rspamd + DKIM
For RSA 2048
rspamadm dkim_keygen -b 2048 -s rsa -d domain.com -k /var/lib/rspamd/dkim/domain.com/rsa.key > /var/lib/rspamd/dkim/domain.com/rsa.pub
For key ED2551
rspamadm dkim_keygen -t ed25519 -s ed25519 -d domain.com -k /var/lib/rspamd/dkim/domain.com/ed25519.key > /var/lib/rspamd/dkim/domain.com/ed25519.pub
chown _rspamd:_rspamd -R /var/lib/rspamd/dkim/domain.com/
add to /var/lib/bind/domain.com.hosts
rsa._domainkey.domain.com. IN TXT (
"v=DKIM1; k=rsa; "
"p={PASTE_KEY_FROM rsa.pub}"
)
ed25519._domainkey.domain.com. IN TXT (
"v=DKIM1; k=ed25519;"
"p={PASTE_KEY_FROM ed25519.pub}"
)
/etc/rspamd/local.d/dkim_signing.conf
/etc/rspamd/local.d/dkim_signing.conf
domain {
…
domain.com {
selectors [
{
selector = “rsa”;
path = “/var/lib/rspamd/dkim/domain.com/rsa.key”;
},
{
selector = “ed25519”;
path = “/var/lib/rspamd/dkim/domain.com/ed25519.key”;
}
]
}
}