For some reason my emails are being sent without DKIM headers.
I set up DKIM via
Email Settings > DomainKeys... and then I created a TXT record with the info in my Cloudflare DNS settings page.
I have both
DNS enabled for the virtual server in Virtualmin, like it says in the docs.
SPF and DMARC are both good.