lanetti.fi: no DKIM key found on any common selector
Imported from GitHub issue El-SaMa/oma#210 by @El-SaMa.
Found by the new DKIM Checker: lanetti.fi has DMARC p=quarantine but no DKIM key on 40+ common selectors (and none of glama/dkim/default/mail/x/s1/rspamd). Delivery then relies on SPF alignment only.
Do: find which selector Glama/rspamd signs with for lanetti.fi (check a sent message's DKIM-Signature: s=; use https://lanedns.lanetti.fi/tools/email-header-analyzer/). If unsigned, enable DKIM signing for the domain through the supported Enhance/mail path and publish the key via oma.admin_dns_record + oma.confirm_tool. Never hand-edit Glama mail config (CLAUDE.md mail rules). Verify with https://lanedns.lanetti.fi/tools/dkim-checker/?domain=lanetti.fi
Context (2026-10-14): lanedns.lanetti.fi (Lanetti Tools, standalone PHP site on nilek, repo El-SaMa/lanedns site/) was revamped and OMA became its control plane: usage in /admin/tools/usage, settings in /admin/tools/settings, staff MCP oma.admin_lanetti_tools, config pull GET /api/lanetti-tools/config (link token in LaneDNS storage/oma-link.php). Events: site_events site lanedns.lanetti.fi, tool_run sanitized by services/core-api/src/lanetti-tools/usage-events.ts. Read handbook hosting/netspeed section "OMA is the control plane" and .cursor/rules/lanedns-standalone.mdc (deploy recipe: keep public_html group www-data) before touching LaneDNS.