---

- name: Create dkim directory for the key file
  become: true
  ansible.builtin.file:
    path: /var/lib/rspamd/dkim
    state: directory
    owner: _rspamd
    group: _rspamd
    mode: "700"

- name: Set DKIM selector
  ansible.builtin.set_fact:
    dkim_selector: "{{ '%Y%m%d01' | strftime }}"

- name: Create keypair
  become: true
  ansible.builtin.command:
    chdir: /var/lib/rspamd/dkim
    cmd: "rspamadm dkim_keygen -d {{ virtual_domain }} -s {{ dkim_selector }} -k {{ virtual_domain }}.{{ dkim_selector }}.key"
    creates: "/var/lib/rspamd/dkim/{{ virtual_domain }}.*.key"
  register: dkim_txt_record
  notify:
    - Save DKIM TXT record to a file
    - Print DKIM TXT record for the DNS zone