opendkim-atpszone(8)

💖 opendkim-atpszone — the manual, but make it cute 💖

okay bestie, sit down, grab a strawberry 🍓 — this is opendkim-atpszone from the opendkim-atpszone(8) system manager's manual situation, and it's literally the DKIM ATPS zone file generation tool. yes. that's the whole name. it's giving very-specific-tool energy and honestly? iconic. 👑

✨ NAME ✨

opendkim-atpszone — the DKIM ATPS zone file generation tool, aka the little guy who writes your zone files so you don't have to 🎀

🌸 SYNOPSIS 🌸

opendkim-atpszone [-A] [-C address] [-E secs] [-h hash] [-N ns[,...]]
[-o file] [-r secs] [-R secs] [-S] [-t secs] [-T secs] [-u domain] [-v]
[dataset]

💅 DESCRIPTION 💅

okay so. opendkim-atpszone generates a file that's suitable for use with named(8) so you can publish a whole set of domains that are authorized as third-party signers for a local domain. that's the whole job. it's a zone-file-builder and it does it well. periodt. ✨

the dataset parameter should specify a set of data the way the opendkim(8) man page describes it. and the way that it can currently refer to is: flat files, Sleepycat databases, comma-separated lists, LDAP directories, or SQL databases. so many options bestie, we love range 🦋

so the keys in that named database — those are assumed to comprise a set of domains that are to be advertised using the experimental Authorized Third-Party Signers protocol, as permitted to sign mail using DKIM on behalf of the local domain. meanwhile the values in the database? not used. they're just vibing. 💀

🎀 OPTIONS 🎀

• -A — adds a ._atps suffix to records in the zone file. tiny suffix, big difference 💖
• -C contact — uses contact as the contact information to be used when an SOA record is generated (peep -S below 👀). if you don't specify it, the userid of the executing user plus the local hostname get used instead. and if the executing user can't be determined? you get "hostmaster". mystery user behavior fr fr.
• -E secs — when generating an SOA record (again, -S below), use secs as the default record expiration time. the default is 604800. mark it. ⭐
• -h hash — specifies which SHA hash algorithm to use. must be one of "none", "sha1" and "sha256", and "sha256" is the default if it's available. slay, sha256, we love a main character default 🌈
• -N nslist — specifies a comma-separated list of nameservers, which get output in NS records before the TXT records. the first nameserver in this list will also be used in the SOA record (if -S is also specified) as the authority hostname. first one up gets the crown 👑
• -o file — sends output to the named file instead of standard output. no more terminal scrolling bestie 🫶
• -r secs — when generating an SOA record (yes, -S, below), use secs as the zone refresh time. the default is 10800.
• -R secs — when generating an SOA record (-S!! below!!), use secs as the zone retry time. the default is 1800.
• -S — asks for an SOA record to be generated at the top of the output. the content of this output can be controlled using the -E, -r, -R, and -T options. the serial number will be generated based on the current time of day. clock-based serial, very on-the-nose of it 🕐
• -t ttl — puts a TTL (time-to-live) value of ttl on all records output. the units are in seconds.
• -T secs — when generating an SOA record (say it with me: see -S below), use secs as the default record TTL time. the default is 86400.
• -u domain — produces output suitable for use as input to nsupdate(8) to add ATPS records to the named domain. pipeline queen behavior 💜
• -v — increases the verbosity of debugging output written to standard error. louder = more info, and it goes to stderr, no cap 🔥

⭐ VERSION ⭐

this man page covers the version of opendkim-atpszone that shipped with version 2.11.0 of OpenDKIM. yes, we're citing our sources, we're academic like that 🧚

🌈 COPYRIGHT 🌈

Copyright (c) 2011, 2012, The Trusted Domain Project. All rights reserved.

👀 SEE ALSO 👀

nsupdate(8), opendkim(8), opendkim.conf(5) — go read them, bestie, they're the extended universe 🦋

and that's the whole page!! written by The Trusted Domain Project, dated in the era of the opendkim-atpszone(8) manual, for the System Manager's Manual section. mwah. go generate some zone files, you absolute legend 💅✨🎀