evolinux-base: use separate default config file for rsyslog
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2625|6|2619|7|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/376//ansiblelint">Evolix » ansible-roles » unstable #376</a>
gitea/ansible-roles/pipeline/head This commit looks good

This commit is contained in:
Brice Waegeneire 2023-10-18 15:09:36 +02:00
parent 3b3b130248
commit 679e170dce
4 changed files with 17 additions and 125 deletions

View file

@ -56,6 +56,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
### Changed
* evolinux-base: use separate default config file for rsyslog
* all: change syntax "become: [yes,no]" → "become: [true,false]"
* all: change syntax "force: [yes,no]" → "force: [true,false]"
* elasticsearch: improve networking configuration

View file

@ -1,122 +0,0 @@
# Syslog for Pack Evolix serveur - Debian Squeeze
#################
#### MODULES ####
#################
$ModLoad imuxsock # provides support for local system logging
$ModLoad imklog # provides kernel logging support (previously done by rklogd)
#$ModLoad immark # provides --MARK-- message capability
# provides UDP syslog reception
#$ModLoad imudp
#$UDPServerRun 514
# provides TCP syslog reception
#$ModLoad imtcp
#$InputTCPServerRun 514
###########################
#### GLOBAL DIRECTIVES ####
###########################
#
# Use traditional timestamp format.
# To enable high precision timestamps, comment out the following line.
#
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
#
# Set the default permissions for all log files.
#
$FileOwner root
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
#
# Include all config files in /etc/rsyslog.d/
#
$IncludeConfig /etc/rsyslog.d/*.conf
###############
#### RULES ####
###############
#
# First some standard log files. Log by facility.
#
auth,authpriv.* /var/log/auth.log
*.*;auth,authpriv.none;cron,mail,local4,local5.none -/var/log/syslog
cron.* /var/log/cron.log
daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
lpr.* -/var/log/lpr.log
mail.* -/var/log/mail.log
user.* -/var/log/user.log
uucp.* /var/log/uucp.log
news.* /var/log/news.log
local4.* -/var/log/openldap.log
local1.* /var/log/sympa.log
local0.* /var/log/postgresql.log
local7.* -/var/log/dhcp.log
local5.* -/var/log/haproxy.log
#
# Logging for the mail system. Split it up so that
# it is easy to write scripts to parse these files.
#
#mail.info -/var/log/mail.info
#mail.warn -/var/log/mail.warn
#mail.err /var/log/mail.err
#
# Logging for INN news system.
#
#news.crit /var/log/news/news.crit
#news.err /var/log/news/news.err
#news.notice -/var/log/news/news.notice
#
# Some "catch-all" log files.
#
#*.=debug;\
# auth,authpriv.none;\
# news.none;mail.none -/var/log/debug
#*.=info;*.=notice;*.=warn;\
# auth,authpriv.none;\
# cron,daemon.none;\
# mail,news.none -/var/log/messages
#
# Emergencies are sent to everybody logged in.
#
*.emerg *
#
# I like to have messages displayed on the console, but only on a virtual
# console I usually leave idle.
#
#daemon,mail.*;\
# news.=crit;news.=err;news.=notice;\
# *.=debug;*.=info;\
# *.=notice;*.=warn /dev/tty8
# The named pipe /dev/xconsole is for the `xconsole' utility. To use it,
# you must invoke `xconsole' with the `-file' option:
#
# $ xconsole -file /dev/xconsole [...]
#
# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
# busy site..
#
#daemon.*;mail.*;\
# news.err;\
# *.=debug;*.=info;\
# *.=notice;*.=warn |/dev/xconsole

View file

@ -0,0 +1,13 @@
# RSyslog for Pack Evolix serveur - Debian Bookworm
daemon.* action(type="omfile" file="/var/log/daemon.log")
lpr.* action(type="omfile" file="/var/log/lpr.log")
news.* action(type="omfile" file="/var/log/news.log")
uucp.* action(type="omfile" file="/var/log/uucp.log")
local0.* action(type="omfile" file="/var/log/postgresql.log")
local1.* action(type="omfile" file="/var/log/sympa.log")
# To be explicit we specify “sync="off"” even though it's the default
local4.* action(type="omfile" sync="off" file="/var/log/openldap.log")
local5.* action(type="omfile" sync="off" file="/var/log/haproxy.log")
local7.* action(type="omfile" file="/var/log/dhcp.log")

View file

@ -3,10 +3,10 @@
# TODO: voir comment faire des backups initiaux des fichiers
# RSyslog
- name: Copy rsyslog.conf
- name: Copy rsyslog evolinux defaut conf
ansible.builtin.copy:
src: logs/rsyslog.conf
dest: /etc/rsyslog.conf
src: logs/rsyslog.d/10-evolinux-default.conf
dest: /etc/rsyslog.d/10-evolinux-default.conf
mode: "0644"
notify: restart rsyslog
when: evolinux_logs_rsyslog_conf | bool