diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2021-02-13 16:41:26 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2021-02-13 16:52:47 +0100 |
| commit | 5e635d39918ad7c69cd90bee6b4ac2827198cc76 (patch) | |
| tree | 1a2682e67f60e392d73ca07de7aa863c0808525c | |
| parent | 83ddeec1ab7f5e13cc8f930c6955cc275fb1b8c7 (diff) | |
Don't restart amavis on DKIM key generation.
We want to give people the time add the key to DNS before we update the
signing policy.
| -rw-r--r-- | roles/amavis/tasks/main.yml | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/roles/amavis/tasks/main.yml b/roles/amavis/tasks/main.yml index 075b770..79c973c 100644 --- a/roles/amavis/tasks/main.yml +++ b/roles/amavis/tasks/main.yml @@ -39,42 +39,40 @@ owner=root group=root mode=0644 - name: Create directory /etc/amavis/dkim file: path=/etc/amavis/dkim state=directory owner=root group=root mode=0755 when: "'out' in group_names" tags: - genkey - dkim - name: Generate a private key for DKIM signing command: genkeypair.sh dkim --privkey="/etc/amavis/dkim/{{ item.s }}:{{ item.d }}.pem" -t rsa -b 2048 with_items: "{{ (dkim_keys[inventory_hostname_short] | default({})).values() | list }}" register: dkim changed_when: dkim.rc == 0 failed_when: dkim.rc > 1 when: "'out' in group_names" - notify: - - Restart Amavis tags: - genkey - dkim - name: Fetch DKIM keys fetch_cmd: cmd="openssl pkey -pubout -outform PEM" stdin="/etc/amavis/dkim/{{ item.s }}:{{ item.d }}.pem" dest="certs/dkim/{{ item.s }}:{{ item.d }}.pub" with_items: "{{ (dkim_keys[inventory_hostname_short] | default({})).values() | list }}" tags: - genkey - dkim - name: Configure Amavis template: src=etc/amavis/conf.d/50-user.j2 dest=/etc/amavis/conf.d/50-user owner=root group=root mode=0644 register: r3 notify: |