69 lines
2.5 KiB
Markdown
69 lines
2.5 KiB
Markdown
---
|
|
created: 2026-08-31
|
|
modified: 2026-08-31
|
|
type: project
|
|
client: sam
|
|
project: web-host-migration
|
|
status: active
|
|
priority: 1
|
|
tags:
|
|
- dns
|
|
- cloudflare
|
|
- ses
|
|
- email-routing
|
|
- audasmedia
|
|
aliases:
|
|
- cloudflare-record-set
|
|
id: 1848129026-CF
|
|
---
|
|
# Cloudflare Record Set — audasmedia.com.au (ready to paste)
|
|
|
|
> Prepared 2026-08-31. To be applied in **Cloudflare** DNS once nameservers are authoritative.
|
|
> Email: **SES outbound** + **Cloudflare Email Routing inbound (→ Gmail)**. **$0/month.**
|
|
|
|
## A. Existing site records (PRESERVE — do not change)
|
|
| Type | Name | Value | Proxy |
|
|
|---|---|---|---|
|
|
| A | `@` | `173.231.229.92` | DNS only (grey cloud) |
|
|
| A | `cpanel` | `173.231.229.92` | DNS only |
|
|
| A | `webmail` | `173.231.229.92` | DNS only |
|
|
| A | `ftp` | `173.231.229.92` | DNS only |
|
|
| CNAME | `www` | `@` | DNS only |
|
|
| CNAME | `mail` | `@` | DNS only |
|
|
|
|
> ⚠️ Keep these on **DNS only** (grey cloud) — do NOT proxy/orange-cloud them, to avoid surprises while sites are on InMotion.
|
|
|
|
## B. SES outbound records (from SES console 2026-08-31)
|
|
### DKIM (3 CNAMEs)
|
|
| Type | Name | Value |
|
|
|---|---|---|
|
|
| CNAME | `3hcitiezqbwlyyrqhvuovye47ybnbheq._domainkey.audasmedia.com.au` | `3hcitiezqbwlyyrqhvuovye47ybnbheq.dkim.amazonses.com` |
|
|
| CNAME | `lswlbc3gsmshm4b22bpyfn5k2evdgrdh._domainkey.audasmedia.com.au` | `lswlbc3gsmshm4b22bpyfn5k2evdgrdh.dkim.amazonses.com` |
|
|
| CNAME | `ac5j6wxukvq6b5dacrp5xgzkdsovmm2e._domainkey.audasmedia.com.au` | `ac5j6wxukvq6b5dacrp5xgzkdsovmm2e.dkim.amazonses.com` |
|
|
|
|
### DMARC
|
|
| Type | Name | Value |
|
|
|---|---|---|
|
|
| TXT | `_dmarc.audasmedia.com.au` | `"v=DMARC1; p=none;"` |
|
|
|
|
> MAIL FROM custom-domain records: **SKIP for now** (low volume; default SES works fine).
|
|
|
|
## C. Cloudflare Email Routing (inbound → Gmail)
|
|
Enable in Cloudflare dashboard: **Email → Email Routing → Enable**.
|
|
- It auto-creates: **2 MX records** (route1/route2.mx.cloudflare.net) + **TXT** `v=spf1 include:_spf.mx.cloudflare.net ~all`.
|
|
- **Add routing rule:** `sam@audasmedia.com.au` → `samuelrolfe@gmail.com`
|
|
- Optionally a catch-all → Gmail.
|
|
|
|
## D. Resulting SPF (combine providers)
|
|
After B+C: SPF must include SES + Cloudflare. Simplest working value (single TXT):
|
|
```
|
|
v=spf1 include:_spf.mx.cloudflare.net include:amazonses.com ~all
|
|
```
|
|
(Replace the old InMotion SPF.)
|
|
|
|
## Verification
|
|
- MXToolbox: DNS lookup → MX/SPF/DKIM/DMARC all pass
|
|
- Test: send to `sam@audasmedia.com.au` → arrives in Gmail; send via SES → delivered, DKIM=pass
|
|
|
|
---
|
|
*Part of [[Migration Plan — InMotion to Local + AWS Offsite]] Phase 2. Track in [[Migration Work Log]].* |