Use default

tasks/main.yml

@@ -13,7 +13,7 @@
         dest: '/etc/opendkim.conf'
         follow: yes
         owner: opendkim
-        mode: 700
+        mode: "700"
   tags:
         - opendkim
   notify: Run service actions
@@ -27,7 +27,7 @@
         dest: '/etc/opendkim-data/{{ item }}'
         follow: yes
         owner: opendkim
-        mode: 700
+        mode: "700"
   tags:
         - opendkim
   notify: Run service actions

templates/opendkim.conf

@@ -16,7 +16,7 @@ UMask			007
 
 # Commonly-used options; the commented-out versions show the defaults.
 Canonicalization	relaxed/simple
-#Mode			sv
+Mode			sv
 #SubDomains		no
 AutoRestart		yes
 Background		yes
@@ -43,15 +43,7 @@ Socket			local:/var/spool/postfix/opendkim/opendkim.sock
 ###  normal operations.
 #
 PidFile               /run/opendkim/opendkim.pid
-
-
-# Always oversign From (sign using actual From and a null From to prevent
-# malicious signatures header fields (From and/or others) between the signer
-# and the verifier.  From is oversigned by default in the Debian pacakge
-# because it is often the identity key used by reputation systems and thus
-# somewhat security sensitive.
-OversignHeaders		From
-
+#
 ##  ResolverConfiguration filename
 ##      default (none)
 ##