## confdroid_alloy::main::files.pp
# Module name: confdroid_alloy
# Author: 12ww1160 (12ww1160@confdroid.com)
# @summary Class manages required config files for the confdroid_alloy module
###############################################################################
class confdroid_alloy::main::files (

) inherits confdroid_alloy::params {
  require confdroid_alloy::main::dirs
  include concat

  $log_targets_array = Array($confdroid_alloy::params::ay_log_targets, true)

  concat { $ay_main_file:
    ensure   => present,
    owner    => 'root',
    group    => 'root',
    mode     => '0644',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    notify   => Service[$ay_service],
  }

  concat::fragment { 'confdroid_alloy_config_header':
    target  => $ay_main_file,
    content => template('confdroid_alloy/config.alloy.erb'),
    order   => '001',
  }

  if $ay_manage_loki == true {
    concat::fragment { 'confdroid_alloy_log_targets_default':
      target  => $ay_main_file,
      content => template('confdroid_alloy/log_targets.alloy.erb'),
      order   => '010',
    }
  }

  concat::fragment { 'confdroid_alloy_config_tail':
    target  => $ay_main_file,
    content => template('confdroid_alloy/config.alloy.tail.erb'),
    order   => '999',
  }

  # manage logrotate for rsyslog to allow adm group membership
  file { '/etc/logrotate.d/rsyslog':
    ensure   => file,
    owner    => 'root',
    group    => 'root',
    mode     => '0644',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template('confdroid_alloy/logrotate.rsyslog.erb'),
  }

  # manage log file group permissions
  file { '/var/log/messages':
    ensure => file,
    owner  => 'root',
    group  => 'adm',
    mode   => '0640',
    notify => Service[$ay_service],
  }

  file { '/var/log/secure':
    ensure => file,
    owner  => 'root',
    group  => 'adm',
    mode   => '0640',
    notify => Service[$ay_service],
  }
}