From 319898b7f6496aeaf38b14f7b3a54147a3dfb75c Mon Sep 17 00:00:00 2001 From: "root@culturestrings" Date: Sat, 29 Aug 2020 00:27:13 +0000 Subject: opendkim: added the submission service (strict sign or reject). --- public/fs/etc/opendkim/submission.conf | 10 ++++++++++ public/fs/etc/systemd/system/submission.service | 14 ++++++++++++++ .../etc/systemd/system/submission.service.d/override.conf | 3 +++ 3 files changed, 27 insertions(+) create mode 100644 public/fs/etc/opendkim/submission.conf create mode 100644 public/fs/etc/systemd/system/submission.service create mode 100644 public/fs/etc/systemd/system/submission.service.d/override.conf diff --git a/public/fs/etc/opendkim/submission.conf b/public/fs/etc/opendkim/submission.conf new file mode 100644 index 0000000..a546b73 --- /dev/null +++ b/public/fs/etc/opendkim/submission.conf @@ -0,0 +1,10 @@ +KeyTable file:/etc/dkimkeys/keytable +SigningTable refile:/etc/dkimkeys/signingtable +InternalHosts refile:/etc/dkimkeys/certclients +ExternalIgnoreList refile:/etc/dkimkeys/certclients + +Mode sv +Umask 0002 +Socket local:/var/spool/postfix/opendkim/submission.sock + +On-Default reject diff --git a/public/fs/etc/systemd/system/submission.service b/public/fs/etc/systemd/system/submission.service new file mode 100644 index 0000000..130a091 --- /dev/null +++ b/public/fs/etc/systemd/system/submission.service @@ -0,0 +1,14 @@ +[Unit] +Description=DomainKeys Identified Mail (DKIM) Submission Port Milter +Documentation=man:opendkim(8) man:opendkim.conf(5) man:opendkim-genkey(8) man:opendkim-genzone(8) man:opendkim-testadsp(8) man:opendkim-testkey http://www.opendkim.org/docs.html +After=local-fs.target network.target syslog.target + +[Service] +Type=simple +PIDFile=/var/run/opendkim/submission.pid +ExecStart=/usr/sbin/opendkim -f -x /etc/opendkim/submission.conf +ExecReload=/bin/kill -USR1 $MAINPID +NonBlocking=yes + +[Install] +WantedBy=multi-user.target diff --git a/public/fs/etc/systemd/system/submission.service.d/override.conf b/public/fs/etc/systemd/system/submission.service.d/override.conf new file mode 100644 index 0000000..24d8bed --- /dev/null +++ b/public/fs/etc/systemd/system/submission.service.d/override.conf @@ -0,0 +1,3 @@ +[Service] +User=opendkim +Group=postfix -- cgit v1.2.3