diff --git a/log.yml b/log.yml index 8c8fc15..fb8db3d 100644 --- a/log.yml +++ b/log.yml @@ -2,4 +2,8 @@ - hosts: log.adm.auro.re roles: - rsyslog_collector + +- hosts: all + roles: + - rsyslog_common ... diff --git a/roles/logrotate/handlers/main.yml b/roles/logrotate/handlers/main.yml index a58c62e..bd56c18 100644 --- a/roles/logrotate/handlers/main.yml +++ b/roles/logrotate/handlers/main.yml @@ -1,5 +1,6 @@ --- -- name: reload logrotate - service: - name: logrotate +- name: Reload logrotate + systemd: + name: logrotate.service state: reloaded +... diff --git a/roles/logrotate/tasks/main.yml b/roles/logrotate/tasks/main.yml index e76b591..2ccfaa8 100644 --- a/roles/logrotate/tasks/main.yml +++ b/roles/logrotate/tasks/main.yml @@ -1,29 +1,28 @@ --- -# Install and configure logrotate - -# Install the apt package - name: Install logrotate apt: - name: - - logrotate + name: logrotate + state: present -# Copy the configuration and reload the service if it has changed -- name: Configure logrotate - template: - src: logrotate.d/rsyslog.j2 - dest: /etc/logrotate.d/rsyslog +- name: Create rsyslog configuration directory + file: + path: /etc/rsyslog.d owner: root group: root - mode: "0644" - notify: reload logrotate + mode: u=rwx,g=rx,o=rx + +- name: Configure logrotate + template: + src: logrotate.conf + dest: /etc/logrotate.conf + owner: root + group: root + mode: u=rwx,g=r,o=r + notify: Reload logrotate -# Make sure the service is enabled and started - name: Enable logrotate service - service: - name: logrotate + systemd: + name: logrotate.service enabled: true state: started - -# Enforce new logrotate rules now -- name: Run logrotate now - command: /usr/sbin/logrotate -f /etc/logrotate.d/rsyslog +... diff --git a/roles/logrotate/templates/logrotate.conf b/roles/logrotate/templates/logrotate.conf new file mode 100644 index 0000000..7e65378 --- /dev/null +++ b/roles/logrotate/templates/logrotate.conf @@ -0,0 +1,7 @@ +{{ ansible_managed | comment }} + +weekly +rotate 4 +create + +include /etc/logrotate.d diff --git a/roles/logrotate/templates/logrotate.d/rsyslog.j2 b/roles/logrotate/templates/logrotate.d/rsyslog.j2 deleted file mode 100644 index f47e725..0000000 --- a/roles/logrotate/templates/logrotate.d/rsyslog.j2 +++ /dev/null @@ -1,39 +0,0 @@ -# {{ ansible_managed }} - -/var/log/syslog -{ - rotate 7 - daily - missingok - notifempty - delaycompress - compress - postrotate - /usr/lib/rsyslog/rsyslog-rotate - endscript -} - -/var/log/mail.info -/var/log/mail.warn -/var/log/mail.err -/var/log/mail.log -/var/log/daemon.log -/var/log/kern.log -/var/log/auth.log -/var/log/user.log -/var/log/lpr.log -/var/log/cron.log -/var/log/debug -/var/log/messages -{ - rotate 90 - daily - missingok - notifempty - compress - delaycompress - sharedscripts - postrotate - /usr/lib/rsyslog/rsyslog-rotate - endscript -} diff --git a/roles/rsyslog_common/meta/main.yml b/roles/rsyslog_common/meta/main.yml new file mode 100644 index 0000000..edb558f --- /dev/null +++ b/roles/rsyslog_common/meta/main.yml @@ -0,0 +1,4 @@ +--- +dependencies: + - role: logrotate +... diff --git a/roles/rsyslog_common/tasks/main.yml b/roles/rsyslog_common/tasks/main.yml index 030fd10..6ca28d1 100644 --- a/roles/rsyslog_common/tasks/main.yml +++ b/roles/rsyslog_common/tasks/main.yml @@ -51,6 +51,16 @@ mode: u=rw,g=r,o=r notify: Restart systemd-journald +- name: Deploy logrotate configuration + become: true + template: + src: logrotate.j2 + dest: /etc/logrotate.d/rsyslog + owner: root + group: root + mode: u=rw,g=r,o=r + notify: Reload logrotate + - name: Enable rsyslog service become: true systemd: diff --git a/roles/rsyslog_common/templates/forward-syslog.conf.j2 b/roles/rsyslog_common/templates/forward-syslog.conf.j2 index c332de6..758aa85 100644 --- a/roles/rsyslog_common/templates/forward-syslog.conf.j2 +++ b/roles/rsyslog_common/templates/forward-syslog.conf.j2 @@ -1,5 +1,6 @@ {{ ansible_managed | comment }} [Journal] +Storage=volatile ForwardToSyslog=yes MaxLevelSyslog=debug diff --git a/roles/rsyslog_common/templates/logrotate.j2 b/roles/rsyslog_common/templates/logrotate.j2 new file mode 100644 index 0000000..455b35f --- /dev/null +++ b/roles/rsyslog_common/templates/logrotate.j2 @@ -0,0 +1,17 @@ +{{ ansible_managed | comment }} + +/var/log/auth.log +/var/log/mail.log +/var/log/kern.log +/var/log/syslog.log +{ + rotate 7 + daily + missingok + notifempty + delaycompress + compress + postrotate + /usr/lib/rsyslog/rsyslog-rotate + endscript +}