diff --git a/playbook_mailserver.yml b/playbook_mailserver.yml index e645c19..a756007 100644 --- a/playbook_mailserver.yml +++ b/playbook_mailserver.yml @@ -24,3 +24,5 @@ tags: dkim - role: mailserver_spf tags: spf + - role: mailserver_dmarc + tags: dmarc diff --git a/roles/mailserver_dmarc/tasks/main.yml b/roles/mailserver_dmarc/tasks/main.yml new file mode 100644 index 0000000..33b6b7c --- /dev/null +++ b/roles/mailserver_dmarc/tasks/main.yml @@ -0,0 +1,9 @@ +--- + +- name: Set DMARC TXT record + ansible.builtin.set_fact: + dmarc_txt_record: "_dmarc.{{ virtual_domain }}. IN TXT \"v=DMARC1; p=reject; pct=100; adkim=s; rua=mailto:postmaster@{{ virtual_domain }}\"" + +- name: Print DMARC TXT record for the DNS zone + ansible.builtin.debug: + msg: "Don't forget to add this to your DNS zone:\n{{ dmarc_txt_record }}"