81 lines
2.6 KiB
Bash
81 lines
2.6 KiB
Bash
#!/bin/bash
|
|
# Script para agregar registros CNAME de DKIM en srvv-dns
|
|
# Ejecutar: sudo bash A07.P002_agregar_dkim.sh
|
|
|
|
ZONA_FILE="/docker/coreDNS/zones/frlr.utn.edu.ar.db"
|
|
BACKUP_FILE="/docker/coreDNS/zones/bkp_260407_preDKIM_frlr.utn.edu.ar.db"
|
|
|
|
echo "🔧 Agregando registros DKIM para Microsoft 365..."
|
|
|
|
# 1. Crear backup
|
|
echo " 1. Creando backup..."
|
|
cp "$ZONA_FILE" "$BACKUP_FILE"
|
|
if [ $? -eq 0 ]; then
|
|
echo " ✅ Backup creado: $BACKUP_FILE"
|
|
else
|
|
echo " ❌ Error al crear backup"
|
|
exit 1
|
|
fi
|
|
|
|
# 2. Verificar si los registros ya existen
|
|
if grep -q "selector1._domainkey" "$ZONA_FILE"; then
|
|
echo " ⚠️ El registro selector1._domainkey ya existe"
|
|
else
|
|
echo " ✅ Registro selector1._domainkey no existe (ok para agregar)"
|
|
fi
|
|
|
|
if grep -q "selector2._domainkey" "$ZONA_FILE"; then
|
|
echo " ⚠️ El registro selector2._domainkey ya existe"
|
|
else
|
|
echo " ✅ Registro selector2._domainkey no existe (ok para agregar)"
|
|
fi
|
|
|
|
# 3. Agregar registros CNAME de DKIM
|
|
# Los agrego después de los registros NS existentes
|
|
echo " 2. Agregando registros CNAME de DKIM..."
|
|
|
|
# Crear archivo temporal con los nuevos registros
|
|
cat >> "$ZONA_FILE" << 'EOF'
|
|
|
|
; =============================================
|
|
; Registros CNAME para DKIM (Microsoft 365)
|
|
; Agregados: 2026-04-07 - A07.P002
|
|
; =============================================
|
|
selector1 IN CNAME selector1-frlr-utn-edu-ar._domainkey.o365frlrutneduar.onmicrosoft.com.
|
|
selector2 IN CNAME selector2-frlr-utn-edu-ar._domainkey.o365frlrutneduar.onmicrosoft.com.
|
|
|
|
EOF
|
|
|
|
if [ $? -eq 0 ]; then
|
|
echo " ✅ Registros DKIM agregados"
|
|
else
|
|
echo " ❌ Error al agregar registros"
|
|
echo " Restaurando backup..."
|
|
cp "$BACKUP_FILE" "$ZONA_FILE"
|
|
exit 1
|
|
fi
|
|
|
|
# 4. Actualizar serial de zona (incrementar último dígito)
|
|
echo " 3. Actualizando serial de zona..."
|
|
SERIAL_ACTUAL=$(grep -A5 'IN SOA' "$ZONA_FILE" | grep -oE '[0-9]{10}' | head -1)
|
|
NUEVO_SERIAL=$((SERIAL_ACTUAL + 1))
|
|
sed -i "s/$SERIAL_ACTUAL/$NUEVO_SERIAL/" "$ZONA_FILE"
|
|
echo " Serial: $SERIAL_ACTUAL → $NUEVO_SERIAL"
|
|
|
|
# 5. Forzar reload de CoreDNS
|
|
echo " 4. Forzando reload de CoreDNS..."
|
|
docker kill --signal=HUP coredns 2>/dev/null || echo " (signal enviado)"
|
|
echo " ✅ CoreDNS notificado"
|
|
|
|
echo ""
|
|
echo "✅ ¡Completado!"
|
|
echo ""
|
|
echo "📋 Verificación:"
|
|
echo " dig selector1._domainkey.frlr.utn.edu.ar CNAME"
|
|
echo " dig selector2._domainkey.frlr.utn.edu.ar CNAME"
|
|
echo ""
|
|
echo "⏱️ Esperar 15-30 minutos para propagación"
|
|
echo ""
|
|
echo "🔐 Luego habilitar DKIM en:"
|
|
echo " https://security.microsoft.com/dkimv2"
|