M-Labs/it-infra
M-Labs/it-infra
8
0
Fork 6
Code Issues 11 Pull Requests 1 Releases Wiki Activity

Add m-labs-intl.com domain to mailserver and hooks subdomain #39

Closed
esavkin wants to merge 2 commits from 134-intl-com into master
pull from: 134-intl-com
merge into: M-Labs:master
Conversation 3 Commits 2 Files Changed 2 +6 -3
3 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit b601c12b7d - Show all commits

2
nixbld-etc-nixos/configuration.nix
View File

@ -1173,7 +1173,7 @@ in
enable = true;
localDnsResolver = false; # conflicts with dnsmasq
fqdn = "mail.m-labs.hk";
domains = [ "m-labs.hk" "m-labs.ph" "193thz.com" "malloctech.fr" "m-labs-intl.com" ];
domains = [ "m-labs.hk" "m-labs.ph" "193thz.com" "malloctech.fr" ];
enablePop3 = true;
enablePop3Ssl = true;
certificateScheme = "acme-nginx";

3
nixbld-etc-nixos/named/m-labs-intl.com
View File

@ -15,10 +15,11 @@ $TTL 7200
AAAA 2a01:4ff:1f0:83de::1
MX 10 mail.m-labs-intl.com.
TXT "v=spf1 mx -all"
sb10q commented 2024-08-14 10:56:25 +08:00
Outdated
Review
Copy Link

As I said before, we need to proxy the outgoing emails through the VPS as well. Our mailserver also gets blocked due to its being in Hong Kong. This is not consistent with this SPF entry.

As I said before, we need to proxy the outgoing emails through the VPS as well. Our mailserver also gets blocked due to its being in Hong Kong. This is not consistent with this SPF entry.
👍 1
sb10q commented 2024-08-14 10:57:21 +08:00
Outdated
Review
Copy Link

So just mx

So just ``mx``
mail A 5.78.86.156
mail AAAA 2a01:4ff:1f0:83de::1
sb10q commented 2024-07-18 12:01:28 +08:00
Outdated
Review
Copy Link

Where is the DKIM private key ?

Where is the DKIM private key ?
esavkin commented 2024-07-19 10:53:10 +08:00
Outdated
Review
Copy Link

It's a copy from m-labs.hk, because the m-labs-intl is just a reverse proxy for email.

It's a copy from `m-labs.hk`, because the m-labs-intl is just a reverse proxy for email.
sb10q commented 2024-08-14 11:06:53 +08:00
Outdated
Review
Copy Link

https://nixos-mailserver.readthedocs.io/en/latest/setup-guide.html
There is one DKIM key per domain.

https://nixos-mailserver.readthedocs.io/en/latest/setup-guide.html There is one DKIM key per domain.
mail._domainkey TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCl38A/Z0IInVU157qzrWgMfYm2iDHoWZsTyiiOoZdT7kHMzS/M2OMXMt7r5g1/7pCPClsGUDJvKGqVMmjJuPleMyKHwpGeT92qDNEFpt6ahneap/oYx5eBYM/vGcgmleNxyIoBHsptaZvqD4vCEFaC22f8UL5QAgQD3wCH3FwlpQIDAQAB"
mail._domainkey TXT "v=DKIM1; h=sha256; k=rsa; t=y; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TBwMZv41/zbxAifWeT+JLrhJmJpZYjfV5YXb74nocDf+A8GiKmqu6C4fvh9hCozdLKeSzqxxwyEe/MmedX9ToIpGpXjHlW6qraCeknc4jSjvljVjj2HgOAHWeQSWy9MdUzxKmK9CTB0INXsm34WbyY+fSRDHAUQj60eCwlXAOxqhp9KsndI9kQW+CtkN7xjmyqzU1hLFCtZAleq+zTLCPbAFG7nigxfjM7qBBP8FodTkDv6Wz5hW4wqlIKJygBXoq5yYLQ/UyPhwLpTEAN6pxRVWmwXF4PROTmZ4Cd+RTLvm2CB5N6J9dVVjeVbAaYI/6cNPdB84tZZKYHGhE9nvwIDAQAB"
sb10q commented 2024-07-18 12:02:48 +08:00
Outdated
Review
Copy Link

SPF?

SPF?
_dmarc TXT "v=DMARC1; p=none"
ns A 94.190.212.123

4
nixbld-etc-nixos/named/m-labs.hk
View File

@ -24,7 +24,9 @@ $TTL 7200
mail A 94.190.212.123
mail A 202.77.7.238
mail AAAA 2001:470:18:390::2
mail._domainkey TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCl38A/Z0IInVU157qzrWgMfYm2iDHoWZsTyiiOoZdT7kHMzS/M2OMXMt7r5g1/7pCPClsGUDJvKGqVMmjJuPleMyKHwpGeT92qDNEFpt6ahneap/oYx5eBYM/vGcgmleNxyIoBHsptaZvqD4vCEFaC22f8UL5QAgQD3wCH3FwlpQIDAQAB"
mail._domainkey IN TXT ( "v=DKIM1; h=sha256; k=rsa; t=y; "
"p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TBwMZv41/zbxAifWeT+JLrhJmJpZYjfV5YXb74nocDf+A8GiKmqu6C4fvh9hCozdLKeSzqxxwyEe/MmedX9ToIpGpXjHlW6qraCeknc4jSjvljVjj2HgOAHWeQSWy9MdUzxKmK9CTB0INXsm34WbyY+fSRDHAUQj60eCwlXAOxqhp9KsndI9kQW+CtkN7xjmyqzU1hLFCtZAl"
"eq+zTLCPbAFG7nigxfjM7qBBP8FodTkDv6Wz5hW4wqlIKJygBXoq5yYLQ/UyPhwLpTEAN6pxRVWmwXF4PROTmZ4Cd+RTLvm2CB5N6J9dVVjeVbAaYI/6cNPdB84tZZKYHGhE9nvwIDAQAB" ) ; ----- DKIM key mail for m-labs-intl.com
_dmarc TXT "v=DMARC1; p=none"
lab CNAME @