# OpenDMARC configuration for happyDeliver
# Verifies DMARC policies on incoming emails

# Socket for Postfix communication
Socket unix:/var/spool/postfix/opendmarc/opendmarc.sock

# Process ID file
PidFile /var/run/opendmarc/opendmarc.pid

# Run as this user and group
UserID opendmarc:mail

UMask 002

# Syslog configuration
Syslog true
SyslogFacility mail

# Ignore authentication results from other hosts
IgnoreAuthenticatedClients true

# Accept mail even if DMARC fails (we're analyzing, not filtering)
RejectFailures false

# Trust Authentication-Results headers from localhost only
TrustedAuthservIDs __HOSTNAME__

# Add DMARC results to Authentication-Results header
#AddAuthenticationResults true

# DNS timeout
DNSTimeout 5

# History file (for reporting)
# HistoryFile /var/spool/opendmarc/opendmarc.dat

# Ignore hosts file
# IgnoreHosts /etc/opendmarc/ignore.hosts

# Public suffix list
# PublicSuffixList /usr/share/publicsuffix/public_suffix_list.dat