
 
 ;;; Keybase verification
 @               TXT     "keybase-site-verification=ps0bAlsiJPIhNZy3mN-xDArc8f9A-AEoVhgsC6NDLDk"
 theos           TXT     "keybase-site-verification=_bApRga8QdQm0OpTxOZLeBFAPDB1_VV_BGbB8X-jw-M"
 
-;;; DNSSEC
-
-; bind 9.9 and later supports "live signing" where the nameserver automatically signs the
-; zone in memory. Due to this the live zone has a larger serial number than in this file
-
-;;; DANE (TLSA) - http://tools.ietf.org/html/rfc6698
-;   "TLSA" <usage> <selector> <match>
-;   usage:
-;     [0] match certification path & require known CA or trust anchor
-;     [1] match end-entity certificate & require known CA or trust anchor
-;     [2] match certification path, using given cert as trust anchor
-;     [3] match end-entity certificate
-;   selector:
-;     [0] X.509 certificate
-;     [1] public key
-;   match:
-;     [0] exact match
-;     [1] SHA-256 hash
-;     [2] SHA-512 hash
-
-;; theos
-; https; StartSSL
-_443._tcp.theos         TLSA    3 0 1   35da01bd9fed5e538baae2cb423dd6923f8d313c774f2da1b40e64d418e3f271
-
 
 ;;; Mail