Outgoing mail from Discourse not DKIM-signed
openkim
is not signing outgoing mail from Discourse because the main application container IP address changed from 172.17.0.2
:
Dec 11 19:39:53 forum-01 opendkim[652]: F2F3D80574: [172.17.0.3] [172.17.0.3] not internal
Dec 11 19:39:53 forum-01 opendkim[652]: F2F3D80574: not authenticated
Dec 11 19:39:53 forum-01 opendkim[652]: F2F3D80574: external host [172.17.0.3] attempted to send as forum.torproject.org
Dec 11 19:39:53 forum-01 opendkim[652]: F2F3D80574: no signature data
Can we somehow ensure Discourse always picks the same IP address here?
Or should we sign all messages from the entire subnet, similar to the fix we used for #41266 (comment 2923409)