You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
99 lines
3.2 KiB
99 lines
3.2 KiB
2 years ago
|
#!/bin/bash
|
||
|
|
# info: add mail domain dkim support
|
||
|
|
# options: USER DOMAIN [DKIM_SIZE]
|
||
|
|
#
|
||
|
|
# example: v-add-mail-domain-dkim admin acme.com
|
||
|
|
#
|
||
|
|
# This function adds DKIM signature to outgoing domain emails.
|
||
|
|
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
# Variables & Functions #
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
|
||
|
|
# Argument definition
|
||
|
|
user=$1
|
||
|
|
domain=$2
|
||
|
|
domain_idn=$2
|
||
|
|
dkim_size=${3-2048}
|
||
|
|
|
||
|
|
# Includes
|
||
|
|
# shellcheck source=/etc/hestiacp/hestia.conf
|
||
|
|
source /etc/hestiacp/hestia.conf
|
||
|
|
# shellcheck source=/usr/local/hestia/func/main.sh
|
||
|
|
source $HESTIA/func/main.sh
|
||
|
|
# shellcheck source=/usr/local/hestia/func/domain.sh
|
||
|
|
source $HESTIA/func/domain.sh
|
||
|
|
# load config file
|
||
|
|
source_conf "$HESTIA/conf/hestia.conf"
|
||
|
|
|
||
|
|
# Define mail user
|
||
|
|
if [ "$MAIL_SYSTEM" = 'exim4' ]; then
|
||
|
|
MAIL_USER=Debian-exim
|
||
|
|
else
|
||
|
|
MAIL_USER=exim
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Additional argument formatting
|
||
|
|
format_domain
|
||
|
|
format_domain_idn
|
||
|
|
# TODO: $domain_idn not used in this script - maybe $domain should be converted to $doman_idn ?
|
||
|
|
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
# Verifications #
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
|
||
|
|
check_args '2' "$#" 'USER DOMAIN [DKIM_SIZE]'
|
||
|
|
is_format_valid 'user' 'domain' 'dkim_size'
|
||
|
|
is_system_enabled "$MAIL_SYSTEM" 'MAIL_SYSTEM'
|
||
|
|
is_object_valid 'user' 'USER' "$user"
|
||
|
|
is_object_unsuspended 'user' 'USER' "$user"
|
||
|
|
is_object_valid 'mail' 'DOMAIN' "$domain"
|
||
|
|
is_object_unsuspended 'mail' 'DOMAIN' "$domain"
|
||
|
|
is_object_value_empty 'mail' 'DOMAIN' "$domain" '$DKIM'
|
||
|
|
|
||
|
|
# Perform verification if read-only mode is enabled
|
||
|
|
check_hestia_demo_mode
|
||
|
|
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
# Action #
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
|
||
|
|
# Generating dkim
|
||
|
|
openssl genrsa -out $USER_DATA/mail/$domain.pem $dkim_size &> /dev/null
|
||
|
|
openssl rsa -pubout -in $USER_DATA/mail/$domain.pem \
|
||
|
|
-out $USER_DATA/mail/$domain.pub &> /dev/null
|
||
|
|
chmod 660 $USER_DATA/mail/$domain.*
|
||
|
|
|
||
|
|
# Adding dkim keys
|
||
|
|
if [[ "$MAIL_SYSTEM" =~ exim ]]; then
|
||
|
|
cp $USER_DATA/mail/$domain.pem $HOMEDIR/$user/conf/mail/$domain/dkim.pem
|
||
|
|
chown $MAIL_USER:mail $HOMEDIR/$user/conf/mail/$domain/dkim.pem
|
||
|
|
chmod 660 $HOMEDIR/$user/conf/mail/$domain/dkim.pem
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Adding dns records
|
||
|
|
if [ -n "$DNS_SYSTEM" ] && [ -e "$USER_DATA/dns/$domain.conf" ]; then
|
||
|
|
p=$(cat $USER_DATA/mail/$domain.pub | grep -v ' KEY---' | tr -d '\n')
|
||
|
|
record="_domainkey"
|
||
|
|
policy="\"t=y\; o=~\;\""
|
||
|
|
$BIN/v-add-dns-record "$user" "$domain" "$record" TXT "$policy" '' '' 'no' '' 'yes'
|
||
|
|
|
||
|
|
record="mail._domainkey"
|
||
|
|
selector="\"v=DKIM1\; k=rsa\; p=$p\""
|
||
|
|
$BIN/v-add-dns-record "$user" "$domain" "$record" TXT "$selector" '' '' 'yes' '' 'yes'
|
||
|
|
fi
|
||
|
|
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
# Hestia #
|
||
|
|
#----------------------------------------------------------#
|
||
|
|
|
||
|
|
# Adding dkim in config
|
||
|
|
update_object_value 'mail' 'DOMAIN' "$domain" '$DKIM' 'yes'
|
||
|
|
increase_user_value "$user" '$U_MAIL_DKIM'
|
||
|
|
|
||
|
|
# Logging
|
||
|
|
$BIN/v-log-action "$user" "Info" "Mail" "DKIM message signing enabled (Domain: $domain)."
|
||
|
|
log_event "$OK" "$ARGUMENTS"
|
||
|
|
|
||
|
|
exit
|