From a3e15cc10582c54ceaa374e2b65904fdf8e38a0f Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Mon, 4 Mar 2024 19:47:09 +0100
Subject: [PATCH] rspamd: migrate redis to unix sockets

---
 modules/mail/default.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/modules/mail/default.nix b/modules/mail/default.nix
index 5c8c988..9bf77ff 100644
--- a/modules/mail/default.nix
+++ b/modules/mail/default.nix
@@ -44,6 +44,7 @@ in
     4190 # sieve
   ];
   users.users.postfix.extraGroups = [ "opendkim" ];
+  users.users.rspamd.extraGroups = [ "redis-rspamd" ];
   environment.etc = {
     "dovecot/sieve-pipe/sa-learn-spam.sh" = {
       text = ''
@@ -287,8 +288,8 @@ in
       locals = {
         "worker-controller.inc".source = config.sops.secrets."rspamd-password".path;
         "redis.conf".text = ''
-          read_servers = "127.0.0.1";
-          write_servers = "127.0.0.1";
+          read_servers = "/run/redis-rspamd/redis.sock";
+          write_servers = "/run/redis-rspamd/redis.sock";
         '';
         # headers in spamassasin style to not break old sieve scripts
         "worker-proxy.inc".text = ''
@@ -298,7 +299,7 @@ in
           use = ["x-spam-level", "x-spam-status", "x-spamd-result", "authentication-results" ];
         '';
         "neural.conf".text = ''
-          servers = "127.0.0.1:6379";
+          servers = "/run/redis-rspamd/redis.sock";
           enabled = true;
         '';
         "neural_group.conf".text = ''
@@ -379,7 +380,6 @@ in
       vmOverCommit = true;
       servers.rspamd = {
         enable = true;
-        port = 6379;
       };
     };
     nginx = {