update some parts of rspamd and other stuff

defaults/main.yml

@@ -1,3 +1,9 @@
 ---
 # should we do a version check? (recomended)
 submodules_versioncheck: false
+
+# rspamd config
+rspamd__config_path: '/etc/rspamd/local.d/'
+rspamd__admin_password: 'ChangeMePl3ase'
+rspamd__redis_server: '127.0.0.1'
+rspamd__multimap_conf_file: 'templates/multimap.conf.j2'

files/classifier-bayes.conf

@@ -0,0 +1 @@
+autolearn = true;

files/logging.inc

@@ -0,0 +1,2 @@
+type = "syslog";
+level = "warning";

files/milter_headers.conf

@@ -0,0 +1,2 @@
+use = ["x-spamd-bar", "x-spam-level", "authentication-results"];
+authenticated_headers = ["authentication-results"];

files/multimap.conf

@@ -0,0 +1,27 @@
+WHITELIST_IP {
+    type = "ip";
+    map = "$CONFDIR/local.d/whitelist_ip.map";
+    description = "Local ip whitelist";
+    action = "accept";
+}
+
+WHITELIST_FROM {
+        type = "from";
+        map = "$CONFDIR/local.d/whitelist_from.map";
+        description = "Local from whitelist";
+        action = "accept";
+}
+
+BLACKLIST_IP {
+        type = "ip";
+        map = "$CONFDIR/local.d/blacklist_ip.map";
+        description = "Local ip blacklist";
+        action = "reject";
+}
+
+BLACKLIST_FROM {
+        type = "from";
+        map = "$CONFDIR/local.d/blacklist_from.map";
+        description = "Local from blacklist";
+        action = "reject";
+}

tasks/configure.yml

@@ -0,0 +1,49 @@
+---
+- name: Einstellung des Worker controllers
+  become: true
+  ansible.builtin.template:
+    src: templates/worker-controller.inc.j2
+    dest: "{{ rspamd__config_path }}worker-controller.inc"
+    mode: '0640'
+
+- name: Einstellung des logging
+  become: true
+  ansible.builtin.copy:
+    src: files/logging.inc
+    dest: "{{ rspamd__config_path }}logging.inc"
+    mode: '0640'
+
+- name: milter_headers.conf
+  become: true
+  ansible.builtin.copy:
+    src: files/milter_headers.conf
+    dest: "{{ rspamd__config_path }}milter_headers.conf"
+    mode: '0640'
+
+- name: milter_headers.conf
+  become: true
+  ansible.builtin.copy:
+    src: files/classifier-bayes.conf
+    dest: "{{ rspamd__config_path }}classifier-bayes.conf"
+    mode: '0640'
+
+- name: Einstellug der redis.conf
+  become: true
+  ansible.builtin.template:
+    src: templates/redis.conf.j2
+    dest: "{{ rspamd__config_path }}redis.conf"
+    mode: '0640'
+
+- name: classifier-bayes.conf
+  become: true
+  ansible.builtin.copy:
+    src: files/classifier-bayes.conf
+    dest: "{{ rspamd__config_path }}classifier-bayes.conf"
+    mode: '0640'
+
+- name: Einstellug der eignene black/whitelist
+  become: true
+  ansible.builtin.copy:
+    src: "{{ rspamd__multimap_conf_file }}"
+    dest: "{{ rspamd__config_path }}multimap.conf"
+    mode: '0640'

tasks/main.yml

@@ -5,3 +5,6 @@
 - name: add apt repos and install rspamd
   include_tasks: packages.yml
   when: ansible_os_family == 'Debian'
+
+- name: configure rspamd
+  include_tasks: configure.yml

templates/redis.conf.j2

@@ -0,0 +1 @@
+servers = "{{ rspamd__redis_server }}"

templates/worker-controller.inc.j2

@@ -0,0 +1 @@
+password = "{{ _rspamd__admin_password }}"

vars/main.yml

@@ -1,4 +1,6 @@
 ---
 # versionscheck
-playbook_version_number: 02   # should be a integer
+playbook_version_number: 3   # should be a integer
 playbook_version_path: 'do1jlr.rspamd.version'
+
+_rspamd__admin_password: "{{ rspamd__admin_password | password_hash('bcrypt') }}"