Fix edge postfix gateway config for unkin.net #552

Merged

benvin merged 5 commits from benvin/mail-edge-role into develop 2026-10-13 21:42:39 +11:00

Conversation 1 Commits 5 Files Changed 7

+187 -36

5 Commits

Author	SHA1	Message	Date
unkin-agent	89efe4f413	Relay main.unkin.net through the mail edge gateways	2026-10-13 21:24:23 +11:00
unkin-agent	85a9f47025	Add edge PTR names to the mail gateway vault certs	2026-10-13 21:18:54 +11:00
unkin-agent	9484e8b77b	Add local rspamd and redis to the mail edge gateway (#553) ... Edge gateways need cheap deterministic in-session filtering behind the postfix milter, with no AI and no ClamAV on 1GB VMs. - add a signature-checked rspamd yum repo via artifactapi, enabled for the gateway role - add profiles::rspamd::edge managing the package and local.d files from hiera - fetch rule files without blocking the service: empty placeholder, swap only on a successful changed fetch, then reload - run a self-scanning milter proxy on 11332; reject at 13, header at 6, no greylisting, subject rewrite or gpt - add a local 128MB redis for bayes autolearn; load SpamAssassin rules from rspamd-rules - bypass rspamd for mail relayed out by the smarthost Stacked on #552; requires terraform-artifactapi #63 applied first. Reviewed-on: #553 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>	2026-10-13 21:14:16 +11:00
unkin-agent	a7c2b40b72	Clarify postscreen dnswl bypass threshold comment	2026-10-13 20:35:59 +11:00
unkin-agent	bca6dce407	Fix edge postfix gateway config for unkin.net	2026-10-12 22:36:08 +11:00