Option for end-users to generate DKIM for a domain and insert it into DNS zone

[diabelb]

What OS are you using?

Ubuntu

Description

Command opencli email-setup config DKIM does not return dns txt record. You need to ssh into mail mailserver and check /tmp/docker-mailserver/opendkim/keys/domain.com/mail.txt file. Besides it would be nice to have DKIM automated. Right now you need to go to cli, generate keys, get txt record and update dns.

How to reproduce

Just add any domain and run

opencli email-setup config dkim

[stefanpejcic]

opencli email-setup config dkim with no arguments will try to generate for domains that dont already have dkim keys, but do have at least one email address: https://docker-mailserver.github.io/docker-mailserver/latest/config/best-practices/dkim_dmarc_spf/#generating-keys

setup config dkim will generate DKIM keys for what is assumed as the primary mail domain (derived from the FQDN assigned to DMS, minus any subdomain).

---

You are correct, currently a bit of manual work is needed to setup dkim for a domain:

• generate: opencli email-setup config dkim domain DOMAIN_NAME_HERE
• append it to dns zone and reload: docker cp openadmin_mailserver:/tmp/docker-mailserver/opendkim/keys/DOMAIN_NAME_HERE/mail.txt /tmp/mail.txt && cat /tmp/mail.txt >> /etc/bind/zones/DOMAIN_NAME_HERE.zone
• restart mailserver docker restart openadmin_mailserver

Main problem with automating this is that a restart is needed to start signing outgoing emails with new dkim keys, i'd like to avoid that for production use if possible.

We would need to check if a domain actually has those nameservers locally configured, before appending it to the zone.. maybe best to do as other panels did and just offer an option for end-user to click, then generate&insert it for a specific domain?

example:

[stefanpejcic]

for now, DKIM setup is documented here: https://openpanel.com/docs/articles/email/how-to-setup-dkim-for-mailserver
I've added it to the to-do list as a feature request to include UI options that allow users to configure it directly.

[diabelb]

Perfect 👍

[stefanpejcic]

this is now implemented in 1.7.62:

• DKIM is auto-generated for new domains and added to the local DNS zone on the server
• Email Deliverability page in user-panel allows user to view if SPF, DKIM and DMARC are correctly setup, and to view the records they need to add if using external DNS