From 5a3be3e3b4ccf15b5c33be4e2863480352a26291 Mon Sep 17 00:00:00 2001 From: Egor Savkin Date: Fri, 26 Jul 2024 17:46:54 +0800 Subject: [PATCH] Add SPF and update mail DKIM key so that postfix will be used instead of nginx for mail forwarding Signed-off-by: Egor Savkin --- nixbld-etc-nixos/configuration.nix | 2 +- nixbld-etc-nixos/named/m-labs-intl.com | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/nixbld-etc-nixos/configuration.nix b/nixbld-etc-nixos/configuration.nix index c531b31..161de03 100644 --- a/nixbld-etc-nixos/configuration.nix +++ b/nixbld-etc-nixos/configuration.nix @@ -1154,7 +1154,7 @@ in enable = true; localDnsResolver = false; # conflicts with dnsmasq fqdn = "mail.m-labs.hk"; - domains = [ "m-labs.hk" "m-labs.ph" "193thz.com" "malloctech.fr" "m-labs-intl.com" ]; + domains = [ "m-labs.hk" "m-labs.ph" "193thz.com" "malloctech.fr" ]; enablePop3 = true; enablePop3Ssl = true; certificateScheme = "acme-nginx"; diff --git a/nixbld-etc-nixos/named/m-labs-intl.com b/nixbld-etc-nixos/named/m-labs-intl.com index fca72bd..a4ce5ff 100644 --- a/nixbld-etc-nixos/named/m-labs-intl.com +++ b/nixbld-etc-nixos/named/m-labs-intl.com @@ -15,10 +15,11 @@ $TTL 7200 AAAA 2a01:4ff:1f0:83de::1 MX 10 mail.m-labs-intl.com. + TXT "v=spf1 mx a:router.alt.m-labs.hk a:mail.m-labs.hk -all" mail A 5.78.86.156 mail AAAA 2a01:4ff:1f0:83de::1 -mail._domainkey TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCl38A/Z0IInVU157qzrWgMfYm2iDHoWZsTyiiOoZdT7kHMzS/M2OMXMt7r5g1/7pCPClsGUDJvKGqVMmjJuPleMyKHwpGeT92qDNEFpt6ahneap/oYx5eBYM/vGcgmleNxyIoBHsptaZvqD4vCEFaC22f8UL5QAgQD3wCH3FwlpQIDAQAB" +mail._domainkey TXT "v=DKIM1; h=sha256; k=rsa; t=y; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TBwMZv41/zbxAifWeT+JLrhJmJpZYjfV5YXb74nocDf+A8GiKmqu6C4fvh9hCozdLKeSzqxxwyEe/MmedX9ToIpGpXjHlW6qraCeknc4jSjvljVjj2HgOAHWeQSWy9MdUzxKmK9CTB0INXsm34WbyY+fSRDHAUQj60eCwlXAOxqhp9KsndI9kQW+CtkN7xjmyqzU1hLFCtZAleq+zTLCPbAFG7nigxfjM7qBBP8FodTkDv6Wz5hW4wqlIKJygBXoq5yYLQ/UyPhwLpTEAN6pxRVWmwXF4PROTmZ4Cd+RTLvm2CB5N6J9dVVjeVbAaYI/6cNPdB84tZZKYHGhE9nvwIDAQAB" _dmarc TXT "v=DMARC1; p=none" ns A 94.190.212.123