diff --git a/roles/opendkim/defaults/main.yml b/roles/opendkim/defaults/main.yml
index 21962d8..a78b015 100644
--- a/roles/opendkim/defaults/main.yml
+++ b/roles/opendkim/defaults/main.yml
@@ -13,9 +13,8 @@ opendkim_oversign_headers: From
 
 opendkim_selector: mail
 
-opendkim_socket: "local:/var/spool/postfix/private/opendkim"
+opendkim_socket: "local:/var/spool/postfix/opendkim/opendkim.sock"
 opendkim_internal_hosts:
-  - "[::1]"
   - 127.0.0.0/8
   - 192.168.0.0/16
   - 10.0.0.0/8
diff --git a/roles/opendkim/tasks/config.yml b/roles/opendkim/tasks/config.yml
index 2288e40..e36e071 100644
--- a/roles/opendkim/tasks/config.yml
+++ b/roles/opendkim/tasks/config.yml
@@ -19,6 +19,15 @@
   become_user: opendkim
   notify: restart opendkim
 
+- name: create postfix spool socket directory
+  ansible.builtin.file:
+    path: /var/spool/postfix/opendkim
+    state: directory
+    owner: opendkim
+    group: postfix
+    mode: 0770
+  notify: restart opendkim
+
 - name: render /etc/opendkim.conf
   ansible.builtin.template:
     src: etc/opendkim.conf.j2
diff --git a/roles/postfix/defaults/main/restrictions.yml b/roles/postfix/defaults/main/restrictions.yml
index be582f9..f4b350e 100644
--- a/roles/postfix/defaults/main/restrictions.yml
+++ b/roles/postfix/defaults/main/restrictions.yml
@@ -41,7 +41,7 @@ postfix_smtpd_client_restrictions:
 postfix_non_smtpd_milters: []
 postfix_smtpd_milters: []
 postfix_spamassassin_milter: "unix:/spamass/spamass.sock"
-postfix_opendkim_milter: "unix:private/opendkim"
+postfix_opendkim_milter: "unix:/opendkim/opendkim.sock"
 
 postfix_header_checks: []
 postfix_body_checks: []