blob: 2a773885cab8506af25be22a407b7e15e926f122 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
- name: install rsyslog
dnf:
name: '{{ rsyslog_packages }}'
state: present
- name: request TLS certificate
include_role:
name: getcert_request
vars:
certificate_service: syslog
certificate_path: '{{ rsyslog_certificate_path }}'
certificate_key_path: '{{ rsyslog_certificate_key_path }}'
certificate_hook: systemctl restart rsyslog
- name: generate config file
template:
src: etc/rsyslog.conf.j2
dest: /etc/rsyslog.conf
notify: restart rsyslog
- name: create syslog-gzip systemd timer
include_role:
name: systemd_timer
vars:
timer_name: syslog-gzip
timer_description: Compress old syslog files
timer_after: nss-user-lookup.target
timer_on_calendar: '{{ rsyslog_gzip_on_calendar }}'
timer_user: '{{ rsyslog_owner }}'
timer_group: '{{ rsyslog_group }}'
timer_exec: find {{ rsyslog_storage_dir }} -type f -mtime +{{ rsyslog_gzip_days_ago }} -not -name '*.gz' -exec gzip {} ;
- name: create syslog-update-today-symlink timer
include_role:
name: systemd_timer
vars:
timer_name: syslog-update-today-symlink
timer_description: Update today symlink in syslog dir
timer_after: nss-user-lookup.target
timer_on_calendar: daily
timer_user: '{{ rsyslog_owner }}'
timer_group: '{{ rsyslog_group }}'
timer_shell: yes
timer_exec: ln -sfT "$(date +%Y/%m/%d)" {{ rsyslog_storage_dir }}/today
- name: create remote log directory
file:
path: '{{ rsyslog_storage_dir }}'
state: directory
- name: create today symlink
systemd:
name: syslog-update-today-symlink.service
state: started
changed_when: no
- name: enable rsyslog
systemd:
name: rsyslog
enabled: yes
state: started
- name: open firewall ports
firewalld:
port: '{{ item }}'
permanent: yes
immediate: yes
state: enabled
loop:
- '{{ rsyslog_port }}/tcp'
- '{{ rsyslog_port }}/udp'
- '{{ rsyslog_relp_port }}/tcp'
- '{{ rsyslog_relp_tls_port }}/tcp'
tags: firewalld
|
