Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: some more info on DKIM / SPF #371

Merged
merged 4 commits into from
Jul 22, 2024
Merged

docs: some more info on DKIM / SPF #371

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
c2e5478
docs: some more info on DKIM / SPF
alexgarel Jul 17, 2024
55ad1f7
ci: Update labeler.yml
teolemon Jul 17, 2024
fb5f7de
ci: Update labeler.yml
teolemon Jul 17, 2024
7384368
Update labeler.yml
teolemon Jul 17, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/labeler.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,3 +12,8 @@ postmortems:
argilla:
- changed-files:
- any-glob-to-any-file: 'docker/argilla/docker-compose.yml'

📨 email:
- changed-files:
- any-glob-to-any-file: 'docs/mail.md'
- any-glob-to-any-file: 'confs/common/systemd/system/[email protected]'
13 changes: 11 additions & 2 deletions docs/mail.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,11 @@

Because mail is difficult to setup, we use [Proxmox Mail Gateway](https://www.proxmox.com/en/proxmox-mail-gateway) as a relay to all servers. It ensure correct SPF, but also it adds DKIM signature.

The DKIM and spf records are configured on main domain *openfoodfacts.org*.

While DKIM is specific (because Brevo and Google keys are distinct by construction),
main SPF rule includes brevo and google servers.

No server receive mail, but they should be able to send them.

<a id="only-domain"></a>
Expand All @@ -16,12 +21,16 @@ We use Gmail for email boxes and groups.
We have a DKIM record configured for google domain and sub-domains in the DNS, we also take into account in SPF rule.
You can find the public key in google workspace admin console, under gmail.


## Brevo

We use Brevo to send newsletters.

We have a DKIM record configured for the Brevo domain in the DNS, we also take into account in SPF rule.
You can find the public key if you are logged as admin in Brevo.
They use the **hello.openfoodfacts.org** subdomain.

You can find the public key if you are logged as admin in Brevo, in the top right corner menu, going in "Senders, domains and dedicated IPs".
Clicking on domains, and then the hello.openfoodfacts.org domain, you can see the needed DNS records.

## Proxmox Mail Gateway

Expand Down Expand Up @@ -206,4 +215,4 @@ If you do not receive the email on expected group, here are some checks:

* [Debian reference](https://www.debian.org/doc/manuals/debian-reference/ch06.en.html#_the_mail_system)
* [Debian wiki Postfix](https://wiki.debian.org/Postfix)
* [Debian wiki Exim](https://wiki.debian.org/Exim)
* [Debian wiki Exim](https://wiki.debian.org/Exim)