ansible-role-rspamd

Installs & manages rspamd

Dependencies

Roles

None

Collections

• community.general

Platforms

Supported platforms

• Red Hat Enterprise Linux 8¹
• RockyLinux 8
• OracleLinux 8
• AlmaLinux 8
• Debian 11 (Bullseye)
• Debian 12 (Bookworm)
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS

Note: ¹ : no automated testing is performed on these platforms

Role Variables

defaults/main.yml

# Use redis
rspamd_use_redis: true

# Activate DMARC reporting
rspamd_dmarc_active: true

# Activate DKIM signing
rspamd_dkim_active: true

# Activate grey listing
rspamd_greylist_active: true

# location of dkim config files
rspamd_dkim_path: /var/lib/rspamd/dkim

# dkim selector
rspamd_dkim_selector: dkim

# controller password (create using 'rspamadm pw')
rspamd_controller_password: ''

# List of domains
rspamd_domains: []

# Postfix setting for spamd integration
rspamd_postfix:
  smtpd_milters: 'inet:localhost:11332'
  milter_default_action: accept
  milter_protocol: '6'

defaults/family-Debian.yml

# GPG key for testing package integrity
rspamd_gpgkey_url: https://rspamd.com/apt-stable/gpg.key

# List of packages to install
rspamd_packages:
  - rspamd

# service to start/enable
rspamd_service: rspamd

defaults/family-RedHat.yml

# GPG key for testing package integrity
rspamd_gpgkey_url: https://rspamd.com/rpm-stable/gpg.key

# rspamd_repo_url: https://rspamd.com/rpm-stable/{{ ansible_distribution | lower }}-{{ ansible_distribution_major_version }}/rspamd.repo
rspamd_repo_url: https://rspamd.com/rpm-stable/centos-{{ ansible_distribution_major_version }}/rspamd.repo

# List of packages to install
rspamd_packages:
  - rspamd

# service to start/enable
rspamd_service: rspamd

defaults/family-Suse.yml

# GPG key for testing package integrity
rspamd_gpgkey_url: https://rspamd.com/rpm-stable/gpg.key

# rspamd_repo_url: https://rspamd.com/rpm-stable/{{ ansible_distribution | lower }}-{{ ansible_distribution_major_version }}/rspamd.repo
rspamd_repo_url: https://download.opensuse.org/repositories/server:/mail/{{ ansible_distribution_version }}/server:mail.repo

# List of packages to install
rspamd_packages:
  - rspamd

# service to start/enable
rspamd_service: rspamd

Example Playbook

molecule/default/converge.yml

- name: sample playbook for role 'rspamd'
  hosts: all
  become: 'yes'
  vars:
    molecule_driver: '{{ lookup(''env'', ''MOLECULE_DRIVER_NAME'') }}'
    rspamd_organization: Example Inc
    rspamd_controller_password: $2$hrr3pjpiie499r1e7tb1p4qxm84mqeo9$rkgidupktocmsiog5wnm6z93ui9t8jrqpw8ta4sq8dty6djo5bdb
    rspamd_domains:
      - example.com
      - foo.bar
    dovecot_ssl_key: '{{ openssl_server_key }}'
    dovecot_ssl_chain: '{{ openssl_server_crt }}'
    dovecot_domain: example.com
    postfix_ipv6: false
    postfix_domain: example.com
    postfix_fqdn: host.example.com
    postfix_ssl_key: '{{ openssl_server_key }}'
    postfix_ssl_chain: '{{ openssl_server_crt }}'
  roles:
    - deitkrachten.cron
    - deitkrachten.openssl
    - deitkrachten.postfix
  tasks:
    - name: Include role 'rspamd'
      ansible.builtin.include_role:
        name: rspamd