LanQin
f8ff2a814b
- 用 Rspamd 替换 OpenDKIM 及其相关镜像、编排和启动脚本。 - 调整 Postfix、单容器镜像与 Docker 配置，改为对接 Rspamd milter。 - 增加 DKIM 私钥同步脚本与 Rspamd 本地配置，支持从 SQLite 周期导出签名密钥。 - 更新 API 启动与测试逻辑，兼容新的默认管理员邮箱与邮箱加载方式。
45 lines
1.1 KiB
Bash
45 lines
1.1 KiB
Bash
#!/bin/sh
|
|
set -eu
|
|
|
|
: "${LANQIN_DB_PATH:=/data/lanqin.db}"
|
|
: "${LANQIN_RSPAMD_DKIM_DIR:=/var/lib/rspamd/dkim}"
|
|
: "${LANQIN_RSPAMD_DKIM_SYNC_SECONDS:=60}"
|
|
|
|
chown_dkim_dir() {
|
|
if id _rspamd >/dev/null 2>&1; then
|
|
chown -R _rspamd:_rspamd "$LANQIN_RSPAMD_DKIM_DIR" 2>/dev/null || true
|
|
elif id rspamd >/dev/null 2>&1; then
|
|
chown -R rspamd:rspamd "$LANQIN_RSPAMD_DKIM_DIR" 2>/dev/null || true
|
|
fi
|
|
}
|
|
|
|
sync_keys() {
|
|
mkdir -p "$LANQIN_RSPAMD_DKIM_DIR"
|
|
if [ ! -f "$LANQIN_DB_PATH" ]; then
|
|
chown_dkim_dir
|
|
return 0
|
|
fi
|
|
|
|
sqlite3 -separator '|' "$LANQIN_DB_PATH" "SELECT name, dkim_selector, dkim_private_key FROM domains WHERE status='active';" 2>/dev/null | while IFS='|' read -r domain selector private_key; do
|
|
[ -n "$domain" ] || continue
|
|
[ -n "$selector" ] || selector="lanqin"
|
|
keyfile="$LANQIN_RSPAMD_DKIM_DIR/${domain}.${selector}.key"
|
|
tmpfile="${keyfile}.tmp"
|
|
printf '%s' "$private_key" | base64 -d > "$tmpfile"
|
|
chmod 0640 "$tmpfile"
|
|
mv "$tmpfile" "$keyfile"
|
|
done
|
|
|
|
chown_dkim_dir
|
|
}
|
|
|
|
if [ "${1:-}" = "--once" ]; then
|
|
sync_keys
|
|
exit 0
|
|
fi
|
|
|
|
while true; do
|
|
sync_keys || true
|
|
sleep "$LANQIN_RSPAMD_DKIM_SYNC_SECONDS"
|
|
done
|