diff --git a/.gitignore b/.gitignore
index 9d440bb..f2d0bc9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,4 +16,5 @@
 /logs/simpleid/
 /mail/config/
 /mail/data/
+/mail/rspamd-override.d/
 /mail/state/
diff --git a/TODO.on.site b/TODO.on.site
index 3409510..3fbf517 100644
--- a/TODO.on.site
+++ b/TODO.on.site
@@ -19,3 +19,9 @@
 * Once `docker-compose -f sa-certbot.yml run new`
 * Every x < 30 days `docker-compose -f sa-certbot.yml run renew`
 * Always reload nginx `docker-compose exec nginx nginx -s reload`
+
+DKIM:
+* `docker-compose exec mailserver setup config dkim`
+* If using a subdomain, set `use_esld = false;`
+  in `mail/rspamd-override.d/dkim_signing.conf`
+* Publish key from `mail/config/rspamd/dkim/*.public.dns.txt` via DNS
diff --git a/docker-compose.yml b/docker-compose.yml
index febf7fb..cbabb0b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -76,6 +76,7 @@
       - ./mail/data/:/var/mail/:rw
       - ./mail/state/:/var/mail-state/:rw
       - ./mail/config/:/tmp/docker-mailserver/:rw
+      - ./mail/rspamd-override.d/:/etc/rspamd/override.d/:rw
       - /etc/localtime:/etc/localtime:ro
     restart: always
     stop_grace_period: 1m