You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
76 lines
1.9 KiB
76 lines
1.9 KiB
---
|
|
- name: Install packages
|
|
apt:
|
|
name: "{{ item }}"
|
|
dpkg_options: 'force-confdef,force-confnew'
|
|
update_cache: yes
|
|
with_items:
|
|
- opendkim
|
|
- opendkim-tools
|
|
- opendmarc
|
|
|
|
- name: Create directories folder in /etc
|
|
file:
|
|
path: "/etc/{{ item }}"
|
|
state: directory
|
|
with_items:
|
|
- opendkim
|
|
- opendmarc
|
|
|
|
- name: Create key with opendkim-genkey
|
|
shell: "opendkim-genkey -b 2048 -d {{ domain }} -s {{ domain }}.dkim"
|
|
args:
|
|
chdir: /root/
|
|
|
|
- name: Move private dkim key
|
|
command: "mv /root/{{ domain }}.dkim.private /etc/opendkim/"
|
|
|
|
- name: Update private key permissions
|
|
file:
|
|
path: "/etc/opendkim/{{ domain }}.dkim.private"
|
|
mode: 0600
|
|
|
|
- name: Copy conf files to remote
|
|
template:
|
|
src: "{{ item.name}}"
|
|
dest: "{{ item.dest }}"
|
|
with_items:
|
|
- {name: 'opendkim.conf.j2', dest: '/etc/opendkim.conf'}
|
|
- {name: 'internalhosts.j2', dest: '/etc/opendkim/internalhosts'}
|
|
- {name: 'trustedhosts.j2', dest: '/etc/opendkim/trustedhosts'}
|
|
- {name: 'opendmarc.conf.j2', dest: '/etc/opendmarc.conf'}
|
|
- {name: 'opendkim.j2', dest: '/etc/default/opendkim'}
|
|
- {name: 'opendmarc.j2', dest: '/etc/default/opendmarc'}
|
|
|
|
- name: Add domain to signing table file
|
|
lineinfile:
|
|
path: /etc/opendkim/signingtable
|
|
state: present
|
|
create: yes
|
|
line: "*@{{ domain }} {{ domain }}"
|
|
|
|
- name: Add configuration to key table file
|
|
lineinfile:
|
|
path: /etc/opendkim/keytable
|
|
state: present
|
|
create: yes
|
|
line: "{{ domain }} {{ domain }}:mail:/etc/opendkim/{{ domain }}.dkim.private"
|
|
|
|
- name: Create log file
|
|
file:
|
|
path: "/var/log/{{ item }}.log"
|
|
state: touch
|
|
owner: "{{ item }}"
|
|
group: "{{ item }}"
|
|
with_items:
|
|
- opendmarc
|
|
|
|
- name: Add items to ignore hosts
|
|
blockinfile:
|
|
path: /etc/opendmarc/ignore.hosts
|
|
create: yes
|
|
insertafter: EOF
|
|
content: |
|
|
localhost
|
|
127.0.0.0/8
|
|
10.0.2.0/24 |