50 lines
2.1 KiB
Bash
50 lines
2.1 KiB
Bash
clear
|
|
echo "Domain without www or e-mail:"
|
|
read domain
|
|
|
|
domonly=${domain}
|
|
domain=mail.${domain}
|
|
dhparam=1024
|
|
|
|
apt install opendkim opendkim-tools -y
|
|
|
|
gpasswd -a postfix opendkim
|
|
|
|
sed -i -e 's/#Canonicalization simple/Canonicalization relaxed/simple/' -e 's/#Mode sv/Mode sv/' -e 's/#SubDomains no/SubDomains no/' /etc/opendkim.conf
|
|
echo "" >> /etc/opendkim.conf
|
|
echo "AutoRestart yes" >> /etc/opendkim.conf
|
|
echo "AutoRestartRate 10/1M" >> /etc/opendkim.conf
|
|
echo "Background yes" >> /etc/opendkim.conf
|
|
echo "DNSTimeout 5" >> /etc/opendkim.conf
|
|
echo "SignatureAlgorithm rsa-sha256" >> /etc/opendkim.conf
|
|
echo "" >> /etc/opendkim.conf
|
|
echo "# Map domains in From addresses to keys used to sign messages" >> /etc/opendkim.conf
|
|
echo "KeyTable refile:/etc/opendkim/key.table" >> /etc/opendkim.conf
|
|
echo "SigningTable refile:/etc/opendkim/signing.table" >> /etc/opendkim.conf
|
|
echo "" >> /etc/opendkim.conf
|
|
echo "# Hosts to ignore when verifying signatures" >> /etc/opendkim.conf
|
|
echo "ExternalIgnoreList /etc/opendkim/trusted.hosts" >> /etc/opendkim.conf
|
|
echo "" >> /etc/opendkim.conf
|
|
echo "# A set of internal hosts whose mail should be signed" >> /etc/opendkim.conf
|
|
echo "InternalHosts /etc/opendkim/trusted.hosts" >> /etc/opendkim.conf
|
|
|
|
mkdir -p /etc/opendkim
|
|
mkdir -p /etc/opendkim/keys
|
|
chown -R opendkim:opendkim /etc/opendkim
|
|
chmod go-rw /etc/opendkim/keys
|
|
|
|
echo "*@$domonly default._domainkey.$domonly" >> /etc/opendkim/signing.table
|
|
|
|
echo "default._domainkey.$domonly $domonly:default:/etc/opendkim/keys/$domonly/default.private" >> /etc/opendkim/key.table
|
|
|
|
echo "127.0.0.1" >> /etc/opendkim/trusted.hosts
|
|
echo "localhost" >> /etc/opendkim/trusted.hosts
|
|
echo "" >> /etc/opendkim/trusted.hosts
|
|
echo "*.$domonly" >> /etc/opendkim/trusted.hosts
|
|
|
|
mkdir -p /etc/opendkim/keys/$domonly
|
|
opendkim-genkey -b $dhparam -d $domonly -D /etc/opendkim/keys/$domonly -s default -v
|
|
chown opendkim:opendkim /etc/opendkim/keys/$domonly/default.private
|
|
|
|
clear
|
|
cat /etc/opendkim/keys/$domonly/default.txt |