Gmail/Microsoft rejected send.performancewest.net mail for DOMAIN reputation (not IP), so a fresh subdomain resets that to neutral. Fully separate from send.* to avoid the trucking cold-send history. First use: the CT SOS annual-report leads + a Gmail warm-up test. - DNS (A/SPF/DKIM/DMARC/MX) published in HestiaCP -> HE slaves, all resolve. - 2048-bit DKIM key (selector 'filings'); opendkim-testkey -> key OK. - OpenDKIM key.table/signing.table/trusted.hosts updated + reloaded; live send to GMX signed + accepted. - Codified in the mail role's opendkim_signing_domains; setup doc in infra/mail. |
||
|---|---|---|
| .. | ||
| ansible | ||
| cron | ||
| fail2ban | ||
| firewall | ||
| k8s | ||
| monitoring | ||
| mta-sts | ||
| network | ||
| nginx | ||
| postfix | ||
| systemd | ||