89 lines
2.6 KiB
YAML
89 lines
2.6 KiB
YAML
---
|
|
- name: Manage the DKIM packages in EL systems
|
|
block:
|
|
- name: Install the DKIM packages on EL
|
|
yum:
|
|
pkg: '{{ postfix_dkim_el_pkgs }}'
|
|
state: present
|
|
|
|
when:
|
|
- ansible_distribution_file_variety == "RedHat"
|
|
- postfix_dkim_enabled
|
|
tags: ['postfix', 'postfix_dkim', 'dkim']
|
|
|
|
- name: Manage the DKIM packages in DEB systems
|
|
block:
|
|
- name: Install the DKIM packages on DEB
|
|
apt:
|
|
pkg: '{{ postfix_dkim_deb_pkgs }}'
|
|
state: present
|
|
cache_valid_time: 1800
|
|
|
|
when:
|
|
- ansible_distribution_file_variety == "Debian"
|
|
- postfix_dkim_enabled
|
|
tags: ['postfix', 'postfix_dkim', 'dkim']
|
|
|
|
- name: DKIM configuration
|
|
block:
|
|
- name: Create the dkim domains subdirs
|
|
file:
|
|
dest: '{{ postfix_dkim_base_dir }}/{{ item.domain }}'
|
|
state: directory
|
|
mode: 0750
|
|
owner: '{{ postfix_dkim_user }}'
|
|
group: '{{ postfix_dkim_group }}'
|
|
loop: '{{ postfix_dkim_domains }}'
|
|
|
|
- name: Create the dkim signatures
|
|
become: true
|
|
become_user: '{{ postfix_dkim_user }}'
|
|
shell: opendkim-genkey -D {{ postfix_dkim_base_dir }}/{{ item.domain }} -d {{ item.domain }} -s {{ item.dkim_selector }}
|
|
args:
|
|
creates: '{{ postfix_dkim_base_dir }}/{{ item.domain }}/{{ item.dkim_selector }}.private'
|
|
loop: '{{ postfix_dkim_domains }}'
|
|
notify: restart opendkim
|
|
|
|
- name: Update the keytable and signitable files
|
|
template:
|
|
src: 'dkim_{{ item }}.j2'
|
|
dest: '{{ postfix_dkim_base_dir }}/{{ item }}'
|
|
owner: '{{ postfix_dkim_user }}'
|
|
group: '{{ postfix_dkim_group }}'
|
|
mode: 0600
|
|
loop:
|
|
- keytable
|
|
- signingtable
|
|
notify: restart opendkim
|
|
|
|
- name: Install the trustedhosts list when defined
|
|
template:
|
|
src: 'dkim_trustedhosts.j2'
|
|
dest: '{{ postfix_dkim_base_dir }}/trustedhosts'
|
|
owner: '{{ postfix_dkim_user }}'
|
|
group: '{{ postfix_dkim_group }}'
|
|
mode: 0600
|
|
notify: restart opendkim
|
|
when: postfix_dkim_trusted_hosts_enabled
|
|
|
|
- name: Install the opendkim configuration
|
|
template:
|
|
src: opendkim.conf.j2
|
|
dest: '{{ postfix_dkim_conf }}'
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
notify: restart opendkim
|
|
|
|
tags: ['postfix', 'postfix_dkim', 'dkim', 'postfix_conf', 'dkim_conf']
|
|
|
|
- name: Manage the DKIM service
|
|
block:
|
|
- name: Ensure that the opendkim service is started and enabled
|
|
service:
|
|
name: opendkim
|
|
state: started
|
|
enabled: true
|
|
|
|
tags: ['postfix', 'postfix_dkim', 'dkim']
|