Reverted

README.md

@@ -97,7 +97,13 @@ OPENDKIM_TRUSTANCHORFILE=""
 OPENDKIM_INTERNALHOSTS="127.0.0.1,localhost,127.0.0.0/8,192.168.0.0/16,172.16.0.0/12,10.0.0.0/8"
 
 # ExternalIgnoreList value for OpenDKIM.
-OPENDKIM_EXTERNALIGNORELIST=""
+OPENDKIM_EXTERNALIGNORELIST="refile:/etc/opendkim/TrustedHosts"
+
+# Path to KeyTable.
+OPENDKIM_KEYTABLE="/etc/opendkim/KeyTable"
+
+# Path to SigningTable.
+OPENDKIM_SIGNINGTABLE="refile:/etc/opendkim/SigningTable"
 
 # PID file path.
 OPENDKIM_PIDFILE="/run/opendkim/opendkim.pid"
@@ -139,6 +145,7 @@ At startup the container:
 - creates OpenDKIM runtime directories
 - copies the mounted private key to `/var/opendkim/dkim.private`
 - sets secure ownership and permissions on the copied key
+- generates `TrustedHosts`, `KeyTable`, and `SigningTable` if they are empty
 - generates `/etc/opendkim.conf` from environment variables
 - starts OpenDKIM using `/etc/opendkim.conf`
 
@@ -153,6 +160,36 @@ The entrypoint generates these files automatically:
 /var/opendkim/dkim.private
 ```
 
+# Default generated tables
+For example, with:
+
+```sh
+OPENDKIM_DOMAIN=example.com
+OPENDKIM_SELECTOR=dkim
+```
+
+the generated files look like this:
+
+## /etc/opendkim/KeyTable
+```txt
+dkim._domainkey.example.com example.com:dkim:/var/opendkim/dkim.private
+```
+
+## /etc/opendkim/SigningTable
+```txt
+*@example.com dkim._domainkey.example.com
+```
+
+## /etc/opendkim/TrustedHosts
+```txt
+127.0.0.1
+localhost
+127.0.0.0/8
+192.168.0.0/16
+172.16.0.0/12
+10.0.0.0/8
+```
+
 # Postfix example
 Example Postfix settings when OpenDKIM runs in another container named `opendkim`: