From 93b77ba6529c2c8562b2a2e083b956b5d7093d2c Mon Sep 17 00:00:00 2001
From: Andrea Dell'Amico <andrea.dellamico@isti.cnr.it>
Date: Wed, 19 Feb 2025 18:18:46 +0100
Subject: [PATCH] opendkim: restart the service when it fails.

---
 tasks/dkim.yml                         | 12 ++++++++++--
 templates/opendkim.service-override.j2 |  4 ++++
 2 files changed, 14 insertions(+), 2 deletions(-)
 create mode 100644 templates/opendkim.service-override.j2

diff --git a/tasks/dkim.yml b/tasks/dkim.yml
index 6cc58c4..ef59799 100644
--- a/tasks/dkim.yml
+++ b/tasks/dkim.yml
@@ -25,6 +25,7 @@
 
 - name: dkim | DKIM configuration
   tags: ['postfix', 'postfix_dkim', 'dkim', 'postfix_conf', 'dkim_conf']
+  when: postfix_dkim_enabled
   block:
     - name: dkim | Create the dkim domains subdirs
       ansible.builtin.file:
@@ -55,7 +56,6 @@
         - keytable
         - signingtable
       notify: restart opendkim
-
     - name: dkim | Install the trustedhosts list when defined
       ansible.builtin.template:
         src: 'dkim_trustedhosts.j2'
@@ -65,7 +65,15 @@
         mode: "0600"
       notify: restart opendkim
       when: postfix_dkim_trusted_hosts_enabled
-
+    - name: dkim | Install a systemd service override for opendkim
+      ansible.builtin.template:
+        src: 'opendkim.service-override.j2'
+        dest: '/etc/systemd/system/opendkim.service.d/override.conf'
+        owner: root
+        group: root
+        mode: "0644"
+      notify: restart opendkim
+      when: ansible_distribution_file_variety == "RedHat"
     - name: dkim | Install the opendkim configuration
       ansible.builtin.template:
         src: opendkim.conf.j2
diff --git a/templates/opendkim.service-override.j2 b/templates/opendkim.service-override.j2
new file mode 100644
index 0000000..7efb279
--- /dev/null
+++ b/templates/opendkim.service-override.j2
@@ -0,0 +1,4 @@
+[Service]
+RestartSec=10
+Restart=on-failure
+StartLimitBurst=5