add RSPAMD_DISABLE_WEB_PASSWORD, closes #330

Author: crimist

README.md

@@ -177,6 +177,7 @@ linux/arm64
 
 * `RSPAMD_ENABLE`: Enable Rspamd service. (default `false`)
 * `RSPAMD_WEB_PASSWORD`: Rspamd web password (default `null`)
+* `RSPAMD_DISABLE_WEB_PASSWORD`: Disable Rspamd web password (default `false`)
 * `RSPAMD_NO_LOCAL_ADDRS`: Disable Rspamd local networks (default `false`)
 * `RSPAMD_SMTPD_MILTERS`: A list of Milter (space or comma as separated) applications for new mail that arrives (default `inet:127.0.0.1:11332`)
 

rootfs/etc/cont-init.d/00-env

@@ -93,6 +93,7 @@ POSTFIX_RELAYHOST_SSL_ENCRYPTION=${POSTFIX_RELAYHOST_SSL_ENCRYPTION:-false}
 
 RSPAMD_ENABLE=${RSPAMD_ENABLE:-false}
 #RSPAMD_WEB_PASSWORD=${RSPAMD_WEB_PASSWORD:-null}
+RSPAMD_DISABLE_WEB_PASSWORD=${RSPAMD_DISABLE_WEB_PASSWORD:-false}
 RSPAMD_NO_LOCAL_ADDRS=${RSPAMD_NO_LOCAL_ADDRS:-false}
 
 DKIM_PRIVATE_KEY=/data/dkim/${ANONADDY_DOMAIN}.private

rootfs/etc/cont-init.d/14-config-rspamd.sh

@@ -88,11 +88,15 @@ group "headers" {
 }
 EOL
 
-if [ -n "$RSPAMD_WEB_PASSWORD" ]; then
+if [ -n "$RSPAMD_WEB_PASSWORD" ] || [ "$RSPAMD_DISABLE_WEB_PASSWORD" = "true" ]; then
   echo "Setting Rspamd worker-controller.inc"
+  SECURE_IP="127.0.0.1/32"
+  if [ "$RSPAMD_DISABLE_WEB_PASSWORD" = "true" ]; then
+    SECURE_IP="0.0.0.0/0"
+  fi
   cat >/etc/rspamd/local.d/worker-controller.inc <<EOL
 bind_socket = "*:11334";
-secure_ip = "127.0.0.1/32";
+secure_ip = "${SECURE_IP}";
 password = "${RSPAMD_WEB_PASSWORD}";
 enable_password = "${RSPAMD_WEB_PASSWORD}";
 EOL