- name: Ensure syslog system user exists (Debian sometimes doesn't create it in minimal images)
  user:
    name: syslog
    system: true
    shell: /usr/sbin/nologin
    create_home: false
  ignore_errors: false

- name: Ensure syslog is in prole group (so it can write to /prole/logs on NFS)
  user:
    name: syslog
    groups: prole
    append: true

- name: Install rsyslog
  apt:
    name: rsyslog
    state: present

- name: Enable rsyslog server config
  template:
    src: 10-server.conf.j2
    dest: /etc/rsyslog.d/10-server.conf
    owner: root
    group: root
    mode: '0644'
  notify: restart rsyslog

- name: Ensure log root exists and is group-writable via prole (setgid)
  file:
    path: /prole/logs
    state: directory
    owner: root
    group: prole
    mode: '2775'