Initial commit

tasks/main.yml

@@ -0,0 +1,15 @@
+- name: Copy rspamd configs
+  loop:
+        - 'options.inc'
+        - 'milter_headers.conf'
+        - 'dmarc.conf'
+  template:
+        src: '{{ item }}'
+        dest: '/etc/rspamd/local.d/{{ item }}'
+        follow: yes
+        owner: root
+        group: root
+        mode: 730
+  tags:
+        - rspamd
+  notify: Run service actions

templates/dmarc.conf

@@ -0,0 +1,4 @@
+actions = {
+	quarantine = "add_header";
+	reject = "reject";
+}

templates/milter_headers.conf

@@ -0,0 +1,27 @@
+extended_spam_headers = true;
+authenticated_headers = ["authentication-results"];
+spf_symbols {
+    pass = "R_SPF_ALLOW";
+    fail = "R_SPF_FAIL";
+    softfail = "R_SPF_SOFTFAIL";
+    neutral = "R_SPF_NEUTRAL";
+    temperror = "R_SPF_DNSFAIL";
+    none = "R_SPF_NA";
+    permerror = "R_SPF_PERMFAIL";
+  }
+  dkim_symbols {
+    pass = "R_DKIM_ALLOW";
+    fail = "R_DKIM_REJECT";
+    temperror = "R_DKIM_TEMPFAIL";
+    none = "R_DKIM_NA";
+    permerror = "R_DKIM_PERMFAIL";
+  }
+  dmarc_symbols {
+    pass = "DMARC_POLICY_ALLOW";
+    permerror = "DMARC_BAD_POLICY";
+    temperror = "DMARC_DNSFAIL";
+    none = "DMARC_NA";
+    reject = "DMARC_POLICY_REJECT";
+    softfail = "DMARC_POLICY_SOFTFAIL";
+    quarantine = "DMARC_POLICY_QUARANTINE";
+  }

templates/options.inc

@@ -0,0 +1 @@
+filters = "chartable,dkim,spf,dmarc,milter_headers,phishing";