scripts

script/dkim/02-import-to-mailu.sh

@@ -0,0 +1,91 @@
+#!/usr/bin/env bash
+set -Eeuo pipefail
+
+# Prosess 2:
+# Importerer alle private DKIM-nøkler fra private/dkim/ til Mailu.
+#
+# Leser:
+#   private/dkim/<domene>.<selector>.private.pem
+#
+# Skriver:
+#   private/mailu-dkim-import.yml
+#
+# Dette scriptet er trygt å publisere.
+# Importfilen og private nøkler ligger under private/, som skal være i .gitignore.
+
+selector="${DKIM_SELECTOR:-mail}"
+import_file="private/mailu-dkim-import.yml"
+
+mapfile -t private_keys < <(
+  find private/dkim -maxdepth 1 -type f -name "*.${selector}.private.pem" | sort
+)
+
+if [[ ${#private_keys[@]} -eq 0 ]]; then
+  echo "FEIL: Fant ingen private DKIM-nøkler."
+  echo "Forventet filer som:"
+  echo "  private/dkim/<domene>.${selector}.private.pem"
+  exit 1
+fi
+
+{
+  echo "domain:"
+  for private_key in "${private_keys[@]}"; do
+    filename="$(basename "$private_key")"
+    domain="${filename%.${selector}.private.pem}"
+
+    echo "  - name: ${domain}"
+    echo "    dkim_key: |"
+    sed 's/^/      /' "$private_key"
+  done
+} > "$import_file"
+
+chmod 600 "$import_file"
+
+echo "Importfil laget:"
+echo "  $import_file"
+echo
+echo "Domener som blir importert:"
+for private_key in "${private_keys[@]}"; do
+  filename="$(basename "$private_key")"
+  domain="${filename%.${selector}.private.pem}"
+  echo "  - $domain"
+done
+
+echo
+echo "Dry-run mot Mailu:"
+docker compose exec -T admin flask mailu config-import \
+  --update \
+  --dry-run \
+  --verbose \
+  - < "$import_file"
+
+echo
+read -r -p "Importere DKIM-nøklene i Mailu nå? Skriv YES: " confirm
+
+if [[ "$confirm" != "YES" ]]; then
+  echo "Avbrutt. Ingen endring gjort."
+  exit 1
+fi
+
+docker compose exec -T admin flask mailu config-import \
+  --update \
+  --verbose \
+  - < "$import_file"
+
+echo
+echo "DKIM-status i Mailu:"
+docker compose exec -T admin flask mailu config-export domain \
+  | grep -A5 -E 'name:|dkim_key'
+
+echo
+echo "Restarter relevante Mailu-tjenester hvis de finnes..."
+services="$(docker compose ps --services)"
+
+for svc in admin smtp antispam; do
+  if echo "$services" | grep -qx "$svc"; then
+    docker compose restart "$svc"
+  fi
+done
+
+echo
+echo "OK: DKIM-nøkler importert til Mailu."