From 19c50a5f3c4420d09928a3031dd8ecfaa5ea6dbc Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Wed, 22 Apr 2020 03:52:31 +0200
Subject: Add dedicated DKIM key for lists.fripost.org.

Instead of using the fallback key.  That way messages from our lists
have proper DMARC alignment (at least when envelope sender and From
header are under domain lists.fripost.org).
---
 .../dkim/d3df4ddda85e3c927621b1b02a9cbb85:lists.fripost.org.pub  | 9 +++++++++
 group_vars/all.yml                                               | 3 +++
 2 files changed, 12 insertions(+)
 create mode 100644 certs/dkim/d3df4ddda85e3c927621b1b02a9cbb85:lists.fripost.org.pub

diff --git a/certs/dkim/d3df4ddda85e3c927621b1b02a9cbb85:lists.fripost.org.pub b/certs/dkim/d3df4ddda85e3c927621b1b02a9cbb85:lists.fripost.org.pub
new file mode 100644
index 0000000..e879336
--- /dev/null
+++ b/certs/dkim/d3df4ddda85e3c927621b1b02a9cbb85:lists.fripost.org.pub
@@ -0,0 +1,9 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo5CbOjxGWmBKtAHWujA
+Jt13eluCYkki0gY8mF8/EJdMIrkJIRBitHHTI0Dbue1jSlD/xaAxIjeDa0okhfrR
+9XHc6cO5kImYgcdE6/0kdqy+UIo9c66i2RBtOu6luyHAMMXqUEaS8DxhxZv8v2Bx
+Ufotx9c1xIFz0h0z2Jlbvq8JFhEDFJY2Gj452lM9aRiADqHt9NeNqhBQyK+3dydx
+6VoTSj72tiEE28l/iT7EVYdAuHKNNDNBQgZBdWHqb+zZg3F5VpH/A5qfOykdXApc
+8gY4bUEK60eDT5h52o3Hguaq1hsP3AqBuOlZ4RVmtchn7tmu/9QT3S0QENfW7waM
+kQIDAQAB
+-----END PUBLIC KEY-----
diff --git a/group_vars/all.yml b/group_vars/all.yml
index abafc8e..611bad2 100644
--- a/group_vars/all.yml
+++ b/group_vars/all.yml
@@ -55,6 +55,9 @@ dkim_keys:
       d: fripost.org
       # selector (randomly generated with `xxd -p -l16 </dev/urandom`)
       s: 8f00fb94ec6c37aacb48bd43e073f9b7
+    "lists.fripost.org":
+      d: lists.fripost.org
+      s: d3df4ddda85e3c927621b1b02a9cbb85
     "~": # catch-all, for our virtual domains
       d: x.fripost.org
       s: 9df9cdc7e101629b5003b587945afa70
-- 
cgit v1.2.3