How to improve SpamAssassin check?

Question

Mail server

On the site https://www.mail-tester.com I 'm checking for 10/10
But these two points can apparently be improved, but I don't really understand what is needed from me.

I ask for help from respected experts. :)

Answer 1

-0.1 for DKIM_SIGNED -> it substitutes automatically because you can sign DKIM but the signature will probably not be valid. Further tests of the scoring test neutralize this minus by adding 3 times 0.1
-0.01 - SPF:test of HELO record failed => perhaps the problem is that your server pretends to send a name that is not associated with the sender's domain.