---
created: 2026-08-31
modified: 2026-08-31
type: subject
client: sam
project: web-host-migration
status: active
priority: 1
tags:
  - dns
  - cloudflare
  - ses
  - email-routing
  - audasmedia
aliases:
  - cloudflare-record-set
id: 1848129026-CF
---
# Cloudflare Record Set — audasmedia.com.au (ready to paste)

> Prepared 2026-08-31. To be applied in **Cloudflare** DNS once nameservers are authoritative.
> Email: **SES outbound** + **Cloudflare Email Routing inbound (→ Gmail)**. **$0/month.**

## A. Existing site records (PRESERVE — do not change)
| Type | Name | Value | Proxy |
|---|---|---|---|
| A | `@` | `173.231.229.92` | DNS only (grey cloud) |
| A | `cpanel` | `173.231.229.92` | DNS only |
| A | `webmail` | `173.231.229.92` | DNS only |
| A | `ftp` | `173.231.229.92` | DNS only |
| CNAME | `www` | `@` | DNS only |
| CNAME | `mail` | `@` | DNS only |

> ⚠️ Keep these on **DNS only** (grey cloud) — do NOT proxy/orange-cloud them, to avoid surprises while sites are on InMotion.

## B. SES outbound records (from SES console 2026-08-31)
### DKIM (3 CNAMEs)
| Type | Name | Value |
|---|---|---|
| CNAME | `3hcitiezqbwlyyrqhvuovye47ybnbheq._domainkey.audasmedia.com.au` | `3hcitiezqbwlyyrqhvuovye47ybnbheq.dkim.amazonses.com` |
| CNAME | `lswlbc3gsmshm4b22bpyfn5k2evdgrdh._domainkey.audasmedia.com.au` | `lswlbc3gsmshm4b22bpyfn5k2evdgrdh.dkim.amazonses.com` |
| CNAME | `ac5j6wxukvq6b5dacrp5xgzkdsovmm2e._domainkey.audasmedia.com.au` | `ac5j6wxukvq6b5dacrp5xgzkdsovmm2e.dkim.amazonses.com` |

### DMARC
| Type | Name | Value |
|---|---|---|
| TXT | `_dmarc.audasmedia.com.au` | `"v=DMARC1; p=none;"` |

> MAIL FROM custom-domain records: **SKIP for now** (low volume; default SES works fine).

## C. Cloudflare Email Routing (inbound → Gmail)
Enable in Cloudflare dashboard: **Email → Email Routing → Enable**.
- It auto-creates: **2 MX records** (route1/route2.mx.cloudflare.net) + **TXT** `v=spf1 include:_spf.mx.cloudflare.net ~all`.
- **Add routing rule:** `sam@audasmedia.com.au` → `samuelrolfe@gmail.com`
- Optionally a catch-all → Gmail.

## D. Resulting SPF (combine providers)
After B+C: SPF must include SES + Cloudflare. Simplest working value (single TXT):
```
v=spf1 include:_spf.mx.cloudflare.net include:amazonses.com ~all
```
(Replace the old InMotion SPF.)

## Verification
- MXToolbox: DNS lookup → MX/SPF/DKIM/DMARC all pass
- Test: send to `sam@audasmedia.com.au` → arrives in Gmail; send via SES → delivered, DKIM=pass

---
*Part of [[Migration Plan — InMotion to Local + AWS Offsite]] Phase 2. Track in [[Migration Work Log]].*