a5b1d36171
2017: rspamd: get dkim keys via REST API instead of filesystem r=mergify[bot] a=ghostwheel42 ## What type of PR? enhancement ## What does this PR do? rspamd now uses hashicorp's vault api v1 to get dkim keys and selectors for a domain. this allows future enhancement (multiple keys) without reconfiguring and restarting rspamd. it also makes mounting the /dkim volume into the rspamd container unnecessary. ### Related issue(s) - improves and closes #2012 - allows to implement key rotation using multiple selectors (see #1700) - allows to implement dkim for alternate domains (see #1519) - fixes and closes #1345 (selector transmitted by admin container is used) - closes #1179 (no keys on disk) - allows to implement key rotation from the outside (ie. via a helper script talking to some dns provider's api) (see #547) ## Prerequisites - [X] In case of feature or enhancement: documentation updated accordingly - [X] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file. Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com> |
4 years ago | |
|---|---|---|
| .. | ||
| admin | 4 years ago | |
| dovecot | 4 years ago | |
| nginx | 4 years ago | |
| none | 4 years ago | |
| postfix | 4 years ago | |
| rspamd | 4 years ago | |