damn i’ve had SPF misconfigured this whole time,
oh wow no actually
because my spouses have faer emails forwarded i can't just say "reject the email if it's not sent from the cloudbox server IP". because it's technically getting resent from a different server entirely. damn.
OR just set SPF to softfail instead of reject
either that or just use postfix like a boring syscatmin