From e0255c6b0825b713416bc431c2b5bf3317e24cf9 Mon Sep 17 00:00:00 2001
From: Erick Grau <erick.grau@chibitek.com>
Date: Fri, 10 Jul 2026 14:37:17 -0400
Subject: [PATCH] Add Chibitek Domain Security templates (dmarc,
 transportsecurity)

---
 chibitek.ai.dmarc.json             | 22 ++++++++++++++++++++
 chibitek.ai.transportsecurity.json | 32 ++++++++++++++++++++++++++++++
 2 files changed, 54 insertions(+)
 create mode 100644 chibitek.ai.dmarc.json
 create mode 100644 chibitek.ai.transportsecurity.json

diff --git a/chibitek.ai.dmarc.json b/chibitek.ai.dmarc.json
new file mode 100644
index 00000000..55114cb8
--- /dev/null
+++ b/chibitek.ai.dmarc.json
@@ -0,0 +1,22 @@
+{
+    "providerId": "chibitek.ai",
+    "providerName": "Chibitek Domain Security",
+    "serviceId": "dmarc",
+    "serviceName": "Managed DMARC",
+    "version": 1,
+    "logoUrl": "https://skippy.chibitek.com/chibitek-mark.png",
+    "description": "Delegates the domain's DMARC policy to Chibitek Domain Security. Chibitek hosts and maintains the DMARC record, ingests the aggregate reports receivers send back, and ramps the policy safely as the data proves every legitimate sender is authenticated.",
+    "variableDescription": "target is the Chibitek-hosted DMARC record for this domain, e.g. example-com._dmarc.dmarc.chibitek.ai",
+    "syncPubKeyDomain": "chibitek.ai",
+    "syncRedirectDomain": "skippy.chibitek.com",
+    "warnPhishing": true,
+    "hostRequired": false,
+    "records": [
+        {
+            "type": "CNAME",
+            "host": "_dmarc",
+            "pointsTo": "%target%",
+            "ttl": "3600"
+        }
+    ]
+}
diff --git a/chibitek.ai.transportsecurity.json b/chibitek.ai.transportsecurity.json
new file mode 100644
index 00000000..4a127c28
--- /dev/null
+++ b/chibitek.ai.transportsecurity.json
@@ -0,0 +1,32 @@
+{
+    "providerId": "chibitek.ai",
+    "providerName": "Chibitek Domain Security",
+    "serviceId": "transportsecurity",
+    "serviceName": "Managed MTA-STS and TLS Reporting",
+    "version": 1,
+    "logoUrl": "https://skippy.chibitek.com/chibitek-mark.png",
+    "description": "Enables Chibitek-managed transport security: MTA-STS (requires mail to the domain to travel over verified TLS) and TLS-RPT (routes encrypted-delivery failure reports to Chibitek Domain Security monitoring).",
+    "variableDescription": "stsid is the MTA-STS policy id; tlsrua is the TLS report mailbox hosted by Chibitek, e.g. abc123@reports.chibitek.ai",
+    "syncPubKeyDomain": "chibitek.ai",
+    "syncRedirectDomain": "skippy.chibitek.com",
+    "warnPhishing": true,
+    "hostRequired": false,
+    "records": [
+        {
+            "type": "TXT",
+            "host": "_mta-sts",
+            "ttl": "3600",
+            "data": "v=STSv1; id=%stsid%",
+            "txtConflictMatchingMode": "Prefix",
+            "txtConflictMatchingPrefix": "v=STSv1"
+        },
+        {
+            "type": "TXT",
+            "host": "_smtp._tls",
+            "ttl": "3600",
+            "data": "v=TLSRPTv1; rua=mailto:%tlsrua%",
+            "txtConflictMatchingMode": "Prefix",
+            "txtConflictMatchingPrefix": "v=TLSRPTv1"
+        }
+    ]
+}