From eeae972d8b80ec11082aacc2385abcd1fd543f82 Mon Sep 17 00:00:00 2001
From: boban <boban.blaskovic@gmail.com>
Date: Wed, 29 Apr 2026 19:28:54 +0200
Subject: [PATCH] Feat: RSpamd local_addrs (Loopback) automatisch in
 ensure_system setzen

---
 scripts/update.sh | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/scripts/update.sh b/scripts/update.sh
index 75509c5..0ed7104 100644
--- a/scripts/update.sh
+++ b/scripts/update.sh
@@ -224,6 +224,15 @@ ensure_system(){
     [[ -f "$f" ]] || continue
     _sudoers_add "$f" 'www-data ALL=(root) NOPASSWD: /usr/local/sbin/mailwolt-backup'
   done
+  # RSpamd: Loopback als lokale Adresse eintragen (verhindert 127.0.0.1-Einträge in History)
+  local rspamd_opts="/etc/rspamd/local.d/options.inc"
+  if [[ -d /etc/rspamd/local.d ]] && ! grep -q "127.0.0.1" "${rspamd_opts}" 2>/dev/null; then
+    printf 'local_addrs = [127.0.0.1, ::1, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, fd00::/8, 169.254.0.0/16, fe80::/10];\n' \
+      > "${rspamd_opts}"
+    systemctl is-active --quiet rspamd && systemctl reload rspamd || true
+    echo "[✓] RSpamd: local_addrs mit Loopback gesetzt."
+  fi
+
   # Laravel Scheduler cron (schedule:run muss jede Minute laufen)
   local cron_file="/etc/cron.d/mailwolt"
   local cron_line="* * * * * www-data php ${APP_DIR}/artisan schedule:run >> /dev/null 2>&1"