sam-4screen-desktop 2026-8-31:16:24:8

200 projects/220 Web Host Migration/Migration Work Log.md

@@ -79,6 +79,23 @@ id: 1848129023-LOG
 | P1 | **Safety net now:** sync 23:00-05:00 → verify 05:15 (alert if no progress) → monitoring page every 15 min. Silent-failure mode is closed. | armed |
 
 ## Pending next action
+
+## PHASE 2 EMAIL — progress log (2026-08-31)
+| Item | Status |
+|---|---|
+| DNS moved to Cloudflare (audasmedia.com.au) | ✅ NS = jo/osmar.ns.cloudflare.com; A/wwww/cpanel/ftp preserved; **wildcard `*.lab` → 144.6.86.11 re-added (was missing after import — caught it, home sites restored)** |
+| SES identity `audasmedia.com.au` | ✅ created; 3 DKIM CNAMEs + DMARC added to Cloudflare |
+| Email Routing (free inbound → Gmail) | ✅ enabled; MX route1/2/3.mx.cloudflare.net live; catch-all → samuelrolfe@gmail.com; **test delivery confirmed (arrived in All Mail)** |
+| SPF | ✅ `v=spf1 ip4:173.231.229.92 include:_spf.mx.cloudflare.net include:amazonses.com ~all` |
+| Zoho | ❌ abandoned (SMS OTP never arrives) |
+| MXroute | ⏸ deferred (no funds today; Cloudflare Email Routing covers inbound for $0) |
+| SES outbound test | ⏳ next: send test email via SES → verify DKIM/SPF pass |
+| SES production access | ⏳ later (free, ~hrs) so sites can send to anyone |
+
+## Next steps (email)
+1. SES console → Send test email (audasmedia.com.au → samuelrolfe@gmail.com); check delivery + DKIM/SPF pass.
+2. Request SES production access (free).
+3. Then return to Phase 3 (local infra) / CMS migration project.
 - **Build:** create bucket `sam-offsite-backup` + lifecycle (S3→Glacier Flexible@30d→Glacier DA@90d), then wire local Borg/rclone→S3 on `.13`, seed, test restore.
 - **Security:** enable root MFA; consider rotating access key after seeding (it was pasted in chat).