Gmail/Microsoft rejected send.performancewest.net mail for DOMAIN reputation (not IP), so a fresh subdomain resets that to neutral. Fully separate from send.* to avoid the trucking cold-send history. First use: the CT SOS annual-report leads + a Gmail warm-up test. - DNS (A/SPF/DKIM/DMARC/MX) published in HestiaCP -> HE slaves, all resolve. - 2048-bit DKIM key (selector 'filings'); opendkim-testkey -> key OK. - OpenDKIM key.table/signing.table/trusted.hosts updated + reloaded; live send to GMX signed + accepted. - Codified in the mail role's opendkim_signing_domains; setup doc in infra/mail. |
||
|---|---|---|
| .. | ||
| inventory | ||
| playbooks | ||
| roles | ||
| ansible.cfg | ||