645 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Jeltz	d9fe57481a	Add elastic_common role for Elastic repository	2021-03-03 21:45:17 +01:00
Jeltz	bd5b2e1fbe	Add apt_common role for third party repositories	2021-03-03 21:44:37 +01:00
Jeltz	84b3407b34	Add elastic.adm.auro.re	2021-03-03 21:43:23 +01:00
Jeltz	7ada2fe769	WIP: add a role for ulogd2	2021-03-03 03:02:53 +01:00
Jeltz	6525508401	Forward journald logs to rsyslog	2021-03-02 01:24:53 +01:00
Jeltz	77a5fdac6f	Remove some duplicate logs from syslog.log	2021-03-02 00:56:28 +01:00
Jeltz	5d319cf167	Define rsyslog_{inputs,outputs} for all hosts	2021-03-02 00:52:38 +01:00
Jeltz	529550f594	Don't use 'imjournal' ('imuxsock' is already used) ... I still don't understand why it increased the size of the firewall logs by a factor of 5 to 10, but we don't really need structured logs from systemd-journald and the author seems to discourage it's use, so I will not investigate further.	2021-03-02 00:46:16 +01:00
Jeltz	ee041b9ead	Use 'simple' instead of 'oneshot' (rotate service)	2021-03-02 00:14:25 +01:00
Jeltz	1f6bfeee23	Fix broadcast address on routeur-aurore	2021-03-01 20:04:38 +01:00
Jeltz	0f55b90de9	Remove 10.129.0.1 gateway on routeur-aurore-*	2021-03-01 20:04:02 +01:00
Jeltz	b13b22da05	Add ignored destinations for firewall logs	2021-03-01 19:39:11 +01:00
Jeltz	8f815a30c5	Remove useless date (already added by journald)	2021-03-01 17:47:12 +01:00
Jeltz	acd5721a5b	Fix typos in rotate-remote-logs.service.j2	2021-03-01 17:45:17 +01:00
Jeltz	9547868c7d	Send nginx logs to local syslog	2021-03-01 17:40:05 +01:00
Jeltz	cdb9f88614	Do not rate limit collection of journald logs	2021-03-01 16:31:52 +01:00
Jeltz	9252249d18	Use 'true' instead of 'yes'	2021-03-01 04:15:54 +01:00
Jeltz	e4b58c0bf4	Fix typo in 20-collector.conf.j2	2021-03-01 04:07:17 +01:00
Jeltz	c65b3f090b	Compress and delete old remote logs ... Logrotate is not used because I didn't found an easy way to configure it to handle the compression/deletion of log files already rotated by rsyslog (it is probably possible, but I found the script to be easier).	2021-03-01 03:58:58 +01:00
Jeltz	f7183095c1	Add explicit permissions for directories	2021-03-01 02:26:22 +01:00
Jeltz	ba8b4e8c29	Fix the ordering of rsyslog.d files ... A call to sendLogsToRemote for logs received through RELP/UDP has been added (to send them to Logstash/Redis/…), so common.conf's prefix must be lower than collector.conf's. Note: future "third-party" config files will also call sendLogsToRemote and thus will also have to use a prefix higher than 10.	2021-03-01 02:15:28 +01:00
Jeltz	02a8cb84df	Add log.yml playbook	2021-03-01 01:29:16 +01:00
Jeltz	4a43bf8a16	Add logging configuration for log.adm.auro.re	2021-03-01 01:28:30 +01:00
Jeltz	7fd1b5ff5d	Add rsyslog_collector role	2021-03-01 01:27:56 +01:00
Jeltz	6263c31785	Add rsyslog_common role	2021-03-01 01:27:30 +01:00
Jeltz	89181c6cd6	Add log.adm.auro.re to inventory	2021-02-28 22:59:36 +01:00
ynerant	52f73288b4	Merge pull request '[certbot] Fix certificates for auro.re' (#26) from certbot_aurore into master ... Reviewed-on: Aurore/ansible#26	2021-02-24 13:59:36 +01:00
Yohann D'ANELLO	ba6da939ab	[certbot] Fix certificates for auro.re ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-24 13:57:59 +01:00
ynerant	ce821cbb1a	Merge pull request '[nginx/certbot] Clone roles from Crans' (#25) from new_nginx into master ... Reviewed-on: Aurore/ansible#25	2021-02-24 11:48:02 +01:00
Yohann D'ANELLO	ae151321db	[nginx/certbot] Clone roles from Crans ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-24 11:46:37 +01:00
otthorn	f49194b423	Merge pull request 'Global_monitoring' (#24) from Global_monitoring into master ... Reviewed-on: Aurore/ansible#24	2021-02-18 18:03:04 +01:00
pz2891	d7d0676f5e	Remove .save file; remove fo fleming prometheus	2021-02-18 17:53:15 +01:00
pz2891	74c30b81df	Merge branch 'master' into Global_monitoring	2021-02-17 19:41:06 +01:00
pz2891	b278b02bc2	Remove percentage sign for load alert	2021-02-17 19:37:33 +01:00
pz2891	0b90c9944b	Fix CI warning from last commit	2021-02-17 18:15:31 +01:00
pz2891	61001e09f5	Add alert for load usage	2021-02-17 18:08:39 +01:00
pz2891	a5b4deacee	Rename federate role; update of alerts of federate prometheus; update of configuration of federate prometheus	2021-02-17 17:42:24 +01:00
otthorn	3eb9536c7b	Merge pull request 'Update the documention for the docker image used for ansible-lint' (#23) from fix_docker_lint_doc into master ... Reviewed-on: Aurore/ansible#23	2021-02-16 19:01:09 +01:00
Solal Nathan	c45d12cd6a	📝 use the full command	2021-02-16 19:00:25 +01:00
Solal Nathan	83fd1b03e7	🚚 correctly name Dockerfile	2021-02-16 18:44:18 +01:00
Solal Nathan	4dd75d1180	📝 Update the docker image doc for ansible-lint	2021-02-16 18:40:48 +01:00
Solal Nathan	06d0bd56ae	📝 Update the docker image doc for ansible-lint	2021-02-16 18:34:57 +01:00
otthorn	bb026921e1	Merge pull request 'Fix linter issues and add CI badge' (#22) from fix_linter_issues into master ... Reviewed-on: Aurore/ansible#22	2021-02-16 18:23:29 +01:00
Solal Nathan	f39ade227a	📝 add CI badge	2021-02-16 18:22:19 +01:00
Solal Nathan	d5b77f83d3	Merge branch 'fix_linter_issues' of ssh://gitea.auro.re:2222/Aurore/ansible into fix_linter_issues	2021-02-16 18:19:17 +01:00
Solal Nathan	54aec3638f	🚨 fix var-spacing	2021-02-16 18:18:50 +01:00
Solal Nathan	902d219de3	🚨 fix risky-file-permission	2021-02-16 18:18:50 +01:00
Solal Nathan	1fe440aabe	🚨 fix empty-string-compare	2021-02-16 18:18:50 +01:00
Solal Nathan	008fb803d9	🚨 fix risky-file-permission	2021-02-16 18:18:50 +01:00
Solal Nathan	def64380e6	👷 do not ansible-lint the vault and fix useless rules	2021-02-16 18:18:50 +01:00