For your provider

Google Workspace

Google's SPF example for mail that Google sends is v=spf1 include:_spf.google.com ~all. Any other sender has to be added to that same record.

v=spf1 include:_spf.google.com ~all

DKIM and DMARC are separate pages in Workspace Help. Publish the DKIM key Google gives you, and a DMARC TXT record at _dmarc. The ~all in the example is Google's, not a recommendation to avoid -all.