massive update of the wheezy templates, but take them with a grain of salt for now, in particular:
- dkim is broken (pending code changes, this affects *everyone* with opendkim i suppose) - it has received *no* testing (yet) other noteworthy stuff: - nginx should be switched to upstream provided fcgi params file, as its essentially the same. - dovecot should now work with exim4 - for the most part, configs were switched to the commented version if available, that requires some more reading for the admins, but this isn't a problem for you... right? :) while i don't think any of this will break horribly, like drinking the beer in your fridge or some other nasty stuff, it will still require testing Signed-off-by: Robert Förster (Dessa) <Dessa@froxlor.org>
This commit is contained in:
@@ -1,11 +0,0 @@
|
||||
#
|
||||
# !!! DO NOT REPLACE THE ORIGINAL CONFIG WITH THIS FILE !!!
|
||||
#
|
||||
# Instead, just set the shown values in the file to the
|
||||
# given values ;-)
|
||||
#
|
||||
|
||||
Syslog yes
|
||||
Domain /etc/postfix/dkim/domains
|
||||
KeyList /etc/postfix/dkim/dkim-keys.conf
|
||||
Socket inet:8891@localhost
|
||||
36
templates/misc/configfiles/debian_wheezy/dkim/opendkim.conf
Normal file
36
templates/misc/configfiles/debian_wheezy/dkim/opendkim.conf
Normal file
@@ -0,0 +1,36 @@
|
||||
# This is a basic configuration that can easily be adapted to suit a standard
|
||||
# installation. For more advanced options, see opendkim.conf(5) and/or
|
||||
# /usr/share/doc/opendkim/examples/opendkim.conf.sample.
|
||||
|
||||
# Log to syslog
|
||||
Syslog yes
|
||||
# Required to use local socket with MTAs that access the socket as a non-
|
||||
# privileged user (e.g. Postfix)
|
||||
UMask 002
|
||||
|
||||
# Sign for example.com with key in /etc/mail/dkim.key using
|
||||
# selector '2007' (e.g. 2007._domainkey.example.com)
|
||||
#Domain example.com
|
||||
#KeyFile /etc/mail/dkim.key
|
||||
#Selector 2007
|
||||
|
||||
Domain /etc/postfix/dkim/domains
|
||||
KeyList /etc/postfix/dkim/dkim-keys.conf
|
||||
|
||||
# Commonly-used options; the commented-out versions show the defaults.
|
||||
#Canonicalization simple
|
||||
#Mode sv
|
||||
#SubDomains no
|
||||
#ADSPDiscard no
|
||||
|
||||
# Always oversign From (sign using actual From and a null From to prevent
|
||||
# malicious signatures header fields (From and/or others) between the signer
|
||||
# and the verifier. From is oversigned by default in the Debian pacakge
|
||||
# because it is often the identity key used by reputation systems and thus
|
||||
# somewhat security sensitive.
|
||||
OversignHeaders From
|
||||
|
||||
# List domains to use for RFC 6541 DKIM Authorized Third-Party Signatures
|
||||
# (ATPS) (experimental)
|
||||
|
||||
#ATPSDomains example.com
|
||||
Reference in New Issue
Block a user