2017-04-26 02:32:36 +08:00
|
|
|
# If false, messages with empty envelope from are not signed
|
2020-01-12 19:21:21 +08:00
|
|
|
allow_envfrom_empty = true;
|
2017-04-26 02:32:36 +08:00
|
|
|
# If true, envelope/header domain mismatch is ignored
|
2020-01-12 19:21:21 +08:00
|
|
|
allow_hdrfrom_mismatch = true;
|
2017-04-26 02:32:36 +08:00
|
|
|
# If true, multiple from headers are allowed (but only first is used)
|
|
|
|
|
allow_hdrfrom_multiple = true;
|
|
|
|
|
# If true, username does not need to contain matching domain
|
|
|
|
|
allow_username_mismatch = true;
|
|
|
|
|
# If false, messages from authenticated users are not selected for signing
|
2020-01-12 18:39:53 +08:00
|
|
|
auth_only = true;
|
2017-04-26 02:32:36 +08:00
|
|
|
# Default path to key, can include '$domain' and '$selector' variables
|
|
|
|
|
path = "/data/dkim/keys/$domain.dkim";
|
|
|
|
|
# Default selector to use
|
|
|
|
|
selector = "dkim";
|
|
|
|
|
# If false, messages from local networks are not selected for signing
|
|
|
|
|
sign_local = true;
|
|
|
|
|
# Symbol to add when message is signed
|
|
|
|
|
symbol = "DKIM_SIGNED";
|
|
|
|
|
# Whether to fallback to global config
|
|
|
|
|
try_fallback = true;
|
|
|
|
|
# Domain to use for DKIM signing: can be "header" or "envelope"
|
|
|
|
|
use_domain = "envelope";
|
|
|
|
|
# Whether to normalise domains to eSLD
|
2017-05-05 01:12:21 +08:00
|
|
|
use_esld = false;
|
2017-04-26 02:32:36 +08:00
|
|
|
# Whether to get keys from Redis
|
2017-05-05 16:35:27 +08:00
|
|
|
use_redis = true;
|
2017-04-26 02:32:36 +08:00
|
|
|
# Hash for DKIM keys in Redis
|
2017-05-05 16:35:27 +08:00
|
|
|
key_prefix = "DKIM_PRIV_KEYS";
|
|
|
|
|
# Selector map
|
2017-05-08 21:39:33 +08:00
|
|
|
selector_prefix = "DKIM_SELECTORS";
|
2020-01-12 19:21:21 +08:00
|
|
|
# Sieve is in sign_networks only
|
|
|
|
|
# forwards are arc signed, rejects are dkim signed
|
|
|
|
|
sign_networks = "/etc/rspamd/custom/dovecot_trusted.map";
|
|
|
|
|
use_domain_sign_networks = "header";
|
