mirror of
https://github.com/YunoHost/yunohost.git
synced 2024-09-03 20:06:10 +02:00
65 lines
1.9 KiB
Bash
Executable file
65 lines
1.9 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
set -e
|
|
|
|
do_pre_regen() {
|
|
pending_dir=$1
|
|
|
|
cd /usr/share/yunohost/conf/rspamd
|
|
|
|
install -D -m 644 metrics.local.conf \
|
|
"${pending_dir}/etc/rspamd/local.d/metrics.conf"
|
|
install -D -m 644 dkim_signing.conf \
|
|
"${pending_dir}/etc/rspamd/local.d/dkim_signing.conf"
|
|
install -D -m 644 rspamd.sieve \
|
|
"${pending_dir}/etc/dovecot/global_script/rspamd.sieve"
|
|
install -D -m 644 redis.conf \
|
|
"${pending_dir}/etc/rspamd/local.d/redis.conf"
|
|
}
|
|
|
|
do_post_regen() {
|
|
|
|
##
|
|
## DKIM key generation
|
|
##
|
|
|
|
# create DKIM directory with proper permission
|
|
mkdir -p /etc/dkim
|
|
chown _rspamd /etc/dkim
|
|
|
|
# create DKIM key for domains
|
|
domain_list="$(yunohost domain list --features mail_in mail_out --output-as json | jq -r ".domains[]" | tr '\n' ' ')"
|
|
for domain in $domain_list; do
|
|
domain_key="/etc/dkim/${domain}.mail.key"
|
|
[ ! -f "$domain_key" ] && {
|
|
# We use a 1024 bit size because nsupdate doesn't seem to be able to
|
|
# handle 2048...
|
|
opendkim-genkey --domain="$domain" \
|
|
--selector=mail --directory=/etc/dkim -b 1024
|
|
mv /etc/dkim/mail.private "$domain_key"
|
|
mv /etc/dkim/mail.txt "/etc/dkim/${domain}.mail.txt"
|
|
}
|
|
done
|
|
|
|
# fix DKIM keys permissions
|
|
chown _rspamd /etc/dkim/*.mail.key
|
|
chmod 400 /etc/dkim/*.mail.key
|
|
|
|
[ ! -e /var/log/rspamd ] || chown -R _rspamd:_rspamd /var/log/rspamd
|
|
|
|
regen_conf_files=$1
|
|
[ -z "$regen_conf_files" ] && exit 0
|
|
|
|
# compile sieve script
|
|
[[ "$regen_conf_files" =~ rspamd\.sieve ]] && {
|
|
sievec /etc/dovecot/global_script/rspamd.sieve
|
|
chown -R vmail:mail /etc/dovecot/global_script
|
|
systemctl restart dovecot
|
|
}
|
|
|
|
# Restart rspamd due to the upgrade
|
|
# https://rspamd.com/announce/2016/08/01/rspamd-1.3.1.html
|
|
systemctl -q restart rspamd.service
|
|
}
|
|
|
|
do_$1_regen ${@:2}
|