tighten DMARC policy from p=none to p=quarantine

PESO-78

- enforce DMARC with p=quarantine (failed messages get quarantined)
- add adkim=r and aspf=r for relaxed DKIM/SPF alignment
This commit is contained in:
Rasmus Wejlgaard 2026-03-28 20:45:56 +00:00
parent eb18c1603c
commit d976829ee6

View file

@ -424,7 +424,7 @@ resource "cloudflare_dns_record" "dmarc" {
zone_id = cloudflare_zone.pez-sh.id zone_id = cloudflare_zone.pez-sh.id
name = "_dmarc" name = "_dmarc"
type = "TXT" type = "TXT"
content = "v=DMARC1; p=none; rua=mailto:pez@pez.sh" content = "v=DMARC1; p=quarantine; rua=mailto:pez@pez.sh; adkim=r; aspf=r"
ttl = 1 ttl = 1
} }