Scan inbound and outbound via the smarthost only, harden rspamd and Valkey

- tag inbound instead of rejecting, keep virus reject and tempfail when ClamAV fails - score inbound against the first hop before the edge relays - sign and skip GPT only for smarthost mynetworks sources - elect the highest-offset Valkey on full restart, cap memory at 384mb - read a hashed controller password
2026-10-12 22:14:55 +11:00
parent f627902dd6
commit ecede40f7f
14 changed files with 146 additions and 49 deletions
@@ -1,3 +1,3 @@
-password = "{= env.CONTROLLER_PASSWORD =}";
-enable_password = "{= env.CONTROLLER_PASSWORD =}";
+password = "{= env.CONTROLLER_PASSWORD_HASH =}";
+enable_password = "{= env.CONTROLLER_PASSWORD_HASH =}";
 allow_file_and_shm_inputs = false;