From 427427ec3bcb58eadaa9c62477f70a5f3c6f39e0 Mon Sep 17 00:00:00 2001
From: Bryan Newbold <bnewbold@archive.org>
Date: Wed, 16 Jan 2019 13:24:08 -0800
Subject: mailserver role

---
 roles/mailserver/tasks/rspamd.yml | 52 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)
 create mode 100644 roles/mailserver/tasks/rspamd.yml

(limited to 'roles/mailserver/tasks/rspamd.yml')

diff --git a/roles/mailserver/tasks/rspamd.yml b/roles/mailserver/tasks/rspamd.yml
new file mode 100644
index 0000000..4d870a8
--- /dev/null
+++ b/roles/mailserver/tasks/rspamd.yml
@@ -0,0 +1,52 @@
+---
+# Installs and configures the Rspamd spam filtering system.
+
+- name: Ensure repository key for Rspamd is in place
+  apt_key: url=https://rspamd.com/apt-stable/gpg.key state=present
+  when: ansible_architecture != "armv7l"
+  tags:
+    - dependencies
+
+- name: Ensure yunohost repository key for Rspamd is in place for ARM
+  apt_key: url=http://repo.yunohost.org/debian/yunohost.asc state=present
+  when: ansible_architecture == "armv7l"
+  tags:
+    - dependencies
+
+- name: Add Rspamd repository
+  apt_repository: repo="deb https://rspamd.com/apt-stable/ {{ ansible_distribution_release }} main"
+  when: ansible_architecture != "armv7l"
+  tags:
+    - dependencies
+
+- name: Add yunohost Rspamd repository for ARM
+  apt_repository: repo="deb http://repo.yunohost.org/debian {{ ansible_distribution_release }} stable"
+  when: ansible_architecture == "armv7l"
+  tags:
+    - dependencies
+
+- name: Install Rspamd and Redis
+  apt: pkg={{ item }} state=installed update_cache=yes
+  with_items:
+    - rspamd
+  tags:
+    - dependencies
+
+#- name: Copy DMARC configuration into place
+#  template: src=etc_rspamd_local.d_dmarc.conf.j2 dest=/etc/rspamd/local.d/dmarc.conf owner=root group=root mode="0644"
+#  notify: restart rspamd
+
+#- name: Copy DKIM configuration into place
+#  copy: src=etc_rspamd_override.d_dkim_signing.conf dest=/etc/rspamd/override.d/dkim_signing.conf owner=root group=root mode="0644"
+#  notify: restart rspamd
+
+#- name: Create dkim key directory
+#  file: path=/var/lib/rspamd/dkim state=directory owner=_rspamd group=_rspamd
+
+#- name: Generate DKIM keys
+#  shell: rspamadm dkim_keygen -s default -d {{ item.name }} -k {{ item.name }}.default.key > {{ item.name }}.default.txt
+#  args:
+#    creates: /var/lib/rspamd/dkim/{{ item.name }}.default.key
+#    chdir: /var/lib/rspamd/dkim/
+#  with_items: "{{ mail_virtual_domains }}"
+
-- 
cgit v1.2.3