become_user: opendkim
args:
creates: /etc/opendkim/{{ item }}/mail.private
- warn: False
loop: "{{ postfix.opendkim.private_keys }}"
- name: generate opendkim tables
template:
## at http://unbound.net for the expected format of this file.
TrustAnchorFile /usr/share/dns/root.key
+
+
+# Path must match postfix main.cf
+Socket local:/var/spool/postfix/opendkim/sock
+PidFile /var/spool/postfix/opendkim/opendkim.pid
# Command-line options specified here will override the contents of
# /etc/opendkim.conf. See opendkim(8) for a complete list of options.
+# RJ: This might seem redundant with the opendkim.conf settings,
+# but the script in /lib/opendkim/opendkim.service.generate also helps by
+# generating tmpfiles.d/opendkim.conf so replacing it seems like a hassle.
#DAEMON_OPTS=""
RUNDIR=/var/spool/postfix/opendkim