parent
79efa07285
commit
3e050b45b3
@ -0,0 +1,18 @@ |
||||
|
||||
# |
||||
# Computer Science Club |
||||
# Logging |
||||
# |
||||
|
||||
# Configure TLS |
||||
$DefaultNetstreamDriver gtls |
||||
$DefaultNetstreamDriverCAFile /etc/rsyslog.d/ca.pem |
||||
$DefaultNetstreamDriverCertFile /etc/rsyslog.d/cert.pem |
||||
$DefaultNetstreamDriverKeyFile /etc/rsyslog.d/key.pem |
||||
|
||||
$ActionSendStreamDriverAuthMode x509/name |
||||
$ActionSendStreamDriverPermittedPeer hydrazine.csclub.uwaterloo.ca |
||||
$ActionSendStreamDriverMode 1 # TLS-only |
||||
|
||||
# All logs are sent to the log server(s) |
||||
*.* @@hydrazine.csclub.uwaterloo.ca:10514 |
@ -0,0 +1,7 @@ |
||||
--- |
||||
- hosts: all |
||||
gather_facts: no |
||||
become: yes |
||||
tasks: |
||||
- name: fix ssh_known_hosts permissions |
||||
file: path=/etc/ssh/ssh_known_hosts mode=0644 |
@ -0,0 +1,16 @@ |
||||
--- |
||||
- hosts: new-office |
||||
become: yes |
||||
tasks: |
||||
- name: install rsyslog-gnutls |
||||
package: name=rsyslog-gnutls state=latest |
||||
- name: copy tls keys |
||||
copy: src={{ item.src }} dest={{ item.dest }} mode=0640 owner=root group=syslog |
||||
with_items: |
||||
- { src: '/scratch/syscom/{{ ansible_hostname }}/rsyslog.d/ca.pem', dest: '/etc/rsyslog.d/ca.pem' } |
||||
- { src: '/scratch/syscom/{{ ansible_hostname }}/rsyslog.d/cert.pem', dest: '/etc/rsyslog.d/cert.pem' } |
||||
- { src: '/scratch/syscom/{{ ansible_hostname }}/rsyslog.d/key.pem', dest: '/etc/rsyslog.d/key.pem' } |
||||
- name: copy rsyslog config |
||||
copy: src='files/rsyslog.conf' dest='/etc/rsyslog.d/csclub.conf' mode=0644 |
||||
- name: restart rsyslog |
||||
service: name=rsyslog state=restarted |
@ -0,0 +1,12 @@ |
||||
--- |
||||
- hosts: all |
||||
remote_user: root |
||||
tasks: |
||||
- name: update hosts |
||||
connection: local |
||||
git: repo=~git/public/hosts.git dest=generate-hosts-{{ ansible_hostname }} |
||||
- name: generate hosts file |
||||
connection: local |
||||
shell: generate-hosts-{{ ansible_hostname }}/generate-hosts.py < generate-hosts-{{ ansible_hostname }}/hosts.in > generate-hosts-{{ ansible_hostname }}/hosts |
||||
- name: copy hosts file |
||||
copy: src=generate-hosts-{{ ansible_hostname }}/hosts dest=/etc/hosts backup=yes |
Loading…
Reference in new issue