debian-compliance-remote-logging.yml

#   _  __                   _ _ ____             _             
#  | |/ /__ ___      ____ _(_|_)  _ \ __ _ _ __ | |_ ___ _   _ 
#  | ' // _` \ \ /\ / / _` | | | |_) / _` | '_ \| __/ __| | | |
#  | . \ (_| |\ V  V / (_| | | |  __/ (_| | | | | |_\__ \ |_| |
#  |_|\_\__,_| \_/\_/ \__,_|_|_|_|   \__,_|_| |_|\__|___/\__,_|
#                   ____  _             _                 _        
#  [   ANSIBLE   ] |  _ \| | __ _ _   _| |__   ___   ___ | | _____ 
#  Please only use | |_) | |/ _` | | | | '_ \ / _ \ / _ \| |/ / __|
#  playbooks if    |  __/| | (_| | |_| | |_) | (_) | (_) |   <\__ \
#  you know what   |_|   |_|\__,_|\__, |_.__/ \___/ \___/|_|\_\___/
#  they change/do                 |___/ 
# 
#  .---------| My Compliance Playbooks - Ship rsyslog logs to graylog
#  | 
#  | This playbook will do the following:
#  | - Install rsyslog package to latest
#  | - Copy over the remote-logging.conf template
#  | - Restart rsyslogd
#  `---------------------------------------------------------------
---

- hosts: debian
  tasks:
    - name: Install Rsyslog daemon package
      register: updatesys
      apt:
        update_cache: yes
        force_apt_get: yes
        cache_valid_time: 3600
        name:
          - rsyslog
        state: latest

    - name: Add config file to /etc/rsyslog.d
      template:
        src: "remote-logging.conf.j2"
        dest: "/etc/rsyslog.d/remote-logging.conf"
        mode: 0644
      notify:
        - Restart rsyslog

    - name: Ensure NTP is running and enabled as configured.
      service:
        name: "rsyslog"
        state: started
        enabled: true

  handlers:
    - name: Restart rsyslog
      service:
        name: "rsyslog"
        state: restarted
      ignore_errors: true