From 5874e61c2ea8fb1012e03be974f246660c15b067 Mon Sep 17 00:00:00 2001
From: Jakub Czajka <jakub@ekhem.eu.org>
Date: Sun, 6 Nov 2022 16:00:28 +0100
Subject: [PATCH] [dovecot] Document SPF and DMARC DNS records.

SPF DNS records specify which IP addresses may send email on behalf of
the domain. DMARC DNS records specify what happens when mail cannot be
delivered.
---
 dovecot/README | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/dovecot/README b/dovecot/README
index 8466c00..fb6087f 100644
--- a/dovecot/README
+++ b/dovecot/README
@@ -49,10 +49,12 @@ Add DNS records. If no MX record is present, mail servers fall back to the A
 record (see https://serverfault.com/a/470651).
 
 ```
-example.com.      0 A       <ipv4_address>
-example.com.      0 AAAA    <ipv6_address>
-example.com.      0 MX    0 mail.example.com
-mail.example.com. 0 CNAME   example.com.
+example.com.        0 A       <ipv4_address>
+example.com.        0 AAAA    <ipv6_address>
+example.com.        0 MX    0 mail.example.com
+mail.example.com.   0 CNAME   example.com.
+example.com.        0 TXT     v=spf1 ip4=<IPv4 address> ip6=<IPv6 address> ~all
+_dmarc.example.com. 0 TXT     v=DMARC1; p=none; rua=mailto:<email>
 ```
 
 Install `certbot`.
-- 
2.39.5