Rspamd - Revision history

Ser: configuration of secrets

2026-04-07T11:31:06Z

configuration of secrets

← Older revision		Revision as of 11:31, 7 April 2026
Line 74:		Line 74:

	systemd.services.rspamd.serviceConfig.SupplementaryGroups = [ "maddy" ];		systemd.services.rspamd.serviceConfig.SupplementaryGroups = [ "maddy" ];
			</nowiki>}}

			=== Secrets ===

			Sometimes you need to provide secrets which should not be kept in the public store. In this example we add an API key to GPT module. You need to have the file with a name for example `ai.conf` with content:

			{{file\|/var/spool/keys/ai.conf\|nix\|<nowiki>
			api_key = "your_secret_key";
			</nowiki>}}

			and prepare your GPT configuration - in this example it's only part of it, consult the GPT module documentation.

			{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>
			services.rspamd = {
			overrides = {
			"gpt.conf".text = ''
			enabled = true;
			#api_key = ""; # API KEY IN SECRETS!!!
			.include(try=true; priority=10,duplicate=merge) "/var/spool/keys/ai.conf"
			autolearn = true;
			'';
			};
			};
	</nowiki>}}		</nowiki>}}

2025-09-30T22:11:04Z

explain how to use with Postfox

← Older revision		Revision as of 22:11, 30 September 2025
Line 7:		Line 7:
	{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>		{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>
	services.rspamd.enable = true;		services.rspamd.enable = true;
			</nowiki>}}

			To use Rspamd with Postfix add

			{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>
			services.rspamd.postfix.enable = true;
	</nowiki>}}		</nowiki>}}

2024-05-31T08:09:42Z

Remove unstable notice

← Older revision		Revision as of 08:09, 31 May 2024
Line 73:		Line 73:

	=== Helper script to train rspamd ===		=== Helper script to train rspamd ===

	~~{{note\|This approach is not yet stable and will be available in the upcoming NixOS 24.05 release.}}~~

	The following example enables [https://gitlab.com/onlime/rspamd-trainer rspamd-trainer] as a daemon which will run every 10 minutes to check for mails in the inbox of <code>myuser@example.com</code> which should be used for spam/ham training.		The following example enables [https://gitlab.com/onlime/rspamd-trainer rspamd-trainer] as a daemon which will run every 10 minutes to check for mails in the inbox of <code>myuser@example.com</code> which should be used for spam/ham training.

2024-04-24T19:13:49Z

2024-04-15T22:07:59Z

Bayesian spam training

← Older revision		Revision as of 22:07, 15 April 2024
Line 13:		Line 13:
	=== Bayesian spam training ===		=== Bayesian spam training ===

	To enable bayesian spam training, a [[Redis~~]] backend needs to get setup~~ and ~~configured~~ in Rspamd		To enable bayesian spam training, enable a Redis instance and configure it in Rspamd as a backend

	{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>		{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>
Line 30:		Line 30:
	services.redis.servers.rspamd = {		services.redis.servers.rspamd = {
	enable = true;		enable = true;
			# 0 disables listening to TCP ports and will only use unix sockets. Default
			# unix socket path is /run/redis-${name}/redis.sock thus
			# /run/redis-rspamd/redis.sock here.
	port = 0;		port = 0;
	~~unixSocket = "/run/redis-rspamd/redis.sock";~~
	user = config.services.rspamd.user;		user = config.services.rspamd.user;
	};		};

2023-12-28T13:55:50Z

Add tip on spam training

@@ Line 67: / Line 67: @@
 systemd.services.rspamd.serviceConfig.SupplementaryGroups = [ "maddy" ];
 </nowiki>}}
 [[Category:Mail Server]]

2023-10-14T09:38:45Z

Add note on enable bayesian spam training

← Older revision		Revision as of 09:38, 14 October 2023
Line 10:		Line 10:

	== Configuration ==		== Configuration ==

			=== Bayesian spam training ===

			To enable bayesian spam training, a [[Redis]] backend needs to get setup and configured in Rspamd

			{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>
			services.rspamd = {
			locals = {
			"redis.conf".text = ''
			servers = "${config.services.redis.servers.rspamd.unixSocket}";
			'';
			"classifier-bayes.conf".text = ''
			backend = "redis";
			autolearn = true;
			'';
			};
			};

			services.redis.servers.rspamd = {
			enable = true;
			port = 0;
			unixSocket = "/run/redis-rspamd/redis.sock";
			user = config.services.rspamd.user;
			};
			</nowiki>}}

	=== Whitelist domain ===		=== Whitelist domain ===

2023-08-27T14:47:19Z

← Older revision		Revision as of 14:47, 27 August 2023
Line 35:		Line 35:
	locals."dkim_signing.conf".text = ''		locals."dkim_signing.conf".text = ''
	selector = "default";		selector = "default";
			domain = "example.org";
	path = "/var/lib/maddy/dkim_keys/$domain_$selector.key";		path = "/var/lib/maddy/dkim_keys/$domain_$selector.key";
	'';		'';

2023-08-27T12:13:36Z

Add DKIM key configuration

@@ Line 24: / Line 24: @@
    '';
 };
 </nowiki>}}
 [[Category:Mail Server]]

2023-04-09T22:36:37Z

← Older revision		Revision as of 22:36, 9 April 2023
Line 16:		Line 16:

	{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>		{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>
	rspamd = {		services.rspamd = {
	enable = true;		enable = true;
	overrides."whitelist.conf".text = ''		overrides."whitelist.conf".text = ''