From 75f5cb200116b95b3f82b8c1a94e7b0d91f9e0f2 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Mon, 23 Feb 2026 20:29:32 +0000
Subject: [PATCH] [ci skip] mailserver: enable Rspamd, disable OpenDKIM

Enable Rspamd for spam filtering and DKIM signing, replacing
OpenDKIM. Rspamd reads existing DKIM keys from the same mount path.
---
 stacks/platform/modules/mailserver/main.tf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/stacks/platform/modules/mailserver/main.tf b/stacks/platform/modules/mailserver/main.tf
index f2926610..8fd68bd6 100644
--- a/stacks/platform/modules/mailserver/main.tf
+++ b/stacks/platform/modules/mailserver/main.tf
@@ -46,6 +46,10 @@ resource "kubernetes_config_map" "mailserver_env_config" {
     ENABLE_POSTGREY                        = "0"
     ENABLE_SASLAUTHD                       = "0"
     ENABLE_SPAMASSASSIN                    = "0"
+    ENABLE_RSPAMD                          = "1"
+    ENABLE_OPENDKIM                        = "0"
+    ENABLE_OPENDMARC                       = "0"
+    RSPAMD_LEARN                           = "1"
     ENABLE_SRS                             = "1"
     FETCHMAIL_POLL                         = "120"
     ONE_DIR                                = "1"