Skip to content

Commit

Permalink
Update DKIM key for test mailserver
Browse files Browse the repository at this point in the history
While working on
<https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/344>,
I accidentally deleted the `DKIM` key on `umbriel` :(
  • Loading branch information
jfly authored and Mic92 committed Nov 9, 2024
1 parent 2f4c036 commit 724910e
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 2 deletions.
7 changes: 6 additions & 1 deletion non-critical-infra/hosts/umbriel.nixos.org/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,4 +4,9 @@

If you recreate `umbriel`, it will generate a new `DKIM` signature. That's
ok to do, but you'll need to update the corresponding `mail._domainkey.*` `TXT`
DNS record in `terraform/dns.tf`.
DNS record in `terraform/dns.tf` with the generated key in
`/var/dkim/mail-test.nixos.org.mail.txt`.

TODO: declaratively manage the `DKIM` key once
<https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/merge_requests/344>
lands.
3 changes: 2 additions & 1 deletion terraform/dns.tf
Original file line number Diff line number Diff line change
Expand Up @@ -346,7 +346,8 @@ locals {
{
hostname = "mail._domainkey.mail-test.nixos.org"
type = "TXT"
value = "v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTLW88xioTw4YUMSBw2+RO1+ASTbWNsqDwrpCmA+ikru4cWLEkx2JVEcms4Uxqrk2A8Qhfjvc8Oe026HdTXiTNEb9e+Sh0d/IR/eH5MFhiSUGrahZBx1FGVvMf5zfjYWZXn+7oXW8zNpxWd042hLMcY14G8v+/OBQ9IJL+ja3wFwIDAQAB"
# From `/var/dkim/mail-test.nixos.org.mail.txt` on `umbriel`.
value = "v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDG4Tx788TCAW/sv1h6JefVJChqbaot1yhycwEq0Uo5x9ZIyq43Dkxxl7LdsHIW75HMI7aTKQRru+5xQ26vQmwiIRFJlJlRSYzlZZ2xnFZPXQ27dXnFh7MxLGC7YEyQFksiA2xxgqtQSyIvwu1whm2WK0fXkoJf87SgTtVjjKjnkQIDAQAB"
},
{
hostname = "_dmarc.mail-test.nixos.org"
Expand Down

0 comments on commit 724910e

Please sign in to comment.