blob: a857fc449d4f6973e1142e25220a24ad99b45205 [file] [log] [blame]
Matthias Andreas Benkardb382b102021-01-02 15:32:21 +01001# If false, messages with empty envelope from are not signed
2allow_envfrom_empty = true;
3# If true, envelope/header domain mismatch is ignored
4allow_hdrfrom_mismatch = true;
5# If true, multiple from headers are allowed (but only first is used)
6allow_hdrfrom_multiple = false;
7# If true, username does not need to contain matching domain
8allow_username_mismatch = false;
9# If false, messages from authenticated users are not selected for signing
10sign_authenticated = false;
11# Default path to key, can include '$domain' and '$selector' variables
12path = "/data/dkim/keys/$domain.dkim";
13# Default selector to use
14selector = "dkim";
15# If false, messages from local networks are not selected for signing
16sign_local = false;
17# Symbol to add when message is signed
18symbol = "ARC_SIGNED";
19# Whether to fallback to global config
20try_fallback = true;
21# Domain to use for DKIM signing: can be "header" or "envelope"
22use_domain = "recipient";
23# Whether to normalise domains to eSLD
24use_esld = false;
25# Whether to get keys from Redis
26use_redis = true;
27# Hash for DKIM keys in Redis
28key_prefix = "DKIM_PRIV_KEYS";
29# Selector map
30selector_prefix = "DKIM_SELECTORS";
31sign_inbound = true;
32use_domain_sign_inbound = "recipient";