Merge pull request #88 from ministryofjustice/independent

Add defensive DNS records for enhanced domain security
For -- independentpublicadvocate.org.uk
Added -- CAA, MX and TXT records.

hostedzones/independentpublicadvocate.org.uk.yaml

@@ -1,9 +1,34 @@
 ---
-? ''
-: ttl: 172800
-  type: NS
-  values:
-  - ns-1190.awsdns-20.org.
-  - ns-1712.awsdns-22.co.uk.
-  - ns-37.awsdns-04.com.
-  - ns-532.awsdns-02.net.
+"":
+  - ttl: 300
+    type: CAA
+    values:
+      - flags: 0
+        tag: iodef
+        value: mailto:[email protected]
+      - flags: 0
+        tag: issue
+        value: ;
+  - ttl: 300
+    type: MX
+    value:
+      exchange: .
+      preference: 0
+  - ttl: 172800
+    type: NS
+    values:
+      - ns-1190.awsdns-20.org.
+      - ns-1712.awsdns-22.co.uk.
+      - ns-37.awsdns-04.com.
+      - ns-532.awsdns-02.net.
+  - ttl: 300
+    type: TXT
+    value: v=spf1 -all
+"*._domainkey":
+  ttl: 300
+  type: TXT
+  value: v=DKIM1\; p=
+_dmarc:
+  ttl: 300
+  type: TXT
+  value: v=DMARC1\;p=reject\;sp=reject\;rua=mailto:[email protected]\;