7ebfd568bc
regular key rotation is important because it prevents email impersonation if private keys are lost. once an email is verified, there's no reason to have the private key lying around. this implementation uses knot's dynamic dns features to allow every opendkim node to issue its own key pairs and selectors, and publish them on the _domainkey zone. we don't need central coordination between dns and opendkim, and between opendkim nodes. each works on its own and announces selectors individually.
14 lines
386 B
Docker
14 lines
386 B
Docker
ARG ALPINE_VERSION=3.18.3
|
|
ARG BASE_IMAGE=gitea.nulo.in/sutty/monit
|
|
FROM ${BASE_IMAGE}:${ALPINE_VERSION}
|
|
LABEL org.opencontainers.image.authors="f@sutty.nl"
|
|
|
|
RUN apk add --no-cache opendkim opendkim-utils mini-sendmail drill
|
|
|
|
COPY ./monit.conf /etc/monit.d/opendkim.conf
|
|
COPY ./opendkimd.sh /usr/local/bin/opendkimd
|
|
COPY ./sendmail.sh /usr/bin/sendmail
|
|
|
|
EXPOSE 8891
|
|
VOLUME /etc/opendkim
|