| Matthias Andreas Benkard | b382b10 | 2021-01-02 15:32:21 +0100 | [diff] [blame] | 1 | # If false, messages with empty envelope from are not signed |
| 2 | allow_envfrom_empty = true; |
| 3 | # If true, envelope/header domain mismatch is ignored |
| 4 | allow_hdrfrom_mismatch = true; |
| 5 | # If true, multiple from headers are allowed (but only first is used) |
| 6 | allow_hdrfrom_multiple = true; |
| 7 | # If true, username does not need to contain matching domain |
| 8 | allow_username_mismatch = true; |
| 9 | # If false, messages from authenticated users are not selected for signing |
| 10 | sign_authenticated = true; |
| 11 | # Default path to key, can include '$domain' and '$selector' variables |
| 12 | path = "/data/dkim/keys/$domain.dkim"; |
| 13 | # Default selector to use |
| 14 | selector = "dkim"; |
| 15 | # If false, messages from local networks are not selected for signing |
| 16 | sign_local = true; |
| 17 | # Symbol to add when message is signed |
| 18 | symbol = "DKIM_SIGNED"; |
| 19 | # Whether to fallback to global config |
| 20 | try_fallback = true; |
| 21 | # Domain to use for DKIM signing: can be "header" or "envelope" |
| 22 | use_domain = "envelope"; |
| 23 | # Whether to normalise domains to eSLD |
| 24 | use_esld = false; |
| 25 | # Whether to get keys from Redis |
| 26 | use_redis = true; |
| 27 | # Hash for DKIM keys in Redis |
| 28 | key_prefix = "DKIM_PRIV_KEYS"; |
| 29 | # Selector map |
| 30 | selector_prefix = "DKIM_SELECTORS"; |
| 31 | # Sieve is in sign_networks only |
| 32 | # forwards are arc signed, rejects are dkim signed |
| 33 | sign_networks = "/etc/rspamd/custom/dovecot_trusted.map"; |
| 34 | use_domain_sign_networks = "header"; |
| Matthias Andreas Benkard | 7b2a3a1 | 2021-08-16 10:57:25 +0200 | [diff] [blame^] | 35 | sign_headers = "from:sender:reply-to:subject:date:message-id:to:cc:mime-version:content-type:content-transfer-encoding:content-language:resent-to:resent-cc:resent-from:resent-sender:resent-message-id:in-reply-to:references:list-id:list-help:list-owner:list-unsubscribe:list-subscribe:list-post:list-unsubscribe-post:disposition-notification-to:disposition-notification-options:original-recipient:openpgp:autocrypt"; |