{{ ansible_managed | comment }}

linelog log_auth_inner {
    filename = syslog
    syslog_facility = authpriv

    format = ""

    reference = "{{ 'messages.%{%{reply:Packet-Type}:-default}' }}"

    messages {
        default = "Unknown packet type %{Packet-Type}"

        Access-Accept = "${..prefix} ACCEPT %{Stripped-User-Name}"
        Access-Reject = "${..prefix} REJECT %{Stripped-User-Name} (%{Module-Failure-Message})"
    }

    prefix = "[%{Virtual-Server}] (session #%n)"
}

linelog log_auth_outer {
    filename = syslog
    syslog_facility = authpriv

    format = ""

    reference = "{{ 'messages.%{%{reply:Packet-Type}:-default}' }}"

    messages {
        default = "Unknown packet type %{Packet-Type}"

        Access-Accept = "${..prefix}: ACCEPT %{Stripped-User-Name}"
        Access-Reject = "${..prefix}: REJECT %{Stripped-User-Name} (%{Module-Failure-Message})"
    }

    prefix = "{{ '[%{Virtual-Server}] (session #%n) from %{Calling-Station-Id} via %{NAS-IP-Address}:%{%{NAS-Port}:-0}' }}"
}