fedora-infra_ansible/roles/opendkim/tasks/main.yml

---
- name: Install opendkim
  ansible.builtin.package: name=opendkim state=present
  tags:
  - opendkim
  - package

- name: Install opendkim.conf
  ansible.builtin.copy: src=opendkim.conf dest=/etc/opendkim.conf
  tags:
  - opendkim
  - config
  - base

- name: Install opendkim KeyTable file
  ansible.builtin.copy: src=KeyTable dest=/etc/opendkim/KeyTable mode=644 owner=opendkim group=opendkim
  tags:
  - opendkim
  - config
  - base

- name: Install opendkim SigningTable file
  ansible.builtin.copy: src=SigningTable dest=/etc/opendkim/SigningTable mode=644 owner=opendkim group=opendkim
  tags:
  - opendkim
  - config
  - base

- name: Install opendkim trusted hosts file
  ansible.builtin.copy: src=TrustedHosts dest=/etc/opendkim/TrustedHosts
  tags:
  - opendkim
  - config
  - base

- name: Install bastion opendkim key from private
  ansible.builtin.copy: src={{ private }}/files/opendkim/bastion.key dest=/etc/opendkim/keys/bastion.key mode=0600 owner=opendkim group=opendkim
  tags:
  - opendkim
  - config
  - base

- name: Install bastion-iad opendkim key from private
  ansible.builtin.copy: src={{ private }}/files/opendkim/bastion-iad.key dest=/etc/opendkim/keys/bastion-iad.key mode=0600 owner=opendkim group=opendkim
  tags:
  - opendkim
  - config
  - base

- name: Install pagure opendkim key from private
  ansible.builtin.copy: src={{ private }}/files/opendkim/pagure.key dest=/etc/opendkim/keys/pagure.key mode=0600 owner=opendkim group=opendkim
  tags:
  - opendkim
  - config
  - base

- name: Start and enable opendkim
  service: name=opendkim state=started enabled=true
  tags:
  - opendkim
  - service
  - base