#!/bin/sh

QMAILDIR=/var/qmail

# Comment out to disable dkim sign at qmail-remote level
DKIM_ON=1

SELECTOR=default
# Sign with 2048 bit RSA. Comment out DKIMSIGNOPTIONS to sign with 1024 bit
DKIMSIGNOPTIONS="-z 2"
# domain to sign system messages like bounces
DKIMDOMAIN=`cat $QMAILDIR/control/me`

if [ -n $DKIM_ON ]; then
 # DKIM sign at qmail-remote level
 exec env - PATH="$QMAILDIR/bin:$PATH" \
 QMAILREMOTE=$QMAILDIR/bin/spawn-filter  \
 DKIMSIGN=/var/qmail/control/domainkeys/%/$SELECTOR \
 DKIMSIGNOPTIONS="$DKIMSIGNOPTIONS" \
 DKIMDOMAIN=$DKIMDOMAIN  \
 FILTERARGS=$QMAILDIR/bin/dk-filter \
 qmail-start "`cat $QMAILDIR/control/defaultdelivery`"

else
 # Use this if you are signing at qmail-smtpd level or you don't want to sign at all
 exec env - PATH="$QMAILDIR/bin:$PATH" \
 qmail-start "`cat $QMAILDIR/control/defaultdelivery`"
fi