From 60c4e0256c81fe95008eb3a293970a2719278307 Mon Sep 17 00:00:00 2001 From: devtony01 Date: Tue, 22 Jul 2025 12:15:33 +0000 Subject: [PATCH 1/3] feat: Add email signing DNS records for sam2-saas-prod - Update main domain with MX, SPF, and DMARC records for Resend - Add DKIM subdomain record for email signing verification - Add DMARC policy subdomain record for authentication - Required for production email verification and Google OAuth --- domains/_dmarc.sam2-saas-prod.is-not-a.dev.json | 15 +++++++++++++++ ...nd._domainkey.sam2-saas-prod.is-not-a.dev.json | 15 +++++++++++++++ domains/sam2-saas-prod.is-not-a.dev.json | 12 +++++++++++- 3 files changed, 41 insertions(+), 1 deletion(-) create mode 100644 domains/_dmarc.sam2-saas-prod.is-not-a.dev.json create mode 100644 domains/resend._domainkey.sam2-saas-prod.is-not-a.dev.json diff --git a/domains/_dmarc.sam2-saas-prod.is-not-a.dev.json b/domains/_dmarc.sam2-saas-prod.is-not-a.dev.json new file mode 100644 index 00000000..fa0092ac --- /dev/null +++ b/domains/_dmarc.sam2-saas-prod.is-not-a.dev.json @@ -0,0 +1,15 @@ +{ + "description": "DMARC record for email authentication policy - SAM2 SaaS Production", + "domain": "is-not-a.dev", + "subdomain": "_dmarc.sam2-saas-prod", + "owner": { + "repo": "https://github.com/devtony01/sam2-saas-concept", + "email": "chibuezeogbuji01@gmail.com" + }, + "record": { + "TXT": [ + "v=DMARC1; p=none;" + ] + }, + "proxied": false +} diff --git a/domains/resend._domainkey.sam2-saas-prod.is-not-a.dev.json b/domains/resend._domainkey.sam2-saas-prod.is-not-a.dev.json new file mode 100644 index 00000000..f0b5b44a --- /dev/null +++ b/domains/resend._domainkey.sam2-saas-prod.is-not-a.dev.json @@ -0,0 +1,15 @@ +{ + "description": "DKIM record for Resend email signing - SAM2 SaaS Production", + "domain": "is-not-a.dev", + "subdomain": "resend._domainkey.sam2-saas-prod", + "owner": { + "repo": "https://github.com/devtony01/sam2-saas-concept", + "email": "chibuezeogbuji01@gmail.com" + }, + "record": { + "TXT": [ + "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfVM4sMAa9ppIBm+D8SLRZsnEV+JWsWu4CBTCxOyzYTDN8X5tkBCueZrIQKkyy31pM72MMVvASkqOFBO+PmVI5hDxxI3+RZ5QeojSMrkm6kWa8Lz2XafYPv1NgHHGuGSoGhiYOIxqFCEytxnZurqtSy/C0E+Qx2zs9AaUbDObXVwIDAQAB" + ] + }, + "proxied": false +} diff --git a/domains/sam2-saas-prod.is-not-a.dev.json b/domains/sam2-saas-prod.is-not-a.dev.json index d1eaecd0..271bd394 100644 --- a/domains/sam2-saas-prod.is-not-a.dev.json +++ b/domains/sam2-saas-prod.is-not-a.dev.json @@ -7,7 +7,17 @@ "email": "chibuezeogbuji01@gmail.com" }, "record": { - "CNAME": "a50df0d491cd74be0a95d0fbc5535687-50644910.us-east-1.elb.amazonaws.com" + "CNAME": "a50df0d491cd74be0a95d0fbc5535687-50644910.us-east-1.elb.amazonaws.com", + "MX": [ + { + "priority": 10, + "value": "feedback-smtp.us-east-1.amazonses.com" + } + ], + "TXT": [ + "v=spf1 include:amazonses.com ~all", + "v=DMARC1; p=none;" + ] }, "proxied": false } From 44d80fb9a7a92394b52bb910a3e147dc6f2ec8b0 Mon Sep 17 00:00:00 2001 From: devtony01 Date: Tue, 22 Jul 2025 13:02:23 +0000 Subject: [PATCH 2/3] fix: Replace CNAME with A records to allow MX records for sam2-saas-prod - DNS specification prevents CNAME and MX records coexisting - Replace CNAME with A records pointing to AWS ELB IP addresses - Fix MX record format to include priority and hostname - Resolves DNS validation failures in open-domains CI --- domains/sam2-saas-prod.is-not-a.dev.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/domains/sam2-saas-prod.is-not-a.dev.json b/domains/sam2-saas-prod.is-not-a.dev.json index 271bd394..769f6afb 100644 --- a/domains/sam2-saas-prod.is-not-a.dev.json +++ b/domains/sam2-saas-prod.is-not-a.dev.json @@ -7,12 +7,12 @@ "email": "chibuezeogbuji01@gmail.com" }, "record": { - "CNAME": "a50df0d491cd74be0a95d0fbc5535687-50644910.us-east-1.elb.amazonaws.com", + "A": [ + "34.197.177.20", + "54.204.75.7" + ], "MX": [ - { - "priority": 10, - "value": "feedback-smtp.us-east-1.amazonses.com" - } + "10 feedback-smtp.us-east-1.amazonses.com" ], "TXT": [ "v=spf1 include:amazonses.com ~all", From 8a3a523817d12979736ea9b486e930769363f6cf Mon Sep 17 00:00:00 2001 From: devtony01 Date: Tue, 22 Jul 2025 13:04:09 +0000 Subject: [PATCH 3/3] fix: Remove priority from MX record format - MX records should only contain hostname strings - Priority is handled by DNS system configuration - Follow same format as other domains in repository --- domains/sam2-saas-prod.is-not-a.dev.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/domains/sam2-saas-prod.is-not-a.dev.json b/domains/sam2-saas-prod.is-not-a.dev.json index 769f6afb..90af7afa 100644 --- a/domains/sam2-saas-prod.is-not-a.dev.json +++ b/domains/sam2-saas-prod.is-not-a.dev.json @@ -12,7 +12,7 @@ "54.204.75.7" ], "MX": [ - "10 feedback-smtp.us-east-1.amazonses.com" + "feedback-smtp.us-east-1.amazonses.com" ], "TXT": [ "v=spf1 include:amazonses.com ~all",