Add separate dovecot-keylookupd package

debian/control

@@ -11,3 +11,9 @@ Depends: ${shlibs:Depends}, ${misc:Depends}
 Description: User private key server.
  Stores user encryption keys in-memory for the session duration.
 
+Package: dovecot-keylookupd
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}, dovecot-core
+Description: Dovecot dict proxy for user encryption keys.
+ Look up user encryption keys via the Dovecot dict proxy protocol.
+

debian/dovecot-keylookupd.service

+[Unit]
+Description=Dovecot keylookupd server
+Requires=dovecot-keylookupd.socket
+
+[Service]
+Type=notify
+ExecStart=/usr/bin/dovecot-keylookupd --systemd-socket
+Restart=on-failure
+User=dovecot
+
+[Install]
+WantedBy=multi-user.target
+

debian/dovecot-keylookupd.socket

+[Unit]
+Description=Dovecot keylookupd socket
+
+[Socket]
+ListenStream=/run/dovecot-keylookupd/socket
+SocketMode=660
+DirectoryMode=755
+SocketUser=dovecot
+SocketGroup=dovecot
+Accept=false
+

debian/rules

@@ -8,6 +8,6 @@ export DH_GOLANG_EXCLUDES = vendor
 	dh $@ --with systemd --with golang --buildsystem golang
 
 override_dh_install:
-	rm -fr $(CURDIR)/debian/keystored/usr/share/gocode
+	rm -fr $(CURDIR)/debian/tmp/usr/share/gocode
 	dh_install