### main/00_stalag13-config_0dkimsign
#################################

###### DKIM signature
# https://debian-administration.org/article/718/DKIM-signing_outgoing_mail_with_exim4

DKIM_CANON = relaxed
#DKIM_SELECTOR = should be set in conf.d/main/00_localoptions

# Get the domain from the outgoing mail
# (handle also subdomains: we avoid overly complicated regepx but needs to be adjusted depending on
# subdomains)
DKIM_DOMAIN = ${sg{${lc:${domain:$h_from:}}}{\N^(spm|plow|prive)\.\N}{}}

# sign only if key exists
# can be created by (beware, key length accepted by DNS varies):
#   openssl genrsa -out dkim-DOMAIN-private.pem 2048 -outform PEM
#   openssl rsa -in dkim-DOMAIN-private.pem  -out  dkim-DOMAIN.pem -pubout -outform PEM
#   chgrp Debian-exim dkim*
#   chmod g+r dkim*
DKIM_FILE = dkim-DKIM_DOMAIN-private.pem
DKIM_PRIVATE_KEY =  ${lookup {DKIM_FILE} dsearch,ret=full {CONFDIR}}


# EOF
