From 06263461a3d3e3001bcd649c5b0a51d579f840f0 Mon Sep 17 00:00:00 2001
From: boksbc <boban.blaskovic@gmail.com>
Date: Sun, 19 Oct 2025 17:51:17 +0200
Subject: [PATCH] Dovecot Systax Problem

---
 scripts/10-provision.sh | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

diff --git a/scripts/10-provision.sh b/scripts/10-provision.sh
index 3bd7c0c..038357d 100644
--- a/scripts/10-provision.sh
+++ b/scripts/10-provision.sh
@@ -32,20 +32,24 @@ install -d -m 0775 -o "$APP_USER" -g "$APP_GROUP" "$APP_DIR"
 
 SUDOERS_DKIM="/etc/sudoers.d/mailwolt-dkim"
 cat > "${SUDOERS_DKIM}" <<'EOF'
-# mailwolt darf diese Kommandos ohne Passwort ausführen (für DKIM-Setup)
-Defaults:mailwolt !requiretty
+Defaults!/usr/local/sbin/mailwolt-install-dkim !requiretty
+Defaults!/usr/local/sbin/mailwolt-remove-dkim  !requiretty
+Defaults!/usr/bin/systemctl                    !requiretty
+Defaults!/usr/bin/test                         !requiretty
+
+www-data ALL=(root) NOPASSWD: /usr/local/sbin/mailwolt-install-dkim *
+www-data ALL=(root) NOPASSWD: /usr/local/sbin/mailwolt-remove-dkim *
+www-data ALL=(root) NOPASSWD: /usr/bin/systemctl reload opendkim
+www-data ALL=(root) NOPASSWD: /usr/bin/test *
 
-# DKIM-Helfer (mit beliebigen Argumenten)
 mailwolt ALL=(root) NOPASSWD: /usr/local/sbin/mailwolt-install-dkim *
 mailwolt ALL=(root) NOPASSWD: /usr/local/sbin/mailwolt-remove-dkim *
-
-# OpenDKIM neu laden
-mailwolt ALL=(root) NOPASSWD: /bin/systemctl reload opendkim
+mailwolt ALL=(root) NOPASSWD: /usr/bin/systemctl reload opendkim
+mailwolt ALL=(root) NOPASSWD: /usr/bin/test *
 EOF
 chown root:root "${SUDOERS_DKIM}"
 chmod 440 "${SUDOERS_DKIM}"
 
-# Safety: Konfiguration validieren – bei Fehler Datei entfernen
 if ! visudo -c -f "${SUDOERS_DKIM}" >/dev/null 2>&1; then
   echo "[!] Ungültiger sudoers-Eintrag in ${SUDOERS_DKIM} – entferne Datei."
   rm -f "${SUDOERS_DKIM}"