---

- name: Fix DKIM key ownership
  become: true
  ansible.builtin.file:
    path: "/var/lib/rspamd/dkim/{{ virtual_domain }}.{{ dkim_selector }}.key"
    owner: _rspamd
    group: root
    mode: "600"

- name: Save DKIM TXT record to a file
  become: true
  ansible.builtin.copy:
    content: "{{ dkim_txt_record.stdout }}"
    dest: "/var/lib/rspamd/dkim/{{ virtual_domain }}.{{ dkim_selector }}.dns"
    owner: root
    group: root
    mode: "600"

- name: Add selector to DKIM selectors map
  become: true
  ansible.builtin.lineinfile:
    path: /etc/rspamd/dkim_selectors.map
    line: "{{ virtual_domain }} {{ dkim_selector }}"
    create: true
    owner: root
    group: root
    mode: "644"
  notify: Reload rspamd service