diff --git a/terraform/cloudflare_record.tf b/terraform/cloudflare_record.tf
index 246ce2d..bbb5202 100644
--- a/terraform/cloudflare_record.tf
+++ b/terraform/cloudflare_record.tf
@@ -53,3 +53,21 @@ resource "cloudflare_dns_record" "root_spf" {
   type    = "TXT"
   zone_id = var.cloudflare_zone_id
 }
+
+resource "cloudflare_dns_record" "dkim" {
+  content = "\"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo97+54PLHQFcxkNTJM3nGthheyCbarZx51oeec2mV/imIsGdl9G0SnCXoteNI0BBGmdyK6jqmWzX5Hf+/ArfVlR90Wi/SznY1sYJrNKpTsbHnEZoqWszFU2ML9B4fzSdIZyqtZ0iZptiIFrykFjSjkftp0/oE4fyk0emTPpIZGwz+mjFiG7H0T2Nt9oBVMYaHOqwefO+2uKGEgy/eysfbV5khwd1K9w926A+R059WqOOo52idPejTwpV5a7c5JiTJstkAVy24c9BN6QAgE5tmstBdwH70Wcc3wA4cKU1laqZY6HMVGh9ctdffMVDwhGRQG7Gw2Iti0i7ZDYbRYCpjwIDAQAB\""
+  name    = "rs20260519._domainkey"
+  proxied = false
+  ttl     = 3600
+  type    = "TXT"
+  zone_id = var.cloudflare_zone_id
+}
+
+resource "cloudflare_dns_record" "dmarc" {
+  content = "\"v=DMARC1; p=quarantine; aspf=r; adkim=r; rua=mailto:dmarc@akimo.dev\""
+  name    = "_dmarc"
+  proxied = false
+  ttl     = 3600
+  type    = "TXT"
+  zone_id = var.cloudflare_zone_id
+}