systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 21 Activity Actions

Harden DMARC and SPF rules

Browse source 
Hopefully people still get my emails...
This commit is contained in:
Jake Howard 2022-09-22 21:26:26 +01:00
parent 6268c0f451
commit 8c1f088b19
Signed by: jake
GPG key ID: 57AFB45680EDD477
2 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
terraform/jakehoward.tech.tf
View file

@ -23,7 +23,7 @@ resource "cloudflare_record" "jakehowardtech_mx2" {
resource "cloudflare_record" "jakehowardtech_txt" { resource "cloudflare_record" "jakehowardtech_txt" {
zone_id = cloudflare_zone.jakehowardtech.id zone_id = cloudflare_zone.jakehowardtech.id
name = "@" name = "@"
value = "v=spf1 include:spf.messagingengine.com ~all" value = "v=spf1 include:spf.messagingengine.com -all"
type = "TXT" type = "TXT"
ttl = 1 ttl = 1
} }
@ -55,7 +55,7 @@ resource "cloudflare_record" "jakehowardtech_dkim_fm3" {
resource "cloudflare_record" "jakehowardtech_dmarc" { resource "cloudflare_record" "jakehowardtech_dmarc" {
zone_id = cloudflare_zone.jakehowardtech.id zone_id = cloudflare_zone.jakehowardtech.id
name = "_dmarc" name = "_dmarc"
value = "v=DMARC1; p=quarantine; rua=mailto:dmarc-report@jakehoward.tech;" value = "v=DMARC1; pct=100; p=quarantine; rua=mailto:dmarc-report@jakehoward.tech;"
type = "TXT" type = "TXT"
ttl = 1 ttl = 1
} }
@ -167,7 +167,7 @@ resource "cloudflare_record" "jakehowardtech_auth" {
resource "cloudflare_record" "jakehowardtech_mailgun_spf" { resource "cloudflare_record" "jakehowardtech_mailgun_spf" {
zone_id = cloudflare_zone.jakehowardtech.id zone_id = cloudflare_zone.jakehowardtech.id
name = "mg" name = "mg"
value = "v=spf1 include:mailgun.org ~all" value = "v=spf1 include:mailgun.org -all"
type = "TXT" type = "TXT"
ttl = 1 ttl = 1
} }

6
terraform/theorangeone.net.tf
View file

@ -47,7 +47,7 @@ resource "cloudflare_record" "theorangeonenet_mx2" {
resource "cloudflare_record" "theorangeonenet_spf" { resource "cloudflare_record" "theorangeonenet_spf" {
zone_id = cloudflare_zone.theorangeonenet.id zone_id = cloudflare_zone.theorangeonenet.id
name = "@" name = "@"
value = "v=spf1 include:spf.messagingengine.com ~all" value = "v=spf1 include:spf.messagingengine.com -all"
type = "TXT" type = "TXT"
ttl = 1 ttl = 1
} }
@ -79,7 +79,7 @@ resource "cloudflare_record" "theorangeonenet_dkim_fm3" {
resource "cloudflare_record" "theorangeonenet_dmarc" { resource "cloudflare_record" "theorangeonenet_dmarc" {
zone_id = cloudflare_zone.theorangeonenet.id zone_id = cloudflare_zone.theorangeonenet.id
name = "_dmarc" name = "_dmarc"
value = "v=DMARC1; p=quarantine; rua=mailto:dmarc-report@jakehoward.tech;" value = "v=DMARC1; pct=100; p=quarantine; rua=mailto:dmarc-report@jakehoward.tech;"
type = "TXT" type = "TXT"
ttl = 1 ttl = 1
} }
@ -232,7 +232,7 @@ resource "cloudflare_record" "theorangeonenet_commento" {
resource "cloudflare_record" "theorangeonenet_mailgun_spf" { resource "cloudflare_record" "theorangeonenet_mailgun_spf" {
zone_id = cloudflare_zone.theorangeonenet.id zone_id = cloudflare_zone.theorangeonenet.id
name = "mg" name = "mg"
value = "v=spf1 include:mailgun.org ~all" value = "v=spf1 include:mailgun.org -all"
type = "TXT" type = "TXT"
ttl = 1 ttl = 1
} }