tmakinen/puppet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

syslog: Initial support for OpenBSD syslogd server.

Browse source
This commit is contained in:
Timo Makinen 2016-04-07 11:32:36 +03:00
parent a2ff31ca7c
commit 21a8b36b10
1 changed files with 43 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

44
syslog/manifests/init.pp
View file

@ -378,7 +378,7 @@ class syslog::standalone::rsyslog inherits syslog::client::rsyslog {
class syslog::server inherits syslog::common::standalone {
case $syslog_type {
"syslogd": { fail("Server for \$syslog_type '$syslog_type' not yet supported.") }
"syslogd": { include syslog::server::syslogd }
"rsyslog": { include syslog::server::rsyslog }
default: { fail("Unknown \$syslog_type '$syslog_type'") }
}
@ -386,6 +386,48 @@ class syslog::server inherits syslog::common::standalone {
}
class syslog::server::syslogd inherits syslog::client::syslogd {
if $::operatingsystem != "OpenBSD" {
fail("syslog::server::syslogd not supported on ${::operatingsystem}")
}
if versioncmp($::operatingsystemrelease, "5.9") < 0 {
fail("syslog::server::syslogd supported only on OpenBSD 5.9 and newer")
}
file { "/etc/ssl/private/0.0.0.0:514.key":
ensure => present,
source => "${::puppet_ssldir}/private_keys/${::homename}.pem",
mode => "0600",
owner => "root",
group => "wheel",
notify => Service["syslogd"],
}
file { "/etc/ssl/0.0.0.0:514.crt":
ensure => present,
source => "${::puppet_ssldir}/certs/${::homename}.pem",
mode => "0644",
owner => "root",
group => "wheel",
notify => Service["syslogd"],
}
File["/etc/syslog.conf"] {
content => template("syslog/syslog.conf.server.erb",
"syslog/syslog.conf.$operatingsystem.erb"),
require => [ File["/srv/log"],
File["/var/log/all.log"], ],
}
Service["syslogd"] {
ensure => running,
enable => true,
flags => "${service_flags} -u -S 0.0.0.0:514 -C ${::puppet_ssldir}/certs/ca.pem",
}
}
# Install syslog server using rsyslog.
#
class syslog::server::rsyslog inherits syslog::client::rsyslog {