| @@ -38,7 +38,7 @@ apt install postfix dovecot-imapd dovecot-sieve opendkim spamassassin spamc | |||||
| # Check if OpenDKIM is installed and install it if not. | # Check if OpenDKIM is installed and install it if not. | ||||
| which opendkim-genkey >/dev/null 2>&1 || apt install opendkim-tools | which opendkim-genkey >/dev/null 2>&1 || apt install opendkim-tools | ||||
| domain="$(cat /etc/mailname)" | domain="$(cat /etc/mailname)" | ||||
| subdom="mail" | |||||
| subdom=${MAIL_SUBDOM:-mail} | |||||
| maildomain="$subdom.$domain" | maildomain="$subdom.$domain" | ||||
| certdir="/etc/letsencrypt/live/$maildomain" | certdir="/etc/letsencrypt/live/$maildomain" | ||||
| @@ -232,7 +232,7 @@ chmod g+r /etc/postfix/dkim/* | |||||
| # Generate the OpenDKIM info: | # Generate the OpenDKIM info: | ||||
| echo "Configuring OpenDKIM..." | echo "Configuring OpenDKIM..." | ||||
| grep -q "$domain" /etc/postfix/dkim/keytable 2>/dev/null || | grep -q "$domain" /etc/postfix/dkim/keytable 2>/dev/null || | ||||
| echo "$subdom._domainkey.$domain $domain:mail:/etc/postfix/dkim/mail.private" >> /etc/postfix/dkim/keytable | |||||
| echo "$subdom._domainkey.$domain $domain:$subdom:/etc/postfix/dkim/$subdom.private" >> /etc/postfix/dkim/keytable | |||||
| grep -q "$domain" /etc/postfix/dkim/signingtable 2>/dev/null || | grep -q "$domain" /etc/postfix/dkim/signingtable 2>/dev/null || | ||||
| echo "*@$domain $subdom._domainkey.$domain" >> /etc/postfix/dkim/signingtable | echo "*@$domain $subdom._domainkey.$domain" >> /etc/postfix/dkim/signingtable | ||||
| @@ -272,7 +272,7 @@ for x in dovecot postfix opendkim spamassassin; do | |||||
| service "$x" restart && printf " ...done\\n" | service "$x" restart && printf " ...done\\n" | ||||
| done | done | ||||
| pval="$(tr -d "\n" </etc/postfix/dkim/mail.txt | sed "s/k=rsa.* \"p=/k=rsa; p=/;s/\"\s*\"//;s/\"\s*).*//" | grep -o "p=.*")" | |||||
| pval="$(tr -d "\n" </etc/postfix/dkim/$subdom.txt | sed "s/k=rsa.* \"p=/k=rsa; p=/;s/\"\s*\"//;s/\"\s*).*//" | grep -o "p=.*")" | |||||
| dkimentry="$subdom._domainkey.$domain TXT v=DKIM1; k=rsa; $pval" | dkimentry="$subdom._domainkey.$domain TXT v=DKIM1; k=rsa; $pval" | ||||
| dmarcentry="_dmarc.$domain TXT v=DMARC1; p=none; rua=mailto:dmarc@$domain; fo=1" | dmarcentry="_dmarc.$domain TXT v=DMARC1; p=none; rua=mailto:dmarc@$domain; fo=1" | ||||
| spfentry="@ TXT v=spf1 mx a:$maildomain -all" | spfentry="@ TXT v=spf1 mx a:$maildomain -all" | ||||