Implement dkim

switched over to dkimpy-milter scince opendkim is more or less discontinued

postfix/tasks/dkim.yml

+--- 
+
+- name: ensure we have opendkim
+  apt:
+    name:
+      - opendkim
+      - opendkim-tools
+    state: present
+
+
+- name: ensure we have keys for any domain
+  command:
+    cmd: "opendkim-genkey  --directory=/etc/dkimkeys --domain={{ item }} --selector={{ item }}-{{ dkim_selector }}   --nosubdomains"
+    creates: 
+      - "/etc/dkimkeys/{{ item }}-{{ dkim_selector }}.private"
+      - "/etc/dkimkeys/{{ item }}-{{ dkim_selector }}.txt"
+  become: yes
+  become_user: opendkim
+  loop: "{{  postfix_domains +  postfix_virtual_domains }}"
+
+
+- name: ensure we have a folder for systemd overrides
+  file:
+    state: directory
+    path: "/etc/systemd/system/opendkim.service.d/"
+    mode: '0755'
+    owner: root
+    group: root
+
+- name: ensure we run the service without root
+  copy: 
+    src: "opendkim-systemd-service-override.conf"
+    dest: "/etc/systemd/system/opendkim.service.d/override.conf"
+
+
+- name: ensure we have our config
+  template:
+    src: "opendkim.conf.j2"
+    dest: "/etc/opendkim.conf"
+    owner: root
+    group: root
+    mode: '0644'
+
+
+- name: ensure we have the key table
+  template:
+    src: "opendkim-{{ item }}.j2"
+    dest: "/etc/dkimkeys/{{ item }}"
+    owner: root
+    group: root
+    mode: '0644'
+  loop:
+    - "keytable"
+    - "signingtable"
+    - "trustedhosts"