bundles/rspamd: introduce, add to htz.ex42-1048908

bundles/rspamd/metadata.py

@@ -1,8 +1,40 @@
 # WIP
 defaults = {
     'apt': {
+        'repos': {
+            'rspamd': {
+                'items': {
+                    'deb [arch=amd64] http://rspamd.com/apt-stable/ {os_release} main',
+                },
+            },
+        },
         'packages': {
+            'clamav': {},
+            'clamav-daemon': {},
+            'clamav-freshclam': {},
+            'clamav-unofficial-sigs': {},
             'rspamd': {},
         },
     },
+    'cron': {
+        'clamav-unofficial-sigs': f'{node.magic_number%60} */4 * * *    clamav    /usr/sbin/clamav-unofficial-sigs >/dev/null',
+    },
 }
+
+
+# Nodes managed by us should always be able to send mail to all other
+# servers.
+@metadata_reactor
+def populate_permitted_ips_list_with_ips_from_repo(metadata):
+    ips = set()
+
+    for rnode in repo.nodes:
+        for ip in repo.libs.tools.resolve_identifier(repo, rnode.name):
+            if not ip.is_private:
+                ips.add(str(ip))
+
+    return {
+        'rspamd': {
+            'ignore_spam_check_for_ips': ips,
+        },
+    }