From 9731e3032a44e1cf91ba7a12769f7c0ce88403af Mon Sep 17 00:00:00 2001
From: Dmitry Ilvokhin <d@ilvokhin.com>
Date: Sun, 24 Mar 2024 13:59:27 +0000
Subject: Add opendkim role

---
 roles/opendkim/tasks/main.yml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 roles/opendkim/tasks/main.yml

(limited to 'roles/opendkim/tasks/main.yml')

diff --git a/roles/opendkim/tasks/main.yml b/roles/opendkim/tasks/main.yml
new file mode 100644
index 0000000..e38df64
--- /dev/null
+++ b/roles/opendkim/tasks/main.yml
@@ -0,0 +1,28 @@
+- name: Install opendkim
+  ansible.builtin.package:
+    name:
+      - opendkim
+    state: present
+
+- name: Configure opendkim
+  ansible.builtin.copy:
+    src: '{{ item }}'
+    dest: /etc/opendkim/
+    owner: opendkim
+    group: opendkim
+    # It doesn't have much sense to set a more granular permissions for each
+    # specific file here, because /etc/opendkim directory itself has pretty
+    # strict permissions and non-privilege users can't read them anyway.
+    mode: u+rw,g-rwx,o-rwx
+  loop:
+    - files/opendkim.conf
+    - files/mail.private
+    - files/mail.txt
+  notify:
+    - Restart opendkim
+
+- name: Enable opendkim systemd service
+  ansible.builtin.service:
+    name: opendkim
+    enabled: yes
+    state: started
-- 
cgit v1.2.3-70-g09d2