Update DKIM key for test mailserver
While working on <https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/344>, I accidentally deleted the `DKIM` key on `umbriel` :(
Jeremy Fleischman committed
Nov 8, 2024 at 16:10 UTC
9a87a5a0751f407c78dfed2240cf925082c48363
2 files changed
+8
-2
non-critical-infra/hosts/umbriel.nixos.org/README.md
+6
-1
@@ -4,4 +4,9 @@
4
5
If you recreate `umbriel`, it will generate a new `DKIM` signature. That's
6
ok to do, but you'll need to update the corresponding `mail._domainkey.*` `TXT`
7
-DNS record in `terraform/dns.tf`.
7
+DNS record in `terraform/dns.tf` with the generated key in
8
+`/var/dkim/mail-test.nixos.org.mail.txt`.
9
+
10
+TODO: declaratively manage the `DKIM` key once
11
+<https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/344>
12
+lands.
terraform/dns.tf
+2
-1
@@ -346,7 +346,8 @@ locals {
346
{
347
hostname = "mail._domainkey.mail-test.nixos.org"
348
type = "TXT"
349
- value = "v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTLW88xioTw4YUMSBw2+RO1+ASTbWNsqDwrpCmA+ikru4cWLEkx2JVEcms4Uxqrk2A8Qhfjvc8Oe026HdTXiTNEb9e+Sh0d/IR/eH5MFhiSUGrahZBx1FGVvMf5zfjYWZXn+7oXW8zNpxWd042hLMcY14G8v+/OBQ9IJL+ja3wFwIDAQAB"
349
+ # From `/var/dkim/mail-test.nixos.org.mail.txt` on `umbriel`.
350
+ value = "v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDG4Tx788TCAW/sv1h6JefVJChqbaot1yhycwEq0Uo5x9ZIyq43Dkxxl7LdsHIW75HMI7aTKQRru+5xQ26vQmwiIRFJlJlRSYzlZZ2xnFZPXQ27dXnFh7MxLGC7YEyQFksiA2xxgqtQSyIvwu1whm2WK0fXkoJf87SgTtVjjKjnkQIDAQAB"
351
},
352
{
353
hostname = "_dmarc.mail-test.nixos.org"