foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

rsyslog: Convert remote config to new format

Browse source
This commit is contained in:
Timo Makinen 2023-04-22 16:13:06 +00:00
parent 0b68353603
commit 2548a95678
1 changed files with 18 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
roles/rsyslog/templates/remote.conf.j2
View file

@ -1,11 +1,19 @@
# make gtls driver the default
$DefaultNetstreamDriver gtls
# Certificates
global(DefaultNetstreamDriverCAFile="{{ tls_bundle }}"
DefaultNetstreamDriverCertFile="{{ tls_certs }}/{{ inventory_hostname }}.crt"
DefaultNetstreamDriverKeyFile="{{ tls_private }}/{{ inventory_hostname }}.key")
# certificate files
$DefaultNetstreamDriverCAFile {{ tls_bundle }}
$DefaultNetstreamDriverCertFile {{ tls_certs }}/{{ inventory_hostname }}.crt
$DefaultNetstreamDriverKeyFile {{ tls_private }}/{{ inventory_hostname }}.key
$ActionSendStreamDriverMode 1
*.* @@{{ log_server }}:6514
# Forward to remote TLS TCP server
action(type="omfwd"
Target="{{ log_server }}"
Protocol="tcp"
Port="6514"
StreamDriver="gtls"
StreamDriverMode="1"
StreamDriverAuthMode="x509/name"
StreamDriverPermittedPeers="{{ log_server }}"
queue.filename="{{ (log_server) }}.queue"
queue.maxDiskSpace="1G"
queue.saveOnShutdown="on"
queue.type="LinkedList"
Action.ResumeRetryCount="-1")