diff --git a/config/dkim/opendkim.sh b/config/dkim/opendkim.sh new file mode 100644 index 0000000..99be8b6 --- /dev/null +++ b/config/dkim/opendkim.sh @@ -0,0 +1,50 @@ +clear +echo "Domain without www or e-mail:" +read domain + +domonly=${domain} +domain=mail.${domain} +dhparam=1024 + +apt install opendkim opendkim-tools -y + +gpasswd -a postfix opendkim + +sed -i -e 's/#Canonicalization simple/Canonicalization relaxed/simple/' -e 's/#Mode sv/Mode sv/' -e 's/#SubDomains no/SubDomains no/' /etc/opendkim.conf +echo "" >> /etc/opendkim.conf +echo "AutoRestart yes" >> /etc/opendkim.conf +echo "AutoRestartRate 10/1M" >> /etc/opendkim.conf +echo "Background yes" >> /etc/opendkim.conf +echo "DNSTimeout 5" >> /etc/opendkim.conf +echo "SignatureAlgorithm rsa-sha256" >> /etc/opendkim.conf +echo "" >> /etc/opendkim.conf +echo "# Map domains in From addresses to keys used to sign messages" >> /etc/opendkim.conf +echo "KeyTable refile:/etc/opendkim/key.table" >> /etc/opendkim.conf +echo "SigningTable refile:/etc/opendkim/signing.table" >> /etc/opendkim.conf +echo "" >> /etc/opendkim.conf +echo "# Hosts to ignore when verifying signatures" >> /etc/opendkim.conf +echo "ExternalIgnoreList /etc/opendkim/trusted.hosts" >> /etc/opendkim.conf +echo "" >> /etc/opendkim.conf +echo "# A set of internal hosts whose mail should be signed" >> /etc/opendkim.conf +echo "InternalHosts /etc/opendkim/trusted.hosts" >> /etc/opendkim.conf + +mkdir -p /etc/opendkim +mkdir -p /etc/opendkim/keys +chown -R opendkim:opendkim /etc/opendkim +chmod go-rw /etc/opendkim/keys + +echo "*@$domonly default._domainkey.$domonly" >> /etc/opendkim/signing.table + +echo "default._domainkey.$domonly $domonly:default:/etc/opendkim/keys/$domonly/default.private" >> /etc/opendkim/key.table + +echo "127.0.0.1" >> /etc/opendkim/trusted.hosts +echo "localhost" >> /etc/opendkim/trusted.hosts +echo "" >> /etc/opendkim/trusted.hosts +echo "*.$domonly" >> /etc/opendkim/trusted.hosts + +mkdir -p /etc/opendkim/keys/$domonly +opendkim-genkey -b $dhparam -d $domonly -D /etc/opendkim/keys/$domonly -s default -v +chown opendkim:opendkim /etc/opendkim/keys/$domonly/default.private + +clear +cat /etc/opendkim/keys/$domonly/default.txt \ No newline at end of file