Add auridigital.com.email.json (Amazon SES email authentication)#1370
Merged
pawel-kow merged 2 commits intoJul 14, 2026
Conversation
github-actions
Bot
added
the
Test links missing
|
✅ JSON Filename Check Passed |
|
✅ JSON Schema Validation Passed |
github-actions
Bot
added
the
automerge-possible
Linter OK
|
| Level | Code | Note |
|---|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
github-actions
Bot
added
Forged editor links
PR Description Check PassedAll required sections are filled in correctly. Details |
17 tasks
Merged
via the queue into
Domain-Connect:master
with commit Jul 14, 2026
841ebc5
8 of 11 checks passed
s3t-dux
pushed a commit
to s3t-dux/Templates
that referenced
this pull request
Jul 17, 2026
…ect#1374) # Description New Domain Connect template for **Auri Digital** website/funnel domains. Auri Digital is a multi-tenant marketing/CRM platform; customers serve their websites and funnels on their own (sub)domains via a single CNAME to our edge (`sites.aurisend.com`), with SSL issued automatically on connection. Companion to the already-submitted email template (Domain-Connect#1370). ## Type of change - [x] New template - [ ] Bug fix (non-breaking change which fixes an issue in the template) - [ ] New feature (non-breaking change which adds functionality to the template) - [ ] Breaking change (fix or feature that would cause existing template behavior to be not backward compatible) # How Has This Been Tested? - [x] Template functionality checked using [Online Editor](https://domainconnect.paulonet.eu/dc/free/templateedit) - [x] Template file name follows the pattern `<providerId>.<serviceId>.json` - [x] resource URL provided with `logoUrl` is actually served by a webserver # Checklist of common problems - [x] `syncPubKeyDomain` is set — **justification for omitting**: the template is fully static (no variables; fixed CNAME target `sites.aurisend.com`) and `syncRedirectDomain` is set, which per the signing guidance means signatures are not required — there is nothing an attacker could substitute. - [x] `warnPhishing` is **not** set alongside `syncPubKeyDomain` - [x] `syncRedirectDomain` is set (the synchronous flow uses `redirect_uri`) - [x] no TXT record contains SPF content - [x] `txtConflictMatchingMode` — n/a, no TXT records - [x] no variable is used as a bare full record value — the CNAME target is a fixed constant - [x] no bare variable is used as the full `host` label — the only record host is `@` - [x] no variable is used in the `host` field to create a subdomain — `hostRequired: true`; the subdomain rides the `host` apply parameter - [x] `%host%` does not appear explicitly in any `host` attribute - [x] `essential` — n/a; the single CNAME **is** the service and removing it disconnects it ## Online Editor test results **Editor test link(s):** - Subdomain (host=go; hostRequired=true so no apex test applies): https://domainconnect.paulonet.eu/dc/free/templateedit?token=H4sIAItgU2oC%2F91TXU%2FbMBT9K5Zf17RJ2tI20qTxsaFpUKECQhpCkWvfBg%2FXDrZTyKr%2B910nFAoM7X1SH%2Brcc%2B45Pvd6TT0sS8U80GxNS2tWUoD9LmhGWWWlkIX0THW5WdLOc3nKlgin%2BwggRy0Cqw7sSnJouLfGeR1Qz5%2F%2FwiFXMHfSB9AKrJNG0yzpUGUKc2lV6OJ96bJe742TXkB0S10gUYDjVpa%2BIdMzI7V3pDaVJcIsmdSE%2Bfb4SvihFSbGkkWlNaguOT8%2FIdLhz1UgCKs80r3kTKmaGM2BcINA7kF0g19mJZsrOHolPzVkW3AkIv4WiAVurCCe2QJ8EFjIR2xBLrAWQiIls5iMB0scKOzvGpqr5k%2F%2BvdkqB11Xaz4DIbGtP2oAKMvtsvt%2BWAF6Vs1%2FQP0MFNzJooE60GIHd6AMv6PZgikHHdp6djS7XlNfl2Fsh9P9068IDpbx%2BCUsQ5P1hcFjyNK97es9jrC%2FF8ebm5Y3g%2FsKjeN6eFvBpkN%2FGw35ixjCxNYpPDLcSnhq9aRaGPxfWFOVudwymvhc2N0t9%2FoV%2BWbLvg70G1SVhTYWckxCM19ZaO106LJSXubsgb18EjxnZalqNOmwik3eJ6LbvW68CebZP%2BPo0FzwYFiGhzKP%2B2yYjljUH6YQDSbjNJoIlkYxDId7o2SUDIZs5%2BV98DA%2FeHq7uYFDM16y8K721QOrHd3gZDDD%2F%2B1OOHLHViByFoBpnO5F8ShK0ot4kvXHWTLpjiejSZx8iuMsjsM1wPn2mmvcj93NoCvpeoPTYZr2Dx8PR6PZTB2f3Ir7xfjApFd2ME34t0slf5a%2Fju8%2B080fQpLPPk0FAAA%3D
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
New Domain Connect template for Auri Digital email authentication. Auri Digital is a multi-tenant marketing/CRM platform that sends email on customers' behalf via Amazon SES. This template provisions the records SES needs to authenticate a customer's sending domain: three Easy-DKIM CNAMEs, a custom MAIL FROM subdomain (MX + SPF), and a DMARC policy.
Type of change
How Has This Been Tested?
<providerId>.<serviceId>.jsonlogoUrlis actually served by a webserverChecklist of common problems
syncPubKeyDomainis set — the template is signed (public key published atdcsig.aurisend.com); the DKIM/region variables are attacker-relevant, so signing is requiredwarnPhishingis not set alongsidesyncPubKeyDomainsyncRedirectDomainis set (the synchronous flow usesredirect_uri)SPFMrecord typetxtConflictMatchingModeis set on the DMARC TXT record (Prefix/v=DMARC1)pointsTois%dkimN%.dkim.amazonses.com(fixed suffix), DMARC data is fixedhostlabel — DKIM host is%dkimN%._domainkey(fixed suffix)hostfield to create a subdomain — the MAIL FROM host is the fixed labelbounce; subdomain identities are handled via thehostapply parameter%host%does not appear explicitly in anyhostattributeessentialis set toOnApplyon the DMARC recordOnline Editor test results
Editor test link(s):