Hello,
My Mailcow seup is as follow:
VPS with port forwarding via Wirguard tunnel
Mailcow containers on my local rpi5
Nginx Proxy Manager for reverse proxy and SSL - the certs are also loaded to data/assets/ssl/
sendGrid for smtp relay
my DNS:

;; SOA Record
barak-kalai.com 3600 IN SOA lucy.ns.cloudflare.com. dns.cloudflare.com. 2049053885 10000 2400 604800 3600

;; NS Records
barak-kalai.com. 86400 IN NS lucy.ns.cloudflare.com.
barak-kalai.com. 86400 IN NS sean.ns.cloudflare.com.

;; A Records
mail2.barak-kalai.com. 1 IN A 67.205.136.94 ; cf_tags=cf-proxied:false
mail.barak-kalai.com. 1 IN A 193.29.14.89 ; cf_tags=cf-proxied:false

;; CNAME Records
50314827.barak-kalai.com. 1 IN CNAME sendgrid.net. ; cf_tags=cf-proxied:false
autoconfig.barak-kalai.com. 1 IN CNAME mail.barak-kalai.com. ; cf_tags=cf-proxied:false
autodiscover.barak-kalai.com. 1 IN CNAME mail.barak-kalai.com. ; cf_tags=cf-proxied:false
em1017.barak-kalai.com. 1 IN CNAME u50314827.wl078.sendgrid.net. ; cf_tags=cf-proxied:false
s1.domainkey.barak-kalai.com. 1 IN CNAME s1.domainkey.u50314827.wl078.sendgrid.net. ; cf_tags=cf-proxied:false
s2.domainkey.barak-kalai.com. 1 IN CNAME s2.domainkey.u50314827.wl078.sendgrid.net. ; cf_tags=cf-proxied:false
url8515.barak-kalai.com. 1 IN CNAME sendgrid.net. ; cf_tags=cf-proxied:false

;; MX Records
barak-kalai.com. 1 IN MX 10 mail.barak-kalai.com.

;; TXT Records
barak-kalai.com. 1 IN TXT “v=spf1 mx include:mailcowdomain.com include:sendgrid.net _all”
dkim._domainkey.barak-kalai.com. 1 IN TXT “v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+jY3GCCvUN8s3ka43lhQdTf6tSBzauix0ERv2DHBHOujfBQNB1kjmTo+lHF772pW7+K6OxmhZd8pXho1a/3uuv2SaJ2bax+WIHARVentM1kAGdlVSP+SvlQ/yEKRCP9ylZT7QrG6jA20reEFs0m/GTBs6SeBZDDb795yqoeGO+H9SqWDmKWecQ” “88BqU6JHT1ots/fk5Z6dcif2PwD1Q3mJRBXo4+2+n/HIpt/+4Ax6oIf1q7mabwnqaewOHHZ3DssCjqiCBsuR0qY5H8ae0DN5nLF1YaAc6pHhlPUH2S5Ea8r2oHyyf15aZ3niGAcaTzTVUEEmaVe+T2swRDMfZlQIDAQAB”
dmarc.barak-kalai.com. 1 IN TXT “v=DMARC1; p=none; rua=mailto:postmaster@barak-kalai.com, mailto:dmarc@baral-kalai.com; pct=100; adkim=s; aspf=s.”
``
for emails coming from Gmail I get an error RSPAMD rejected
HFILTER_HOSTNAME_UNKNOWN (8.5)
IP_REPUTATION_SPAM (5.012893) [asn: 55720(0.35), country: MY(0.01), ip: 10.7.0.1(0.89)]
BAYES_SPAM (4.499984) [99.99%]
RDNS_NONE (2)
MISSING_MIME_VERSION (2)
BAD_REP_POLICIES (2)
MIME_GOOD (-0.1) [multipart/related, multipart/alternative, text/plain]
MX_GOOD (-0.01) []
ARC_ALLOW (0) [google.com:s=arc-20240605:i=2]
RCPT_COUNT_ONE (0) [1]
RCVD_IN_DNSWL_NONE (0) [209.85.220.69:received]
FREEMAIL_ENVFROM (0) [gmail.com]
MIME_TRACE (0) [0:~, 1:+, 2:+, 3:+, 4:~, 5:~, 6:~, 7:~, 8:+]
DWL_DNSWL_NONE (0) [googlemail.com:dkim]
HAS_ATTACHMENT (0)
MISSING_XM_UA (0)
FWD_GOOGLE (0) [barakkalai1@gmail.com]
R_SPF_SOFTFAIL (0) [_all:c]
DKIM_TRACE (0) [googlemail.com:+]
BCC (0)
FREEMAIL_TO (0) [gmail.com]
SUBJ_BOUNCE_WORDS (0)
SPF_FAIL_FORWARDING (0)
FREEMAIL_FROM (0) [googlemail.com]
FORGED_SENDER_FORWARDING (0)
FROM_NEQ_ENVFROM (0) [mailer-daemon@googlemail.com, barakkalai1@gmail.com]
DMARC_POLICY_ALLOW_WITH_FAILURES (0)
ASN (0) [asn:55720, ipnet:0.0.0.0/0, country:MY]
FROM_HAS_DN (0)
R_DKIM_ALLOW (0) [googlemail.com:s=20230601]
RCVD_TLS_LAST (0)
FORGED_SENDER (0) [mailer-daemon@googlemail.com, barakkalai1@gmail.com]
RCPT_MAILCOW_DOMAIN (0) [barak-kalai.com]
DMARC_POLICY_ALLOW (0) [googlemail.com, quarantine]
RCVD_COUNT_THREE (0) [4]
ARC_SIGNED (0) [barak-kalai.com:s=dkim:i=3]
TO_DN_NONE (0)
TAGGED_FROM (0) [caf=barak-g=barak-kalaicom]
What am I doing wrong?