From c016bdfbb104665a713eaec04a9997fed06678f1 Mon Sep 17 00:00:00 2001 From: dc Date: Thu, 10 Sep 2026 12:17:46 -0700 Subject: [PATCH] update Loot OS storefront template to version 2: DKIM CNAMEs move under mail. --- lootos.com.storefront.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/lootos.com.storefront.json b/lootos.com.storefront.json index 1770f00f9..ea357a0d6 100644 --- a/lootos.com.storefront.json +++ b/lootos.com.storefront.json @@ -3,10 +3,10 @@ "providerName": "Loot OS", "serviceId": "storefront", "serviceName": "Loot OS storefront", - "version": 1, + "version": 2, "logoUrl": "https://lootos.com/domain-connect/logo.svg", - "description": "Points a hostname at your Loot OS hosted storefront and lets its sign-in emails come from no-reply@ that hostname. The certificate is issued and renewed automatically once the records resolve.", - "variableDescription": "%target% is the storefront edge hostname the CNAME points at (cdn.lootos.com in production). %endpoint% is the CloudFront routing endpoint behind it, which the _cf-challenge record names so CloudFront can confirm the hostname is meant for this storefront. %dkim1%, %dkim2% and %dkim3% are the Amazon SES Easy DKIM tokens issued for the hostname; the three CNAMEs let sign-in emails be signed as no-reply@ the hostname. Every request is signed; the DNS provider verifies the signature against _dck1.lootos.com.", + "description": "Points a hostname at your Loot OS hosted storefront and lets its sign-in emails come from no-reply@mail. that hostname. The certificate is issued and renewed automatically once the records resolve.", + "variableDescription": "%target% is the storefront edge hostname the CNAME points at (cdn.lootos.com in production). %endpoint% is the CloudFront routing endpoint behind it, which the _cf-challenge record names so CloudFront can confirm the hostname is meant for this storefront. %dkim1%, %dkim2% and %dkim3% are the Amazon SES Easy DKIM tokens issued for mail. the hostname; the three CNAMEs, under that mail. subdomain, let sign-in emails be signed as no-reply@mail. the hostname and leave any mail already on the hostname untouched. Every request is signed; the DNS provider verifies the signature against _dck1.lootos.com.", "syncBlock": false, "syncPubKeyDomain": "lootos.com", "syncRedirectDomain": "lootos.com,lootmonsters.com", @@ -27,19 +27,19 @@ }, { "type": "CNAME", - "host": "%dkim1%._domainkey", + "host": "%dkim1%._domainkey.mail", "pointsTo": "%dkim1%.dkim.amazonses.com", "ttl": 300 }, { "type": "CNAME", - "host": "%dkim2%._domainkey", + "host": "%dkim2%._domainkey.mail", "pointsTo": "%dkim2%.dkim.amazonses.com", "ttl": 300 }, { "type": "CNAME", - "host": "%dkim3%._domainkey", + "host": "%dkim3%._domainkey.mail", "pointsTo": "%dkim3%.dkim.amazonses.com", "ttl": 300 }