foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

rsyslog: Convert remote config to new format

Browse source
This commit is contained in:
Timo Makinen 2023-04-22 16:13:06 +00:00
parent 0b68353603
commit 2548a95678
1 changed files with 18 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
roles/rsyslog/templates/remote.conf.j2
View file

@ -1,11 +1,19 @@
# make gtls driver the default # Certificates
$DefaultNetstreamDriver gtls global(DefaultNetstreamDriverCAFile="{{ tls_bundle }}"
DefaultNetstreamDriverCertFile="{{ tls_certs }}/{{ inventory_hostname }}.crt"
DefaultNetstreamDriverKeyFile="{{ tls_private }}/{{ inventory_hostname }}.key")
# certificate files # Forward to remote TLS TCP server
$DefaultNetstreamDriverCAFile {{ tls_bundle }} action(type="omfwd"
$DefaultNetstreamDriverCertFile {{ tls_certs }}/{{ inventory_hostname }}.crt Target="{{ log_server }}"
$DefaultNetstreamDriverKeyFile {{ tls_private }}/{{ inventory_hostname }}.key Protocol="tcp"
Port="6514"
$ActionSendStreamDriverMode 1 StreamDriver="gtls"
StreamDriverMode="1"
*.* @@{{ log_server }}:6514 StreamDriverAuthMode="x509/name"
StreamDriverPermittedPeers="{{ log_server }}"
queue.filename="{{ (log_server) }}.queue"
queue.maxDiskSpace="1G"
queue.saveOnShutdown="on"
queue.type="LinkedList"
Action.ResumeRetryCount="-1")