diff --git a/infrastructure/terraform/dns-email.tf b/infrastructure/terraform/dns-email.tf
index 30dda87..b0d1202 100644
--- a/infrastructure/terraform/dns-email.tf
+++ b/infrastructure/terraform/dns-email.tf
@@ -1,14 +1,11 @@
 # dns-email.tf
 # V1e — SPF + DKIM + DMARC for vauco.no
-# Apply: terraform apply -target=google_dns_record_set.dkim
-# Verifiser: dig TXT google._domainkey.vauco.no
 
 locals {
   dns_zone = "vaucono"
   domain   = "vauco.no."
 }
 
-# ── SPF (allerede opprettet) ──────────────────────────────────────────────────────
 resource "google_dns_record_set" "spf" {
   name         = local.domain
   managed_zone = local.dns_zone
@@ -17,18 +14,25 @@ resource "google_dns_record_set" "spf" {
   rrdatas      = ["\"v=spf1 include:_spf.google.com ~all\""]
 }
 
-# ── DKIM — nøkkel splittet i to strenger à maks 255 tegn ───────────────────
 resource "google_dns_record_set" "dkim" {
   name         = "google._domainkey.${local.domain}"
   managed_zone = local.dns_zone
   type         = "TXT"
   ttl          = 3600
   rrdatas = [
-    "\"v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BWJTmOMIJ/nNFFOhyKQT1Ls35jYaBNKDGErqw2P4hOSpGHzJyMQAl3EkQyWYDC6e/mmk3It3HxwL8mfyyNKYXUFVVEKadDt58AFiJCNxM+lUAmdg0aM9ePWQ6LNBrkLE3Av7D/zrd40cFkBPP4eReKhWQQp94P5BuvoljFM6bTqmdejXuS5fERUMJ2p9aFo7tpSaczI57qt+CYejLaHCckgGoYeC" "7zecLxTQDA6Lfh7wX5rkjyVvU6q/+CeAOdNO+WyWEHPgEFsCnbZ8LhqlbnrkBib9KmpG99z7Btrnc1SHUj6X0nTfuXfJk+1w0bdlnaTr4asWdP6qVbQnksYSQIDAQAB\""
+    join("", [
+      "\"v=DKIM1; k=rsa; p=",
+      "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BWJTmOMIJ/nNFFOhyKQ",
+      "T1Ls35jYaBNKDGErqw2P4hOSpGHzJyMQAl3EkQyWYDC6e/mmk3It3HxwL8mfyyNK",
+      "YXUFVVEKadDt58AFiJCNxM+lUAmdg0aM9ePWQ6LNBrkLE3Av7D/zrd40cFkBPP4e",
+      "ReKhWQQp94P5BuvoljFM6bTqmdejXuS5fERUMJ2p9aFo7tpSaczI57qt+CYejLaHC",
+      "ckgGoYeC7zecLxTQDA6Lfh7wX5rkjyVvU6q/+CeAOdNO+WyWEHPgEFsCnbZ8Lhql",
+      "bnrkBib9KmpG99z7Btrnc1SHUj6X0nTfuXfJk+1w0bdlnaTr4asWdP6qVbQnksYSQ",
+      "IDAQAB\""
+    ])
   ]
 }
 
-# ── DMARC (allerede opprettet) ──────────────────────────────────────────────
 resource "google_dns_record_set" "dmarc" {
   name         = "_dmarc.${local.domain}"
   managed_zone = local.dns_zone