evgeny/modoboa-installer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added Rspamd installation

Browse Source
This commit is contained in:
Spitap
2023-04-04 17:34:48 +02:00
committed by Antoine Nguyen
parent fbedc6a051
commit 4082d5790d
15 changed files with 178 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
modoboa_installer/scripts/files/nginx/modoboa.conf.tpl
View File

@@ -37,6 +37,13 @@ server {
try_files $uri $uri/ =404;
}
%{rspamd_enabled} location /rspamd/ {
%{rspamd_enabled} proxy_pass http://localhost:11334/;
%{rspamd_enabled}
%{rspamd_enabled} proxy_set_header Host $host;
%{rspamd_enabled} proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
%{rspamd_enabled} }
location ~ ^/(api|accounts) {
include uwsgi_params;
uwsgi_param UWSGI_SCRIPT instance.wsgi:application;

25
modoboa_installer/scripts/files/postfix/main.cf.tpl
View File

@@ -122,6 +122,11 @@ strict_rfc821_envelopes = yes
%{opendkim_enabled}milter_default_action = accept
%{opendkim_enabled}milter_content_timeout = 30s
# Rspamd setup
%{rspamd_enabled}smtpd_milters = inet:localhost:11332
%{rspamd_enabled}milter_default_action = accept
%{rspamd_enabled}milter_protocol = 6
# List of authorized senders
smtpd_sender_login_maps =
proxy:%{db_driver}:/etc/postfix/sql-sender-login-map.cf
@@ -142,18 +147,18 @@ smtpd_recipient_restrictions =
## Postcreen settings
#
postscreen_access_list =
permit_mynetworks
cidr:/etc/postfix/postscreen_spf_whitelist.cidr
postscreen_blacklist_action = enforce
%{rspamd_disabled}postscreen_access_list =
%{rspamd_disabled} permit_mynetworks
%{rspamd_disabled} cidr:/etc/postfix/postscreen_spf_whitelist.cidr
%{rspamd_disabled}postscreen_blacklist_action = enforce
# Use some DNSBL
postscreen_dnsbl_sites =
zen.spamhaus.org=127.0.0.[2..11]*3
bl.spameatingmonkey.net=127.0.0.2*2
bl.spamcop.net=127.0.0.2
postscreen_dnsbl_threshold = 3
postscreen_dnsbl_action = enforce
%{rspamd_disabled}postscreen_dnsbl_sites =
%{rspamd_disabled} zen.spamhaus.org=127.0.0.[2..11]*3
%{rspamd_disabled} bl.spameatingmonkey.net=127.0.0.2*2
%{rspamd_disabled} bl.spamcop.net=127.0.0.2
%{rspamd_disabled}postscreen_dnsbl_threshold = 3
%{rspamd_disabled}postscreen_dnsbl_action = enforce
postscreen_greet_banner = Welcome, please wait...
postscreen_greet_action = enforce

11
modoboa_installer/scripts/files/rspamd/local.d/antivirus.conf.tpl Normal file
View File

@@ -0,0 +1,11 @@
clamav {
symbol = "CLAM_VIRUS";
type = "clamav";
servers = "127.0.0.1:3310";
patterns {
# symbol_name = "pattern";
JUST_EICAR = '^Eicar-Test-Signature$';
}
}

3
modoboa_installer/scripts/files/rspamd/local.d/dkim_signing.conf.tpl Normal file
View File

@@ -0,0 +1,3 @@
try_fallback = false;
selector_map = "%selectors_path_map";
path_map = "%keys_path_map";

2
modoboa_installer/scripts/files/rspamd/local.d/greylisting.conf.tpl Normal file
View File

@@ -0,0 +1,2 @@
servers = "127.0.0.1:6379";
%{postwhite_enabled}whitelisted_ip = "/etc/postfix/postscreen_spf_whitelist.cidr"

1
modoboa_installer/scripts/files/rspamd/local.d/mx_check.conf.tpl Normal file
View File

@@ -0,0 +1 @@
enabled = true;

6
modoboa_installer/scripts/files/rspamd/local.d/rbl.conf.tpl Normal file
View File

@@ -0,0 +1,6 @@
# to disable all predefined rules if the user doesn't want dnsbl
url_whitelist = [];
rbls {
}

6
modoboa_installer/scripts/files/rspamd/local.d/spf.conf.tpl Normal file
View File

@@ -0,0 +1,6 @@
spf_cache_size = 1k;
spf_cache_expire = 1d;
max_dns_nesting = 10;
max_dns_requests = 30;
min_cache_ttl = 5m;
disable_ipv6 = false;

1
modoboa_installer/scripts/files/rspamd/local.d/worker-controller.inc Normal file
View File

@@ -0,0 +1 @@
enable_password = %controller_password

1
modoboa_installer/scripts/files/rspamd/local.d/worker-controller.inc.tpl Normal file
View File

@@ -0,0 +1 @@
enable_password = %controller_password

1
modoboa_installer/scripts/files/rspamd/local.d/worker-normal.inc.tpl Normal file
View File

@@ -0,0 +1 @@
enabled = false;

3
modoboa_installer/scripts/files/rspamd/local.d/worker-proxy.inc.tpl Normal file
View File

@@ -0,0 +1,3 @@
upstream "local" {
self_scan = yes;
}