journalwatch: allow more TLS errors

[ansible.git] / roles / email / templates / opendkim.conf

diff --git a/roles/email/templates/opendkim.conf b/roles/email/templates/opendkim.conf
index 6e4d8128e057f11aa65638be9e25470d6f4232bc..b603f8736357b7905ca5a6c329ef10988a884feb 100644 (file)
--- a/roles/email/templates/opendkim.conf
+++ b/roles/email/templates/opendkim.conf
@@ -28,3 +28,16 @@ SenderHeaders                Sender,From
 # because it is often the identity key used by reputation systems and thus
 # somewhat security sensitive.
 OversignHeaders                From
 # because it is often the identity key used by reputation systems and thus
 # somewhat security sensitive.
 OversignHeaders                From

+
+##      default (none)
+##
+## Specifies a file from which trust anchor data should be read when doing
+## DNS queries and applying the DNSSEC protocol.  See the Unbound documentation
+## at http://unbound.net for the expected format of this file.
+
+TrustAnchorFile       /usr/share/dns/root.key
+
+
+# Path must match postfix main.cf
+Socket      local:/var/spool/postfix/opendkim/sock
+PidFile     /var/spool/postfix/opendkim/opendkim.pid