You can probably leave out the zone and TTL.  I'd suggest '443' is dependent on whether SSL is configured or not, may need parameterising?