docs(kittle): comprehensive DKIM/DMARC setup guide for kittlearizona.com

Created detailed implementation guide for email authentication:
- Step-by-step DKIM enablement in M365
- DKIM CNAME DNS record creation (NSOne/Squarespace)
- DMARC policy configuration and testing
- Verification procedures and troubleshooting
- Post-implementation monitoring guide

Current status documented:
- SPF: PASS (configured correctly)
- DKIM: MISSING (not configured)
- DMARC: MISSING (not configured)
- MX: PASS (points to M365)

Impact: Missing DKIM/DMARC affects deliverability and domain security
Priority: HIGH
Estimated time: 30-45 min + 24-48h DNS propagation

Updated:
- clients/kittle/docs/email/dkim-dmarc-setup.md (NEW - full guide)
- clients/kittle/docs/network/dns.md (external DNS section, TODO items)

Machine: Mikes-MacBook-Air.local
Timestamp: 2026-04-24 09:28:23

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
2026-04-24 09:28:23 -07:00
parent ffe29b286f
commit 8419cf2738
2 changed files with 411 additions and 2 deletions

View File

@@ -26,7 +26,24 @@
## External DNS
- Registrar: Unknown
- Primary Domain: kittlearizona.com
- Management URL: Unknown
- Nameservers: NSOne + Squarespace (hybrid setup)
- dns1.p02.nsone.net
- dns2.p02.nsone.net
- dns3.p02.nsone.net
- dns4.p02.nsone.net
- ns01.squarespacedns.com
- ns02.squarespacedns.com
- ns03.squarespacedns.com
- ns04.squarespacedns.com
### Email DNS Records (as of 2026-04-23)
- **MX:** `0 kittlearizona-com.mail.protection.outlook.com` (Microsoft 365)
- **SPF:** `v=spf1 include:spf.protection.outlook.com -all` [OK]
- **DKIM:** NOT CONFIGURED [ACTION REQUIRED]
- **DMARC:** NOT CONFIGURED [ACTION REQUIRED]
**[HIGH PRIORITY]** Missing DKIM/DMARC impacts email deliverability and security.
**Setup Guide:** See `docs/email/dkim-dmarc-setup.md` for implementation steps.
## Issues
1. **No reverse DNS zone** — Create 0.0.10.in-addr.arpa for PTR lookups on 10.0.0.0/24
@@ -38,4 +55,6 @@
- [ ] Verify what DNS server DHCP clients receive from the ISP router
- [ ] Consider adding secondary DNS forwarder for redundancy
- [ ] Enable DNS scavenging to prevent stale records
- [ ] Document external DNS (registrar, MX records, SPF/DKIM/DMARC for kittlearizona.com)
- [ ] **[HIGH PRIORITY] Configure DKIM for kittlearizona.com** (see docs/email/dkim-dmarc-setup.md)
- [ ] **[HIGH PRIORITY] Add DMARC policy for kittlearizona.com** (see docs/email/dkim-dmarc-setup.md)
- [ ] Identify DNS registrar and management URL for kittlearizona.com