X-Git-Url: https://git.ralfj.de/ansible.git/blobdiff_plain/a0ef97a3169e9da8b4618116075d54c49b4292b4..448046ac21eff684a2e07f541e5ac7ccd72f0718:/roles/email/templates/opendkim.conf

diff --git a/roles/email/templates/opendkim.conf b/roles/email/templates/opendkim.conf
index 6e4d812..b603f87 100644
--- a/roles/email/templates/opendkim.conf
+++ b/roles/email/templates/opendkim.conf
@@ -28,3 +28,16 @@ SenderHeaders		Sender,From
 # because it is often the identity key used by reputation systems and thus
 # somewhat security sensitive.
 OversignHeaders		From
+
+##      default (none)
+##
+## Specifies a file from which trust anchor data should be read when doing
+## DNS queries and applying the DNSSEC protocol.  See the Unbound documentation
+## at http://unbound.net for the expected format of this file.
+
+TrustAnchorFile       /usr/share/dns/root.key
+
+
+# Path must match postfix main.cf
+Socket      local:/var/spool/postfix/opendkim/sock
+PidFile     /var/spool/postfix/opendkim/opendkim.pid