in the end, i went:
- from running mail.whitequark.org on DigitalOcean (extremely poor reputation of all IP blocks) to Hetzner Cloud (coin flip, but you can get clean IPs with minimal effort)
- from running roundcube+postfix+dovecot on ansible+Debian with spamassassin (ongoing suffering) to NixOS with rspamd (one-time suffering)
in the end i have clean IP reptuation, SPF pass, DKIM pass, DMARC pass. does gmail accept my email? yup, cold emailing people just works. with everyone but M365.
2/3