Add DKIM TXT record for `mail-test.nixos.org`
I just deployed `simple-nixos-mailserver` to `umbriel`, so we now have a DKIM signature. I'm following the instructions on <https://nixos-mailserver.readthedocs.io/en/latest/setup-guide.html#set-dkim-signature>.
Jeremy Fleischman committed
Oct 31, 2024 at 12:44 UTC
775b77d78139120a089e4b126eed204d27454a5b
2 files changed
+12
-2
non-critical-infra/hosts/umbriel.nixos.org/README.md
new
+7
@@ -0,0 +1,7 @@
1
+# `umbriel`
2
+
3
+## Provisioning
4
+
5
+If you recreate `umbriel`, it will generate a new `DKIM` signature. That's
6
+ok to do, but you'll need to update the corresponding `mail._domainkey.*` `TXT`
7
+DNS record in `terraform/dns.tf`.
terraform/dns.tf
+5
-2
@@ -343,8 +343,11 @@ locals {
343
type = "TXT"
344
value = "v=spf1 mx -all"
345
},
346
- # TODO: create `DKIM` TXT record: <https://nixos-mailserver.readthedocs.io/en/latest/setup-guide.html#set-dkim-signature>.
347
- # (can't do this until after SNM is deployed: https://github.com/NixOS/infra/pull/495/)
346
+ {
347
+ hostname = "mail._domainkey.mail-test.nixos.org"
348
+ type = "TXT"
349
+ value = "v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTLW88xioTw4YUMSBw2+RO1+ASTbWNsqDwrpCmA+ikru4cWLEkx2JVEcms4Uxqrk2A8Qhfjvc8Oe026HdTXiTNEb9e+Sh0d/IR/eH5MFhiSUGrahZBx1FGVvMf5zfjYWZXn+7oXW8zNpxWd042hLMcY14G8v+/OBQ9IJL+ja3wFwIDAQAB"
350
+ },
351
{
352
hostname = "_dmarc.mail-test.nixos.org"
353
type = "TXT"