Skip to content

Commit

Permalink
docs: some more info on DKIM / SPF (#371)
Browse files Browse the repository at this point in the history
  • Loading branch information
alexgarel authored Jul 22, 2024
1 parent 3560fac commit 72586ab
Show file tree
Hide file tree
Showing 2 changed files with 16 additions and 2 deletions.
5 changes: 5 additions & 0 deletions .github/labeler.yml
Original file line number Diff line number Diff line change
Expand Up @@ -12,3 +12,8 @@ postmortems:
argilla:
- changed-files:
- any-glob-to-any-file: 'docker/argilla/docker-compose.yml'

📨 email:
- changed-files:
- any-glob-to-any-file: 'docs/mail.md'
- any-glob-to-any-file: 'confs/common/systemd/system/[email protected]'
13 changes: 11 additions & 2 deletions docs/mail.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,11 @@

Because mail is difficult to setup, we use [Proxmox Mail Gateway](https://www.proxmox.com/en/proxmox-mail-gateway) as a relay to all servers. It ensure correct SPF, but also it adds DKIM signature.

The DKIM and spf records are configured on main domain *openfoodfacts.org*.

While DKIM is specific (because Brevo and Google keys are distinct by construction),
main SPF rule includes brevo and google servers.

No server receive mail, but they should be able to send them.

<a id="only-domain"></a>
Expand All @@ -16,12 +21,16 @@ We use Gmail for email boxes and groups.
We have a DKIM record configured for google domain and sub-domains in the DNS, we also take into account in SPF rule.
You can find the public key in google workspace admin console, under gmail.


## Brevo

We use Brevo to send newsletters.

We have a DKIM record configured for the Brevo domain in the DNS, we also take into account in SPF rule.
You can find the public key if you are logged as admin in Brevo.
They use the **hello.openfoodfacts.org** subdomain.

You can find the public key if you are logged as admin in Brevo, in the top right corner menu, going in "Senders, domains and dedicated IPs".
Clicking on domains, and then the hello.openfoodfacts.org domain, you can see the needed DNS records.

## Proxmox Mail Gateway

Expand Down Expand Up @@ -206,4 +215,4 @@ If you do not receive the email on expected group, here are some checks:

* [Debian reference](https://www.debian.org/doc/manuals/debian-reference/ch06.en.html#_the_mail_system)
* [Debian wiki Postfix](https://wiki.debian.org/Postfix)
* [Debian wiki Exim](https://wiki.debian.org/Exim)
* [Debian wiki Exim](https://wiki.debian.org/Exim)

0 comments on commit 72586ab

Please sign in to comment.