Initial

bin/v-add-mail-domain-dkim

@@ -0,0 +1,98 @@
+#!/bin/bash
+# info: add mail domain dkim support
+# options: USER DOMAIN [DKIM_SIZE]
+#
+# example: v-add-mail-domain-dkim admin acme.com
+#
+# This function adds DKIM signature to outgoing domain emails.
+
+#----------------------------------------------------------#
+#                Variables & Functions                     #
+#----------------------------------------------------------#
+
+# Argument definition
+user=$1
+domain=$2
+domain_idn=$2
+dkim_size=${3-2048}
+
+# Includes
+# shellcheck source=/etc/hestiacp/hestia.conf
+source /etc/hestiacp/hestia.conf
+# shellcheck source=/usr/local/hestia/func/main.sh
+source $HESTIA/func/main.sh
+# shellcheck source=/usr/local/hestia/func/domain.sh
+source $HESTIA/func/domain.sh
+# load config file
+source_conf "$HESTIA/conf/hestia.conf"
+
+# Define mail user
+if [ "$MAIL_SYSTEM" = 'exim4' ]; then
+	MAIL_USER=Debian-exim
+else
+	MAIL_USER=exim
+fi
+
+# Additional argument formatting
+format_domain
+format_domain_idn
+# TODO: $domain_idn not used in this script - maybe $domain should be converted to $doman_idn ?
+
+#----------------------------------------------------------#
+#                    Verifications                         #
+#----------------------------------------------------------#
+
+check_args '2' "$#" 'USER DOMAIN [DKIM_SIZE]'
+is_format_valid 'user' 'domain' 'dkim_size'
+is_system_enabled "$MAIL_SYSTEM" 'MAIL_SYSTEM'
+is_object_valid 'user' 'USER' "$user"
+is_object_unsuspended 'user' 'USER' "$user"
+is_object_valid 'mail' 'DOMAIN' "$domain"
+is_object_unsuspended 'mail' 'DOMAIN' "$domain"
+is_object_value_empty 'mail' 'DOMAIN' "$domain" '$DKIM'
+
+# Perform verification if read-only mode is enabled
+check_hestia_demo_mode
+
+#----------------------------------------------------------#
+#                       Action                             #
+#----------------------------------------------------------#
+
+# Generating dkim
+openssl genrsa -out $USER_DATA/mail/$domain.pem $dkim_size &> /dev/null
+openssl rsa -pubout -in $USER_DATA/mail/$domain.pem \
+	-out $USER_DATA/mail/$domain.pub &> /dev/null
+chmod 660 $USER_DATA/mail/$domain.*
+
+# Adding dkim keys
+if [[ "$MAIL_SYSTEM" =~ exim ]]; then
+	cp $USER_DATA/mail/$domain.pem $HOMEDIR/$user/conf/mail/$domain/dkim.pem
+	chown $MAIL_USER:mail $HOMEDIR/$user/conf/mail/$domain/dkim.pem
+	chmod 660 $HOMEDIR/$user/conf/mail/$domain/dkim.pem
+fi
+
+# Adding dns records
+if [ -n "$DNS_SYSTEM" ] && [ -e "$USER_DATA/dns/$domain.conf" ]; then
+	p=$(cat $USER_DATA/mail/$domain.pub | grep -v ' KEY---' | tr -d '\n')
+	record="_domainkey"
+	policy="\"t=y\; o=~\;\""
+	$BIN/v-add-dns-record "$user" "$domain" "$record" TXT "$policy" '' '' 'no' '' 'yes'
+
+	record="mail._domainkey"
+	selector="\"v=DKIM1\; k=rsa\; p=$p\""
+	$BIN/v-add-dns-record "$user" "$domain" "$record" TXT "$selector" '' '' 'yes' '' 'yes'
+fi
+
+#----------------------------------------------------------#
+#                       Hestia                             #
+#----------------------------------------------------------#
+
+# Adding dkim in config
+update_object_value 'mail' 'DOMAIN' "$domain" '$DKIM' 'yes'
+increase_user_value "$user" '$U_MAIL_DKIM'
+
+# Logging
+$BIN/v-log-action "$user" "Info" "Mail" "DKIM message signing enabled (Domain: $domain)."
+log_event "$OK" "$ARGUMENTS"
+
+exit