···

       
1
       
-
       
borgmatic_hosts:

     

       
2
       
-
       
  hosts:

     

       
3
       
-
       
    hyperreal:

     

       
4
       
-
       
      ansible_user: jas

     

       
5
       
-
       
      ansible_host: hyperreal.carp-wyvern.ts.net

     

       
6
       
-
       
      ansible_python_interpreter: /usr/bin/python3

     

       
7
       
-
       
    nas:

     

       
8
       
-
       
      ansible_user: jas

     

       
9
       
-
       
      ansible_host: nas.carp-wyvern.ts.net

     

       
10
       
-
       
      ansible_python_interpreter: /usr/bin/python3

     

       
11
       
-
       
    dietpi:

     

       
12
       
-
       
      ansible_user: jas

     

       
13
       
-
       
      ansible_host: dietpi.carp-wyvern.ts.net

     

       
14
       
-
       
      ansible_python_interpreter: /usr/bin/python3

     

       
15
       
 
       
debian_servers:

     

       
16
       
 
       
  hosts:

     

       
17
       
-
       
    dietpi:

     

       
18
       
-
       
      ansible_user: dietpi

     

       
19
       
-
       
      ansible_host: dietpi.carp-wyvern.ts.net

     

       
20
       
-
       
      ansible_python_interpreter: /usr/bin/python3

     

       
21
       
 
       
    hyperreal:

     

       
22
       
 
       
      ansible_user: jas

     

       
23
       
 
       
      ansible_host: hyperreal.carp-wyvern.ts.net

     

       
24
       
 
       
      ansible_python_interpreter: /usr/bin/python3

     

       
25
       
-
       
    nas-aux:

     

       
26
       
-
       
      ansible_user: jas

     

       
27
       
-
       
      ansible_host: nas-aux.carp-wyvern.ts.net

     

       
28
       
-
       
      ansible_python_interpreter: /usr/bin/python3

     

       
29
       
-
       
    aux-remote:

     

       
30
       
-
       
      ansible_user: jas

     

       
31
       
-
       
      ansible_host: aux-remote.carp-wyvern.ts.net

     

       
32
       
-
       
      ansible_python_interpreter: /usr/bin/python3

     

       
33
       
 
       
freebsd_servers:

     

       
34
       
 
       
  hosts:

     

       
35
       
 
       
    nas:

     

       
36
       
 
       
      ansible_user: jas

     

       
37
       
 
       
      ansible_host: nas.carp-wyvern.ts.net

     

       
38
       
 
       
      ansible_python_interpreter: /usr/local/bin/python3.11

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
39
       
 
       
prom_servers:

     

       
40
       
 
       
  hosts:

     

       
41
       
-
       
    nas-aux:

     

       
42
       
 
       
      ansible_user: jas

     

       
43
       
-
       
      ansible_host: nas-aux.carp-wyvern.ts.net

     

       
44
       
 
       
      ansible_python_interpreter: /usr/bin/python3

     

       
45
       
-
       
prom_clients:

     

       
46
       
-
       
  children:

     

       
47
       
-
       
    debian_servers:

     

       
48
       
 
       
remote_logging_clients:

     

       
49
       
 
       
  children:

     

       
50
       
 
       
    debian_servers:

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
1
       
 
       
debian_servers:

     

       
2
       
 
       
  hosts:

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
3
       
 
       
    hyperreal:

     

       
4
       
 
       
      ansible_user: jas

     

       
5
       
 
       
      ansible_host: hyperreal.carp-wyvern.ts.net

     

       
6
       
 
       
      ansible_python_interpreter: /usr/bin/python3

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
7
       
 
       
freebsd_servers:

     

       
8
       
 
       
  hosts:

     

       
9
       
 
       
    nas:

     

       
10
       
 
       
      ansible_user: jas

     

       
11
       
 
       
      ansible_host: nas.carp-wyvern.ts.net

     

       
12
       
 
       
      ansible_python_interpreter: /usr/local/bin/python3.11

     

       
13
       
+
       
prom_clients:

     

       
14
       
+
       
  children:

     

       
15
       
+
       
    debian_servers:

     

       
16
       
 
       
prom_servers:

     

       
17
       
 
       
  hosts:

     

       
18
       
+
       
    desktop:

     

       
19
       
 
       
      ansible_user: jas

     

       
20
       
+
       
      ansible_host: desktop.carp-wyvern.ts.net

     

       
21
       
 
       
      ansible_python_interpreter: /usr/bin/python3

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
22
       
 
       
remote_logging_clients:

     

       
23
       
 
       
  children:

     

       
24
       
 
       
    debian_servers:

     

···

       
2
       
 
       
  gather_facts: true

     

       
3
       
 
       
  become: true

     

       
4
       
 
       
  tasks:

     

       
5
       
-
       
    - name: Ensure syslog-ng is installed

     

       
6
       
 
       
      ansible.builtin.package:

     

       
7
       
-
       
        name: syslog-ng

     

       
8
       
 
       
        state: latest

     

       
9
       
 
       
      when: ansible_system == "Linux"

     

       
10
       
-
       
    - name: Ensure syslog-ng is enabled

     

       
11
       
 
       
      ansible.builtin.systemd_service:

     

       
12
       
-
       
        name: syslog-ng

     

       
13
       
 
       
        enabled: true

     

       
14
       
 
       
        state: started

     

       
15
       
 
       
      when: ansible_service_mgr == "systemd"

     

       
16
       
 
       
    - name: Remove any forwarding file if exists

     

       
17
       
 
       
      ansible.builtin.file:

     

       
18
       
-
       
        path: /etc/syslog-ng/conf.d/forward.conf

     

       
19
       
 
       
        state: absent

     

       
20
       
 
       
      when: ansible_system == "Linux"

     

       
21
       
-
       
    - name: Get remote logging server tailnet IP address

     

       
22
       
-
       
      ansible.builtin.shell: tailscale status | grep "nas-aux" | awk '{print $1}'

     

       
23
       
-
       
      register: ctrl_tailnet_ip_addr

     

       
24
       
 
       
      changed_when: false

     

       
25
       
-
       
      failed_when: ctrl_tailnet_ip_addr.rc != 0

     

       
26
       
-
       
    - name: Configure log forwarding (Debian)

     

       
27
       
 
       
      ansible.builtin.blockinfile:

     

       
28
       
-
       
        path: /etc/syslog-ng/conf.d/forward.conf

     

       
29
       
 
       
        create: true

     

       
30
       
 
       
        owner: root

     

       
31
       
 
       
        group: root

     

       
32
       
 
       
        mode: 0644

     

       
33
       
 
       
        block: |

     

       
34
       
-
       
          # Forward to nas-aux ({{ctrl_tailnet_ip_addr.stdout}})

     

       
35
       
-
       
          destination d_ewmm {

     

       
36
       
-
       
            syslog-ng(server("{{ctrl_tailnet_ip_addr.stdout}}"));

     

       
37
       
-
       
          };

     

       
38
       
-
       


     

       
39
       
-
       
          log {

     

       
40
       
-
       
            source(s_src);

     

       
41
       
-
       
            destination(d_ewmm);

     

       
42
       
-
       
          };

     

       
43
       
-
       
      when: ansible_os_family == "Debian"

     

       
44
       
-
       
    - name: Configure log forwarding (Red Hat)

     

       
45
       
-
       
      ansible.builtin.blockinfile:

     

       
46
       
-
       
        path: /etc/syslog-ng/conf.d/forward.conf

     

       
47
       
-
       
        create: true

     

       
48
       
-
       
        owner: root

     

       
49
       
-
       
        group: root

     

       
50
       
-
       
        mode: 0644

     

       
51
       
-
       
        block: |

     

       
52
       
-
       
          # Forward to nas-aux ({{ctrl_tailnet_ip_addr.stdout}})

     

       
53
       
-
       
          destination d_ewmm {

     

       
54
       
-
       
            syslog-ng(server("{{ctrl_tailnet_ip_addr.stdout}}"));

     

       
55
       
-
       
          };

     

       
56
       
-
       


     

       
57
       
-
       
          log {

     

       
58
       
-
       
            source(s_sys);

     

       
59
       
-
       
            destination(d_ewmm);

     

       
60
       
-
       
          };

     

       
61
       
-
       
      when: ansible_os_family == "RedHat"

     

       
62
       
-
       
    - name: Restart syslog-ng

     

       
63
       
 
       
      ansible.builtin.systemd_service:

     

       
64
       
-
       
        name: syslog-ng

     

       
65
       
 
       
        enabled: true

     

       
66
       
 
       
        state: restarted

     

       
67
       
 
       
      when: ansible_service_mgr == "systemd"

     
···

       
74
       
 
       
      ansible.builtin.lineinfile:

     

       
75
       
 
       
        path: /etc/syslog.conf

     

       
76
       
 
       
        regexp: '^\*\.\*'

     

       
77
       
-
       
        line: "*.* @{{ctrl_tailnet_ip_addr.stdout}}"

     

       
78
       
 
       
        owner: root

     

       
79
       
 
       
        group: wheel

     

       
80
       
 
       
        mode: 0644

     

···

       
2
       
 
       
  gather_facts: true

     

       
3
       
 
       
  become: true

     

       
4
       
 
       
  tasks:

     

       
5
       
+
       
    - name: Ensure rsyslog is installed

     

       
6
       
 
       
      ansible.builtin.package:

     

       
7
       
+
       
        name: rsyslog

     

       
8
       
 
       
        state: latest

     

       
9
       
 
       
      when: ansible_system == "Linux"

     

       
10
       
+
       
    - name: Ensure rsyslog is enabled

     

       
11
       
 
       
      ansible.builtin.systemd_service:

     

       
12
       
+
       
        name: rsyslog

     

       
13
       
 
       
        enabled: true

     

       
14
       
 
       
        state: started

     

       
15
       
 
       
      when: ansible_service_mgr == "systemd"

     

       
16
       
 
       
    - name: Remove any forwarding file if exists

     

       
17
       
 
       
      ansible.builtin.file:

     

       
18
       
+
       
        path: /etc/rsyslog.d/forward.conf

     

       
19
       
 
       
        state: absent

     

       
20
       
 
       
      when: ansible_system == "Linux"

     

       
21
       
+
       
    - name: Get remote logging server headnet IP address

     

       
22
       
+
       
      ansible.builtin.shell: tailscale status | grep "desktop" | awk '{print $1}'

     

       
23
       
+
       
      register: ctrl_headnet_ip_addr

     

       
24
       
 
       
      changed_when: false

     

       
25
       
+
       
      failed_when: ctrl_headnet_ip_addr.rc != 0

     

       
26
       
+
       
    - name: Configure log forwarding

     

       
27
       
 
       
      ansible.builtin.blockinfile:

     

       
28
       
+
       
        path: /etc/rsyslog.d/forward.conf

     

       
29
       
 
       
        create: true

     

       
30
       
 
       
        owner: root

     

       
31
       
 
       
        group: root

     

       
32
       
 
       
        mode: 0644

     

       
33
       
 
       
        block: |

     

       
34
       
+
       
          # Forward to desktop.ayu-matrix.ts.net ({{ctrl_headnet_ip_addr.stdout}})

     

       
35
       
+
       
          *.* action(type="omfwd" target="{{ctrl_headnet_ip_addr.stdout}}" port="514" protocol="tcp"

     

       
36
       
+
       
              action.resumeRetryCount="100"

     

       
37
       
+
       
              queue.type="linkedList" queue.size="10000")

     

       
38
       
+
       
      when: ansible_system == "Linux"

     

       
39
       
+
       
    - name: Restart rsyslog

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
40
       
 
       
      ansible.builtin.systemd_service:

     

       
41
       
+
       
        name: rsyslog

     

       
42
       
 
       
        enabled: true

     

       
43
       
 
       
        state: restarted

     

       
44
       
 
       
      when: ansible_service_mgr == "systemd"

     
···

       
51
       
 
       
      ansible.builtin.lineinfile:

     

       
52
       
 
       
        path: /etc/syslog.conf

     

       
53
       
 
       
        regexp: '^\*\.\*'

     

       
54
       
+
       
        line: "*.* @{{ctrl_headnet_ip_addr.stdout}}"

     

       
55
       
 
       
        owner: root

     

       
56
       
 
       
        group: wheel

     

       
57
       
 
       
        mode: 0644