#!/bin/bash

DOMAIN="alsatux.lan"
SELECTOR="mail"
DKIM_DIR="/etc/opendkim"
KEYS_DIR="$DKIM_DIR/keys/$DOMAIN"

echo "🔧 Installation d'OpenDKIM..."
apt update && apt install -y opendkim opendkim-tools

echo "📁 Configuration des répertoires..."
mkdir -p "$KEYS_DIR"
chown -R opendkim:opendkim "$DKIM_DIR"
chmod go-rw "$DKIM_DIR" "$KEYS_DIR"

echo "🔑 Génération de la clé DKIM..."
cd "$KEYS_DIR"
opendkim-genkey -s "$SELECTOR" -d "$DOMAIN"
chown opendkim:opendkim "${SELECTOR}.private"
chmod 600 "${SELECTOR}.private"

echo "📝 Création des fichiers de configuration..."

# /etc/opendkim.conf
cat > /etc/opendkim.conf <<EOF
Syslog                  yes
UMask                   002
Mode                    sv
Canonicalization        relaxed/simple
AutoRestart             yes
AutoRestartRate         10/1h
Background              yes
DNSTimeout              5
SignatureAlgorithm      rsa-sha256

KeyTable                $DKIM_DIR/key.table
SigningTable            $DKIM_DIR/signing.table
TrustedHosts            $DKIM_DIR/trusted.hosts

Socket                  inet:12301@localhost
EOF

# key.table
cat > "$DKIM_DIR/key.table" <<EOF
$SELECTOR._domainkey.$DOMAIN $DOMAIN:$SELECTOR:$KEYS_DIR/${SELECTOR}.private
EOF

# signing.table
cat > "$DKIM_DIR/signing.table" <<EOF
*@${DOMAIN} $SELECTOR._domainkey.${DOMAIN}
EOF

# trusted.hosts
cat > "$DKIM_DIR/trusted.hosts" <<EOF
127.0.0.1
localhost
192.168.50.0/24
EOF

echo "📦 Configuration Postfix..."

postconf -e "milter_default_action = accept"
postconf -e "milter_protocol = 2"
postconf -e "smtpd_milters = inet:localhost:12301"
postconf -e "non_smtpd_milters = inet:localhost:12301"

echo "🔁 Redémarrage des services..."
systemctl restart opendkim
systemctl restart postfix

echo "✅ Installation terminée."

echo
echo "📤 Copie cet enregistrement DNS TXT dans ta zone alsatux.lan :"
echo
cat "$KEYS_DIR/${SELECTOR}.txt"
echo
echo "🧪 Tu peux tester l'envoi d'un email vers check-auth@verifier.port25.com pour valider DKIM."