Sunil Mohan Adapa 61ff15a04f
*: Use action_utils.run instead of subprocess.run
- This is to capture stdout and stderr and transmit that from privileged daemon
back to the service to be displayed in HTML.

Tests:

- Unit tests and code checks pass.

- Some of the modified actions work as expected.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: Veiko Aasa <veiko17@disroot.org>
2025-09-29 16:58:53 +03:00

66 lines
2.0 KiB
Python

# SPDX-License-Identifier: AGPL-3.0-or-later
"""
Configures rspamd to handle incoming and outgoing spam.
See: http://www.postfix.org/MILTER_README.html
See: https://rspamd.com/doc/configuration/ucl.html
For testing DKIM signatures: https://www.mail-tester.com/
"""
import pathlib
import re
from plinth import action_utils
from plinth.actions import privileged
from plinth.modules.email import postfix
_milter_config = {
'smtpd_milters': 'inet:127.0.0.1:11332',
'non_smtpd_milters': 'inet:127.0.0.1:11332',
}
@privileged
def setup_spam():
"""Compile sieve filters and set rspamd/postfix configuration."""
_compile_sieve()
_setup_rspamd()
postfix.set_config(_milter_config)
def _compile_sieve():
"""Compile all .sieve script to binary format for performance."""
sieve_dirs = [
'/etc/dovecot/freedombox-sieve-after/', '/etc/dovecot/freedombox-sieve'
]
for sieve_dir in sieve_dirs:
action_utils.run(['sievec', sieve_dir], check=True)
def _setup_rspamd():
"""Adjust configuration to include FreedomBox configuration files."""
configs = [('milter_headers.conf', 'freedombox-milter-headers.conf'),
('redis.conf', 'freedombox-redis.conf'),
('logging.inc', 'freedombox-logging.inc'),
('dkim_signing.conf', 'freedombox-dkim-signing.conf')]
base_path = pathlib.Path('/etc/rspamd/local.d')
for orig_path, include_path in configs:
_setup_local_include(base_path / orig_path, base_path / include_path)
def _setup_local_include(orig_path, include_path):
"""Adjust configuration to include a FreedomBox configuration file."""
lines = []
if orig_path.exists():
lines = orig_path.read_text().splitlines()
file_name = include_path.name
for line in lines:
if re.match(rf'\s*.include\(.*\)\s+".*/{file_name}"', line):
return
lines.append('.include(priority=2,duplicate=merge) '
f'"$LOCAL_CONFDIR/local.d/{file_name}"\n')
orig_path.write_text('\n'.join(lines))