Set up DNS at Cloudflare

Connect a domain whose DNS is hosted at Cloudflare, automatically with an API token or by hand.

Menus change. Cloudflare updates its dashboard from time to time, so button and menu names may differ slightly from this guide. Look for the DNS settings of your domain; the records you need are always the same. Your eoinbox dashboard shows the exact values and checks them for you.

Cloudflare is the one provider where we can set everything up for you. You can also add the records by hand.

Option A: automatic setup (recommended)

In the eoinbox dashboard, open your domain and choose Set up automatically with Cloudflare.
In another tab, sign in at dash.cloudflare.com and go to My Profile → API Tokens → Create Token.
Use the Edit zone DNS template. Under Zone Resources, select Specific zone and pick only this domain.
Create the token, copy it and paste it into the eoinbox dashboard.

We add the records listed below and nothing else. We never change or delete records that are not ours. Once all records are green, you can delete the token in Cloudflare: because DKIM uses CNAME records, we do not need to edit your DNS again later.

Option B: add the records by hand

Sign in at dash.cloudflare.com and select your domain.
Open DNS → Records.
Click Add record for each row of the table.

Type	Name / host	Value / target	Priority	Status
`TXT`	`@`	`eoinbox-verify=<your token>`Proves you own the domain		Required
`MX`	`@`	`mx1.eoinbox.com`Receiving mail	10	Required
`MX`	`@`	`mx2.eoinbox.com`Receiving mail (backup)	20	Required
`TXT`	`@`	`v=spf1 include:spf.eoinbox.com ~all`SPF, allows us to send for you		Required
`CNAME`	`eo1._domainkey`	`eo1._domainkey.<id>.dkim.eoinbox.com`DKIM signing key 1		Required
`CNAME`	`eo2._domainkey`	`eo2._domainkey.<id>.dkim.eoinbox.com`DKIM signing key 2		Required
`CNAME`	`eo3._domainkey`	`eo3._domainkey.<id>.dkim.eoinbox.com`DKIM signing key 3		Required
`TXT`	`_dmarc`	`v=DMARC1; p=none; rua=mailto:<id>@dmarc.eoinbox.com`DMARC policy and reports		Recommended
`CNAME`	`mta-sts`	`mta-sts.eoinbox.com`MTA-STS policy host		Recommended
`TXT`	`_mta-sts`	`v=STSv1; id=<policy id>`MTA-STS, enforces TLS for incoming mail		Recommended
`TXT`	`_smtp._tls`	`v=TLSRPTv1; rua=mailto:<id>@tlsrpt.eoinbox.com`TLS reporting		Recommended
`CNAME`	`autoconfig`	`autoconfig.eoinbox.com`Automatic setup in mail apps		Optional
`CNAME`	`autodiscover`	`autoconfig.eoinbox.com`Automatic setup in Outlook		Optional
`SRV`	`_imaps._tcp`	`0 1 993 mail.eoinbox.com`IMAP discovery		Optional
`SRV`	`_submissions._tcp`	`0 1 465 mail.eoinbox.com`SMTP discovery		Optional
`SRV`	`_jmap._tcp`	`0 1 443 mail.eoinbox.com`JMAP discovery		Optional

How to fill in the form:

Name: type @ for the domain itself, or the name from the table (for example _dmarc). Cloudflare adds your domain automatically.
MX: put mx1.eoinbox.com in Mail server and 10 in Priority, then add a second record for mx2.eoinbox.com with priority 20.
TXT: paste the value into Content without quotes.
CNAME: paste the target into Target, then switch Proxy status to DNS only (grey cloud). This is important: proxied DKIM, mta-sts or autoconfig records do not work.
SRV: fill in Name (for example _imaps._tcp), Priority 0, Weight 1, Port (993, 465 or 443) and Target mail.eoinbox.com.

Turn off Cloudflare Email Routing

If you used Cloudflare's own Email Routing on this domain, it has added MX and SPF records and keeps them locked. Before switching to eoinbox, go to Email → Email Routing for the domain and disable it, then remove the MX records it created. Your new MX records go in after that.

Existing SPF record

If there is already a TXT record starting with v=spf1, edit it and add include:spf.eoinbox.com rather than creating a second one. See Connecting your domain.