---
- hosts: new-office
  become: yes
  tasks:
     - name: install rsyslog-gnutls
       package: name=rsyslog-gnutls state=latest
     - name: copy tls keys
       copy: src={{ item.src }} dest={{ item.dest }} mode=0640 owner=root group=syslog
       with_items:
         - { src: '/scratch/syscom/{{ ansible_hostname }}/rsyslog.d/ca.pem', dest: '/etc/rsyslog.d/ca.pem' }
         - { src: '/scratch/syscom/{{ ansible_hostname }}/rsyslog.d/cert.pem', dest: '/etc/rsyslog.d/cert.pem' }
         - { src: '/scratch/syscom/{{ ansible_hostname }}/rsyslog.d/key.pem', dest: '/etc/rsyslog.d/key.pem' }
     - name: copy rsyslog config
       copy: src='files/rsyslog.conf' dest='/etc/rsyslog.d/csclub.conf' mode=0644
     - name: restart rsyslog
       service: name=rsyslog state=restarted