Create role mailserver_rspamd

playbook_mailserver.yml

@@ -18,3 +18,5 @@
       tags: postfix
     - role: mailserver_dovecot
       tags: dovecot
+    - role: mailserver_rspamd
+      tags: rspamd

roles/common_handlers/handlers/main.yml

@@ -76,3 +76,9 @@
   ansible.builtin.systemd:
     name: sshd
     state: restarted
+
+- name: Reload rspamd service
+  become: true
+  ansible.builtin.systemd:
+    name: rspamd
+    state: reloaded

roles/mailserver_postfix/templates/main.cf.j2

@@ -30,6 +30,10 @@ smtpd_recipient_restrictions=reject_unauth_destination,check_policy_service unix
 
 smtpd_sender_login_maps=pgsql:/etc/postfix/sql-email-as-alias.cf
 
+smtpd_milters=inet:127.0.0.1:11332
+non_smtpd_milters=inet:127.0.0.1:11332
+milter_mail_macros=i {mail_addr} {client_addr} {client_name} {auth_authen}
+
 smtpd_sasl_type = dovecot
 smtpd_sasl_path = private/auth
 smtpd_sasl_auth_enable = yes

roles/mailserver_rspamd/README.md

@@ -0,0 +1,3 @@
+# mailserver - Rspamd
+
+Installs ands sets up the Rspamd part of the mail server.

roles/mailserver_rspamd/tasks/main.yml

@@ -0,0 +1,18 @@
+---
+
+- name: Install needed packages
+  become: true
+  ansible.builtin.apt:
+    name:
+      - rspamd
+      - redis-server
+
+- name: Copy local actions
+  become: true
+  ansible.builtin.template:
+    src: actions.conf.j2
+    dest: /etc/rspamd/local.d/actions.conf
+    owner: root
+    group: root
+    mode: "644"
+  notify: Reload rspamd service

roles/mailserver_rspamd/templates/actions.conf.j2

@@ -0,0 +1,3 @@
+reject = 150;
+add_header = 6;
+greylist = 4;