#!/usr/bin/env bash
set -euo pipefail
source ./lib.sh

log "Rspamd + OpenDKIM aktivieren…"

cat > /etc/rspamd/local.d/worker-controller.inc <<'CONF'
password = "admin";
bind_socket = "127.0.0.1:11334";
CONF
systemctl enable --now rspamd || true

cat > /etc/opendkim.conf <<'CONF'
Syslog           yes
UMask            002
Mode             sv
Socket           inet:8891@127.0.0.1
Canonicalization relaxed/simple
On-BadSignature  accept
On-Default       accept
On-KeyNotFound   accept
On-NoSignature   accept
LogWhy           yes
OversignHeaders  From
CONF
systemctl enable --now opendkim || true