2 files changed, 4 insertions, 4 deletions

diff --git a/hosts/surtr/dns/zones/email.bouncy.soa b/hosts/surtr/dns/zones/email.bouncy.soa
index e69c4eb4..abf8ef07 100644
--- a/hosts/surtr/dns/zones/email.bouncy.soa
+++ b/hosts/surtr/dns/zones/email.bouncy.soa
@@ -1,7 +1,7 @@
 $ORIGIN bouncy.email.
 $TTL 3600
 @ IN SOA ns.yggdrasil.li. root.yggdrasil.li. (
-  2022071001 ; serial
+  2022071002 ; serial
   10800      ; refresh
   3600       ; retry
   604800     ; expire
@@ -69,7 +69,7 @@ spm			IN	MX	0 mailin.bouncy.email.
 spm                     IN      TXT     "v=spf1 redirect=bouncy.email"
 _acme-challenge.spm     IN      NS      ns.yggdrasil.li.
 
-_mta-sts                IN      TXT     "v=STSv1; id=2022071000"
+_mta-sts                IN      TXT     "v=STSv1; id=2022071002"
 _smtp._tls              IN      TXT     "v=TLSRPTv1; rua=mailto:postmaster@bouncy.email"
 mta-sts                 IN      A       202.61.241.61
 mta-sts                 IN      AAAA    2a03:4000:52:ada::
diff --git a/hosts/surtr/email/default.nix b/hosts/surtr/email/default.nix
index 357ee668..d72a4465 100644
--- a/hosts/surtr/email/default.nix
+++ b/hosts/surtr/email/default.nix
@@ -663,9 +663,9 @@ in {
               mkdir -p $out/.well-known
               cp ${pkgs.writeText "mta-sts.txt" ''
                 version: STSv1
-                mode: testing
-                mx: mailin.bouncy.email
+                mode: enforce
                 max_age: 604800
+                mx: mailin.bouncy.email
               ''} $out/.well-known/mta-sts.txt
             '';
           };