From cdf9c201626a895e92c4f968c6233997a267109e Mon Sep 17 00:00:00 2001
From: Sam Rolfe <samuelrolfe@gmail.com>
Date: Mon, 31 Aug 2026 15:09:08 +1000
Subject: [PATCH] sam-4screen-desktop 2026-8-31:15:9:8

---
 .obsidian/workspace.json                      |  2 +-
 ...oudflare Record Set — audasmedia.com.au.md | 69 +++++++++++++++++++
 2 files changed, 70 insertions(+), 1 deletion(-)
 create mode 100644 200 projects/220 Web Host Migration/Cloudflare Record Set — audasmedia.com.au.md

diff --git a/.obsidian/workspace.json b/.obsidian/workspace.json
index ef8ffc6..74928df 100644
--- a/.obsidian/workspace.json
+++ b/.obsidian/workspace.json
@@ -212,6 +212,7 @@
   },
   "active": "8018aa52f0591df9",
   "lastOpenFiles": [
+    "200 projects/220 Web Host Migration/Cloudflare Record Set — audasmedia.com.au.md",
     "200 projects/220 Web Host Migration/audasmedia.com.au — DNS Baseline.md",
     "300 areas/360 Dev-Ops Network Computers/Home Voice Assistant System.md",
     "300 areas/360 Dev-Ops Network Computers/Docker Containers.md",
@@ -237,7 +238,6 @@
     "200 projects/220 Web Host Migration/Migration Plan — InMotion to Local + AWS Offsite.md",
     "300 areas/360 Dev-Ops Network Computers/Backup Health Check Commands.md",
     "300 areas/360 Dev-Ops Network Computers/Backup System — Borg, Kopia & Restic.md",
-    "300 areas/360 Dev-Ops Network Computers/Bumblebee - The Open-Source Scanner for Messy Dev Machines.md",
     "000 daily/ThinkPad Recommendations",
     "500 archive/510 Daily",
     "300 areas/305 Ideas Businesses",
diff --git a/200 projects/220 Web Host Migration/Cloudflare Record Set — audasmedia.com.au.md b/200 projects/220 Web Host Migration/Cloudflare Record Set — audasmedia.com.au.md
new file mode 100644
index 0000000..96e60e1
--- /dev/null
+++ b/200 projects/220 Web Host Migration/Cloudflare Record Set — audasmedia.com.au.md	
@@ -0,0 +1,69 @@
+---
+created: 2026-08-31
+modified: 2026-08-31
+type: reference
+client: sam
+project: web-host-migration
+status: active
+priority: 1
+tags:
+  - dns
+  - cloudflare
+  - ses
+  - email-routing
+  - audasmedia
+aliases:
+  - cloudflare-record-set
+id: 1848129026-CF
+---
+# Cloudflare Record Set — audasmedia.com.au (ready to paste)
+
+> Prepared 2026-08-31. To be applied in **Cloudflare** DNS once nameservers are authoritative.
+> Email: **SES outbound** + **Cloudflare Email Routing inbound (→ Gmail)**. **$0/month.**
+
+## A. Existing site records (PRESERVE — do not change)
+| Type | Name | Value | Proxy |
+|---|---|---|---|
+| A | `@` | `173.231.229.92` | DNS only (grey cloud) |
+| A | `cpanel` | `173.231.229.92` | DNS only |
+| A | `webmail` | `173.231.229.92` | DNS only |
+| A | `ftp` | `173.231.229.92` | DNS only |
+| CNAME | `www` | `@` | DNS only |
+| CNAME | `mail` | `@` | DNS only |
+
+> ⚠️ Keep these on **DNS only** (grey cloud) — do NOT proxy/orange-cloud them, to avoid surprises while sites are on InMotion.
+
+## B. SES outbound records (from SES console 2026-08-31)
+### DKIM (3 CNAMEs)
+| Type | Name | Value |
+|---|---|---|
+| CNAME | `3hcitiezqbwlyyrqhvuovye47ybnbheq._domainkey.audasmedia.com.au` | `3hcitiezqbwlyyrqhvuovye47ybnbheq.dkim.amazonses.com` |
+| CNAME | `lswlbc3gsmshm4b22bpyfn5k2evdgrdh._domainkey.audasmedia.com.au` | `lswlbc3gsmshm4b22bpyfn5k2evdgrdh.dkim.amazonses.com` |
+| CNAME | `ac5j6wxukvq6b5dacrp5xgzkdsovmm2e._domainkey.audasmedia.com.au` | `ac5j6wxukvq6b5dacrp5xgzkdsovmm2e.dkim.amazonses.com` |
+
+### DMARC
+| Type | Name | Value |
+|---|---|---|
+| TXT | `_dmarc.audasmedia.com.au` | `"v=DMARC1; p=none;"` |
+
+> MAIL FROM custom-domain records: **SKIP for now** (low volume; default SES works fine).
+
+## C. Cloudflare Email Routing (inbound → Gmail)
+Enable in Cloudflare dashboard: **Email → Email Routing → Enable**.
+- It auto-creates: **2 MX records** (route1/route2.mx.cloudflare.net) + **TXT** `v=spf1 include:_spf.mx.cloudflare.net ~all`.
+- **Add routing rule:** `sam@audasmedia.com.au` → `samuelrolfe@gmail.com`
+- Optionally a catch-all → Gmail.
+
+## D. Resulting SPF (combine providers)
+After B+C: SPF must include SES + Cloudflare. Simplest working value (single TXT):
+```
+v=spf1 include:_spf.mx.cloudflare.net include:amazonses.com ~all
+```
+(Replace the old InMotion SPF.)
+
+## Verification
+- MXToolbox: DNS lookup → MX/SPF/DKIM/DMARC all pass
+- Test: send to `sam@audasmedia.com.au` → arrives in Gmail; send via SES → delivered, DKIM=pass
+
+---
+*Part of [[Migration Plan — InMotion to Local + AWS Offsite]] Phase 2. Track in [[Migration Work Log]].*
\ No newline at end of file