Adding dkim signing and dcss

roles/shell/files/etc/postfix/main.cf

@@ -49,3 +49,9 @@ smtpd_sasl_auth_enable = yes
 smtpd_sasl_security_options = noanonymous
 smtpd_sasl_local_domain = $myhostname
 smtpd_recipient_restrictions = permit_mynetworks,permit_auth_destination,permit_sasl_authenticated,reject
+
+milter_protocol = 2
+milter_default_action = accept
+
+smtpd_milters = inet:localhost:12301
+non_smtpd_milters = inet:localhost:12301

roles/shell/files/usr/local/bin/dcss

@@ -0,0 +1,10 @@
+#!/bin/sh
+
+SOURCEKEY="https://crawl.tildeverse.org/dcss.key"
+MYKEY="${HOME}/.ssh/dcss.key"
+if [ ! -f "$MYKEY" ]; then
+  mkdir -p "${HOME}/.ssh"
+  curl -s "$SOURCEKEY" > "$MYKEY"
+  chmod 600 "$MYKEY"
+fi
+ssh -i "$MYKEY" dcss@crawl.tildeverse.org

roles/shell/tasks/packages.yml

@@ -174,3 +174,11 @@
     owner: root
     group: root
     mode: 0755
+
+- name: Install remote DCSS
+  copy:
+    src: ../files/usr/local/bin/dcss
+    dest: /usr/local/bin/dcss
+    owner: root
+    group: root
+    mode: 0755