···

       
5
       
 
       
  vars:

     

       
6
       
 
       
    jails:

     

       
7
       
 
       
      - aa-torrenting

     

       
8
       
-
       
      - blocky

     

       
9
       
-
       
      - unbound

     

       
10
       
 
       


     

       
11
       
 
       
  tasks:

     

       
12
       
 
       
    - name: Update all installed packages

     
···

       
30
       
 
       
      ansible.builtin.shell: freebsd-update -j aa-torrenting fetch install

     

       
31
       
 
       
      register: updated_aa_torrenting

     

       
32
       
 
       
      changed_when: '"No updates are available to install." not in updated_aa_torrenting.stdout'

     

       
33
       
-
       


     

       
34
       
-
       
    - name: Fetch and install updates in blocky jail

     

       
35
       
-
       
      ansible.builtin.shell: freebsd-update -j blocky fetch install

     

       
36
       
-
       
      register: updated_blocky

     

       
37
       
-
       
      changed_when: '"No updates are available to install." not in updated_blocky.stdout'

     

       
38
       
-
       


     

       
39
       
-
       
    - name: Fetch and install updates in unbound jail

     

       
40
       
-
       
      ansible.builtin.shell: freebsd-update -j unbound fetch install

     

       
41
       
-
       
      register: updated_unbound

     

       
42
       
-
       
      changed_when: '"No updates are available to install." not in updated_unbound.stdout'

     

···

       
5
       
 
       
  vars:

     

       
6
       
 
       
    jails:

     

       
7
       
 
       
      - aa-torrenting

     

       
0
       
 
       

     

       
0
       
 
       

     

       
8
       
 
       


     

       
9
       
 
       
  tasks:

     

       
10
       
 
       
    - name: Update all installed packages

     
···

       
28
       
 
       
      ansible.builtin.shell: freebsd-update -j aa-torrenting fetch install

     

       
29
       
 
       
      register: updated_aa_torrenting

     

       
30
       
 
       
      changed_when: '"No updates are available to install." not in updated_aa_torrenting.stdout'

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
 
       
---

     

       
2
       
-
       
- hosts: promclients

     

       
3
       
 
       
  gather_facts: true

     

       
4
       
 
       
  become: true

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
5
       
 
       


     

       
6
       
 
       
  tasks:

     

       
7
       
 
       
    - name: Ensure rsyslog is installed

     

       
8
       
 
       
      ansible.builtin.package:

     

       
9
       
 
       
        name: rsyslog

     

       
10
       
 
       
        state: latest

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
11
       
 
       


     

       
12
       
 
       
    - name: Ensure rsyslog is enabled

     

       
13
       
 
       
      ansible.builtin.systemd_service:

     

       
14
       
 
       
        name: rsyslog

     

       
15
       
 
       
        enabled: true

     

       
16
       
 
       
        state: started

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
17
       
 
       


     

       
18
       
 
       
    - name: Remove any forwarding file if exists

     

       
19
       
 
       
      ansible.builtin.file:

     

       
20
       
-
       
        path: /etc/rsyslog.d/forward.conf

     

       
21
       
 
       
        state: absent

     

       
22
       
 
       


     

       
23
       
 
       
    - name: Get control node headnet IP address

     

       
24
       
 
       
      ansible.builtin.shell: tailscale status | head -1 | awk '{print $1}'

     

       
25
       
 
       
      register: ctrl_headnet_ip_addr

     

       
26
       
 
       
      delegate_to: 127.0.0.1

     

       
0
       
 
       

     

       
0
       
 
       

     

       
27
       
 
       


     

       
28
       
 
       
    - name: Configure log forwarding

     

       
29
       
 
       
      ansible.builtin.blockinfile:

     

       
30
       
-
       
        path: /etc/rsyslog.d/forward.conf

     

       
31
       
 
       
        create: true

     

       
32
       
 
       
        owner: root

     

       
33
       
-
       
        group: root

     

       
34
       
 
       
        mode: 0644

     

       
35
       
 
       
        block: |

     

       
36
       
 
       
          # Forward to desktop.headscale.moonshadow.dev ({{ctrl_headnet_ip_addr.stdout}})

     
···

       
43
       
 
       
        name: rsyslog

     

       
44
       
 
       
        enabled: true

     

       
45
       
 
       
        state: restarted

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
 
       
---

     

       
2
       
+
       
- hosts: debianservers,freebsdservers

     

       
3
       
 
       
  gather_facts: true

     

       
4
       
 
       
  become: true

     

       
5
       
+
       
  vars:

     

       
6
       
+
       
    etc_dir: "{% if ansible_system == 'FreeBSD' %}/usr/local/etc{% else %}/etc{% endif %}"

     

       
7
       
+
       
    group: "{% if ansible_system == 'FreeBSD' %}wheel{% else %}root{% endif %}"

     

       
8
       
 
       


     

       
9
       
 
       
  tasks:

     

       
10
       
 
       
    - name: Ensure rsyslog is installed

     

       
11
       
 
       
      ansible.builtin.package:

     

       
12
       
 
       
        name: rsyslog

     

       
13
       
 
       
        state: latest

     

       
14
       
+
       
      when: ansible_system == "Linux"

     

       
15
       
+
       


     

       
16
       
+
       
    - name: Ensure rsyslog is installed

     

       
17
       
+
       
      community.general.pkgng:

     

       
18
       
+
       
        name: "rsyslog"

     

       
19
       
+
       
        state: latest

     

       
20
       
+
       
      when: ansible_system == "FreeBSD"

     

       
21
       
 
       


     

       
22
       
 
       
    - name: Ensure rsyslog is enabled

     

       
23
       
 
       
      ansible.builtin.systemd_service:

     

       
24
       
 
       
        name: rsyslog

     

       
25
       
 
       
        enabled: true

     

       
26
       
 
       
        state: started

     

       
27
       
+
       
      when: ansible_service_mgr == "systemd"

     

       
28
       
+
       


     

       
29
       
+
       
    - name: Ensure rsyslog is enabled in /etc/rc.conf (FreeBSD)

     

       
30
       
+
       
      ansible.builtin.shell: sysrc rsyslogd_enable="YES"

     

       
31
       
+
       
      register: rsyslogd_enable

     

       
32
       
+
       
      when: ansible_system == "FreeBSD"

     

       
33
       
+
       
      changed_when: '"YES -> YES" not in rsyslogd_enable.stdout'

     

       
34
       
+
       


     

       
35
       
+
       
    - name: Ensure syslogd is disabled in /etc/rc.conf (FreeBSD)

     

       
36
       
+
       
      ansible.builtin.shell: sysrc syslogd_enable="NO"

     

       
37
       
+
       
      register: syslogd_enable

     

       
38
       
+
       
      when: ansible_system == "FreeBSD"

     

       
39
       
+
       
      changed_when: '"YES -> NO" in syslogd_enable.stdout'

     

       
40
       
 
       


     

       
41
       
 
       
    - name: Remove any forwarding file if exists

     

       
42
       
 
       
      ansible.builtin.file:

     

       
43
       
+
       
        path: "{{ etc_dir }}/rsyslog.d/forward.conf"

     

       
44
       
 
       
        state: absent

     

       
45
       
 
       


     

       
46
       
 
       
    - name: Get control node headnet IP address

     

       
47
       
 
       
      ansible.builtin.shell: tailscale status | head -1 | awk '{print $1}'

     

       
48
       
 
       
      register: ctrl_headnet_ip_addr

     

       
49
       
 
       
      delegate_to: 127.0.0.1

     

       
50
       
+
       
      changed_when: false

     

       
51
       
+
       
      failed_when: ctrl_headnet_ip_addr.rc != 0

     

       
52
       
 
       


     

       
53
       
 
       
    - name: Configure log forwarding

     

       
54
       
 
       
      ansible.builtin.blockinfile:

     

       
55
       
+
       
        path: "{{ etc_dir }}/rsyslog.d/forward.conf"

     

       
56
       
 
       
        create: true

     

       
57
       
 
       
        owner: root

     

       
58
       
+
       
        group: "{{ group }}"

     

       
59
       
 
       
        mode: 0644

     

       
60
       
 
       
        block: |

     

       
61
       
 
       
          # Forward to desktop.headscale.moonshadow.dev ({{ctrl_headnet_ip_addr.stdout}})

     
···

       
68
       
 
       
        name: rsyslog

     

       
69
       
 
       
        enabled: true

     

       
70
       
 
       
        state: restarted

     

       
71
       
+
       
      when: ansible_service_mgr == "systemd"

     

       
72
       
+
       


     

       
73
       
+
       
    - name: Restart rsyslog

     

       
74
       
+
       
      ansible.builtin.shell: service rsyslogd restart

     

       
75
       
+
       
      when: ansible_service_mgr == "bsdinit"