new-site/infra
justin 5d9306b75c mail: dedicate fresh IP .90 (mta01) to filings subdomain for clean reputation
Added a fresh sending IP (.90/mta01) bound to the filings cold-outreach stream,
isolated from the reputation-damaged .94 trucking IP:
- .90 bound on ens18, persisted 3 ways (interfaces up/down hooks + pw-mail-ips
  service + watchdog cron, all updated for the Jun-24-outage safety pattern)
- postfix 'outfilings' transport binds .90 / HELO mta01
- sender_dependent_default_transport_maps routes @filings.* -> outfilings; moved
  the randmap:{out05:} catch-all to default_transport=out05 so the sender map
  can win (recipient transport_maps outranks it otherwise)
- filings SPF updated to include .90

TEST RESULT: fresh IP fixed the reputation signal (Gmail error changed from
'low domain reputation' on .94 to 'likely unsolicited' cold-start on .90).
Non-Google (GMX/Microsoft) deliver fine; Gmail cold-start remains a slow wall.
Plan: CT campaign to non-Google first, warm .90, trickle Gmail over weeks.
2026-07-01 00:11:07 -05:00
..
ansible mail: add filings.performancewest.net cold-outreach subdomain (fresh reputation) 2026-06-30 22:55:05 -05:00
cron report: daily price A/B/C scoreboard to Telegram (silent on no-sale days) 2026-06-30 16:49:28 -05:00
fail2ban Initial commit — Performance West telecom compliance platform 2026-04-27 06:54:22 -05:00
firewall firewall: allow ezstorehost (207.174.124.51) to reach Forgejo SSH 2026-06-10 22:45:43 -05:00
k8s infra/k8s: shkeeper liveness+readiness probes (fix recurring crypto.performancewest.net downtime) 2026-06-09 04:57:50 -05:00
mail mail: dedicate fresh IP .90 (mta01) to filings subdomain for clean reputation 2026-07-01 00:11:07 -05:00
monitoring infra: raise disk alert thresholds to 90% warn / 94% auto-clean 2026-06-27 10:00:15 -05:00
mta-sts infra: MTA-STS HTTPS vhost (cert issued, policy live) 2026-06-06 21:03:30 -05:00
network mail: dedicate fresh IP .90 (mta01) to filings subdomain for clean reputation 2026-07-01 00:11:07 -05:00
nginx fix(nginx): unblock public API routes powering lead tools/flows (HC sales killer) 2026-06-23 15:51:30 -05:00
postfix infra(mail): remove 18 dormant snowshoe IPs from postfix + host 2026-06-23 23:45:41 -05:00
systemd infra: codify the email-campaign pipeline in Ansible (new mail-pipeline role) 2026-06-17 20:26:01 -05:00