--- a/mail.py	Mon Aug 14 19:54:01 2023 -0700
+++ b/mail.py	Sun Aug 20 15:08:18 2023 -0700
@@ -2,7 +2,19 @@
 from pyinfra.operations import apt, files, server, systemd
 
 if host.name == 'prime':
-    apt.packages(packages=['postfix', 'isync'])
+    apt.packages(packages=['postfix', 'isync', 'opendkim', 'opendkim-tools'])
+
+    files.template(src='templates/mail/opendkim-KeyTable.j2', dest='/etc/opendkim/KeyTable')
+    files.template(src='templates/mail/opendkim-SigningTable.j2', dest='/etc/opendkim/SigningTable')
+    files.template(src='templates/mail/opendkim-TrustedHosts.j2', dest='/etc/opendkim/TrustedHosts')
+    files.template(src='templates/mail/opendkim.conf.j2', dest='/etc/opendkim.conf')
+    files.put(src='secrets/mail/bigasterisk.com-default.private',
+              dest='/etc/opendkim/keys/bigasterisk.com/default.private',
+              mode='0600', user='opendkim')
+
+    files.template(src='templates/mail/opendkim.service.j2', dest='/usr/lib/systemd/system/opendkim.service')
+    systemd.service(service='opendkim.service', enabled=True, running=True, restarted=True)
+
     files.template(src='templates/mail/main.cf.j2', dest='/etc/postfix/main.cf')
     files.template(src='templates/mail/mydestination.j2', dest='/etc/postfix/mydestination')
     files.put(src='secrets/mail/aliases', dest='/etc/postfix/aliases')
@@ -12,7 +24,7 @@
     server.shell(commands=[
         'postmap /etc/postfix/sender_access',
         'postmap /etc/postfix/virtual',
-        'postmap /etc/postfix/aliases',
+        'postmap /etc/postfix/aliases',  # broken
         'postfix reload',
     ])
     systemd.service(service='postfix@-.service', enabled=True, running=True)