opendkim: properly create tmpdir; use DNSSEC

[ansible.git] / roles / email / templates / opendkim.conf

diff --git a/roles/email/templates/opendkim.conf b/roles/email/templates/opendkim.conf
index 6e4d8128e057f11aa65638be9e25470d6f4232bc..6fccfc29393a1fea1eaca2f1d93712d8c3ce5019 100644 (file)
--- a/roles/email/templates/opendkim.conf
+++ b/roles/email/templates/opendkim.conf
@@ -28,3 +28,11 @@ SenderHeaders                Sender,From
 # because it is often the identity key used by reputation systems and thus
 # somewhat security sensitive.
 OversignHeaders                From
 # because it is often the identity key used by reputation systems and thus
 # somewhat security sensitive.
 OversignHeaders                From

+
+##      default (none)
+##
+## Specifies a file from which trust anchor data should be read when doing
+## DNS queries and applying the DNSSEC protocol.  See the Unbound documentation
+## at http://unbound.net for the expected format of this file.
+
+TrustAnchorFile       /usr/share/dns/root.key