prole/infrastructure/roles/rsyslog/tasks/server.yml
2026-01-19 01:41:45 -08:00

36 lines
789 B
YAML

- name: Ensure syslog system user exists (Debian sometimes doesn't create it in minimal images)
user:
name: syslog
system: true
shell: /usr/sbin/nologin
create_home: false
ignore_errors: false
- name: Ensure syslog is in prole group (so it can write to /prole/logs on NFS)
user:
name: syslog
groups: prole
append: true
- name: Install rsyslog
apt:
name: rsyslog
state: present
- name: Enable rsyslog server config
template:
src: 10-server.conf.j2
dest: /etc/rsyslog.d/10-server.conf
owner: root
group: root
mode: '0644'
notify: restart rsyslog
- name: Ensure log root exists and is group-writable via prole (setgid)
file:
path: /prole/logs
state: directory
owner: root
group: prole
mode: '2775'