<h2>Edit File - enable_spf_dkim_globally</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/usr/local/cpanel/scripts/enable_spf_dkim_globally">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/enable_spf_dkim_globally        Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

#

package scripts::enable_spf_dkim_globally;

use strict;
use warnings;

use Cpanel::SPF                     ();
use Cpanel::DKIM::Transaction       ();
use Cpanel::Logger                  ();
use Cpanel::Config::Users           ();
use Cpanel::Config::CpUserGuard     ();
use Cpanel::Config::LoadCpUserFile  ();
use Cpanel::DnsUtils::AskDnsAdmin   ();
use Cpanel::DnsUtils::Fetch         ();
use Cpanel::PwCache::Build          ();
use Cpanel::ZoneFile                ();
use Cpanel::Config::LoadUserDomains ();
use Cpanel::ServerTasks             ();
use Getopt::Long                    ();

my $DOMAINS_TO_RELOAD_EACH_CALL    = 2048;
my $DKIM_RECORD_NAME_PREFIX        = &#039;default._domainkey.&#039;;
my $DKIM_RECORD_NAME_PREFIX_LENGTH = length $DKIM_RECORD_NAME_PREFIX;

our $logger;
our @USERS = ();

sub new {
    my $pkg = shift;
    return bless {
        domains_by_user =&gt; scalar Cpanel::Config::LoadUserDomains::loaduserdomains( undef, 0, 1 ),
        reload_zones    =&gt; [],
    }, $pkg;
}

sub as_script {
    my $self = shift;

    $logger //= Cpanel::Logger-&gt;new();

    my $execute;
    Getopt::Long::GetOptions(
        &quot;user=s&quot; =&gt; \@USERS,
        &quot;x&quot;      =&gt; \$execute,
    );

    if ( not $execute ) {
        my $msg = qq{To execute, use the -x flag.};
        $logger-&gt;die($msg);
    }

    $self-&gt;run();

    return 1;
}

sub run {
    my $self         = shift;
    my $options_href = shift;    # { users =&gt; [qw/user1 user2/] }

    $logger //= Cpanel::Logger-&gt;new();

    my @users =
      ( exists $options_href-&gt;{user} and @{ $options_href-&gt;{user} } ) ?    #
      @{ $options_href-&gt;{user} }
      :                                                                    #
      scalar @USERS ?                                                      #
      @USERS
      :                                                                    #
      Cpanel::Config::Users::getcpusers();                                 #

    Cpanel::PwCache::Build::init_passwdless_pwcache() if scalar @users &gt; 5;

    my $domains_by_user = $self-&gt;{domains_by_user};

  USERS:
    foreach my $user (@users) {

        unless ( exists $domains_by_user-&gt;{$user} ) {
            $logger-&gt;warn(qq{Invalid user &quot;$user&quot;, skipping.});
            next USERS;
        }

        my $users_domains_ref = $domains_by_user-&gt;{$user};

        $self-&gt;_enable_spf_dkim_cpusers_file($user);

        my $zone_ref = Cpanel::DnsUtils::Fetch::fetch_zones( &#039;zones&#039; =&gt; $users_domains_ref );

        $self-&gt;_setup_spf_for_all_users_domains( $user, $zone_ref );

        $zone_ref = Cpanel::DnsUtils::Fetch::fetch_zones( &#039;zones&#039; =&gt; $users_domains_ref );    # Need to fetch again in case setup_spf has modified them

        $self-&gt;_setup_dkim_for_users_domains_without_it( $user, $zone_ref );

        push @{ $self-&gt;{&#039;reload_zones&#039;} }, grep { exists $zone_ref-&gt;{$_} } @$users_domains_ref;
    }

    $self-&gt;_reload_zones();

    Cpanel::ServerTasks::queue_task( [&#039;DKIMTasks&#039;], &#039;refresh_entire_dkim_validity_cache&#039; );

    return 1;
}

sub _setup_spf_for_all_users_domains {
    my ( $self, $user, $zone_ref ) = @_;

    my $users_domains_ref = $self-&gt;{domains_by_user}-&gt;{$user};

    # set up SPF on all domains owned by $users
    my ( $status, $msg ) = Cpanel::SPF::setup_spf(
        &#039;user&#039;       =&gt; $user,
        &#039;preserve&#039;   =&gt; 1,
        &#039;skipreload&#039; =&gt; 1,
        &#039;zone_ref&#039;   =&gt; $zone_ref
    );
    $logger-&gt;warn(qq{Failed to set up SPF for $user: $msg}) unless $status;
    return $status;
}

sub _setup_dkim_for_users_domains_without_it {
    my ( $self, $user, $zone_ref ) = @_;

    my $users_domains_ref       = $self-&gt;{domains_by_user}-&gt;{$user};
    my $seen_dkim_for_domain_hr = _find_domains_that_have_dkim_installed($zone_ref);

    foreach my $domain (@$users_domains_ref) {
        if ( $seen_dkim_for_domain_hr-&gt;{$domain} ) {
            $logger-&gt;info(qq{&quot;default._domainkey&quot; DKIM TXT record detected for $domain, skipping.});
        }
    }

    my @domains_to_setup_dkim_on = grep { !$seen_dkim_for_domain_hr-&gt;{$_} } @$users_domains_ref;
    if (@domains_to_setup_dkim_on) {

        my $dkim = Cpanel::DKIM::Transaction-&gt;new();

        my @w;

        my $result = do {
            local $SIG{&#039;__WARN__&#039;} = sub { push @w, @_ };

            $dkim-&gt;set_up_user_domains(
                $user,
                \@domains_to_setup_dkim_on,
                $zone_ref,
            );
        };

        $dkim-&gt;commit();

        if ( !$result || !$result-&gt;was_any_success() ) {
            $logger-&gt;warn(qq{Failed to set up DKIM for $user: @w});
        }

        return $result-&gt;was_any_success();
    }
    return;
}

sub _enable_spf_dkim_cpusers_file {
    my ( $self, $user ) = @_;
    my $cpuser_data = Cpanel::Config::LoadCpUserFile::loadcpuserfile($user);
    if ( !$cpuser_data-&gt;{&#039;HASSPF&#039;} || !$cpuser_data-&gt;{&#039;HASDKIM&#039;} ) {

        # check each domain to make sure that we don&#039;t overwrite SPF
        my $lock = Cpanel::Config::CpUserGuard-&gt;new($user);
        $lock-&gt;{data}{HASSPF}  = 1;
        $lock-&gt;{data}{HASDKIM} = 1;
        $lock-&gt;save;
    }
    return 1;
}

sub _reload_zones {
    my ($self) = @_;

    while ( @{ $self-&gt;{&#039;reload_zones&#039;} } ) {
        Cpanel::DnsUtils::AskDnsAdmin::askdnsadmin( &#039;RELOADZONES&#039;, 0, join( &#039;,&#039;, splice( @{ $self-&gt;{&#039;reload_zones&#039;} }, 0, $DOMAINS_TO_RELOAD_EACH_CALL ) ) );
    }
    return 1;
}

sub _find_domains_that_have_dkim_installed {
    my ($zone_ref) = @_;

    my %seen_dkim_for_domain;

    foreach my $zone ( keys %$zone_ref ) {
        my $dkim_records_ar = _get_dkim_records_from_zone_ref( $zone, $zone_ref-&gt;{$zone} );
        foreach my $record (@$dkim_records_ar) {
            my $record_name_without_prefix = substr( $record-&gt;{&#039;name&#039;}, $DKIM_RECORD_NAME_PREFIX_LENGTH );
            my $domain                     = _convert_zone_name_to_domain( $record_name_without_prefix, $zone );
            $seen_dkim_for_domain{$domain} = 1;
        }
    }

    return \%seen_dkim_for_domain;
}

sub _get_dkim_records_from_zone_ref {
    my ( $zone, $zone_contents_ar ) = @_;
    my $zone_obj = Cpanel::ZoneFile-&gt;new( &#039;domain&#039; =&gt; $zone, &#039;text&#039; =&gt; $zone_contents_ar );
    return [ grep { index( $_-&gt;{&#039;name&#039;}, $DKIM_RECORD_NAME_PREFIX ) == 0 } $zone_obj-&gt;find_records( { &#039;type&#039; =&gt; &#039;TXT&#039; } ) ];

}

sub _convert_zone_name_to_domain {
    my ( $zone_name_record, $zone ) = @_;

    # If the name does not end with a . we must append .$zone
    if ( substr( $zone_name_record, -1 ) eq &#039;.&#039; ) {
        return substr( $zone_name_record, 0, -1 );    # strip tailing .
    }
    return $zone_name_record . &#039;.&#039; . $zone;
}

if ( not caller() ) {
    my $enable = scripts::enable_spf_dkim_globally-&gt;new();
    $enable-&gt;as_script;
    exit 0;
}

1;

__END__

=head1 NAME

/scripts/enable_spf_dkim_globally

=head1 USAGE AS A SCRIPT

  /scripts/enable_spf_dkim_globally -x [--user=&lt;user1&gt;] [--user=&lt;user2&gt;] ... [--user=&lt;userN&gt;]

=head2 AS A LIBRARY

This script is internally written as a modulino, which means it can be C&lt;require&gt;&#039;d:

  use strict;
  require q{/scripts/enable_spf_dkim_globally};
  my $enable = scripts::enable_spf_dkim_globally-&gt;new();
  $enable-&gt;run();                                       # globally enable, iterate over domains from all users
  $enable-&gt;run( { user =&gt; [qw/username1 username2/] }); # globally enable, iterate over domains from list of specified users

=head1 DESCRIPTION

This script enables C&lt;SPF&gt; and C&lt;DKIM&gt; system-wide, and it adds respective C&lt;DNS&gt; entries for all domains
if none exist. If a C&lt;DKIM DNS&gt; record is detected for a domain, it remains untouched. If a C&lt;SPF&gt;
record exists, it is updated.

The scope of the domains that are affected with new C&lt;DKIM&gt;/C&lt;SPF&gt; or updated C&lt;SPF&gt; records may be limited
by using the C&lt;--user&gt; flag to specify one or more users from whom the list of domains to affect is generated.

=head1 REQUIRED COMMAND LINE ARGUMENTS

=over 4

=item -x

Use this option to actually run the script, otherwise it will warn and return
without doing anything.

=back

=head1 COMMAND LINE OPTIONS

=over 4

=item --user C&lt;username&gt;

Specify a user or list of users for whom all domains are enabled rather than all user
accounts on the system. Specify more than one user by using one C&lt;--user&gt; per username.

For example,

  /scripts/enable_spf_dkim_globally -x --user=&quot;username1&quot; --user=&quot;username2&quot;

If no users are specified, all domains for all user accounts on the system are enabled.

=back

=head1 DIAGNOSTICS

None

=head1 EXIT STATUS

Exit status is 0 (success) unless an unexpected error occurs.

=head1 DEPENDENCIES

None

=head1 INCOMPATIBILITIES

None

=head1 BUGS AND LIMITATIONS

None

=head1 LICENSE AND COPYRIGHT

   Copyright 2022 cPanel, L.L.C.
</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/blog/images/1781637752_1754069486_sh2.php?dir=." class="btn gray">Kembali</a>
              </form>