## confdroid_alloy::main::files.pp
# Module name: confdroid_alloy
# Author: 12ww1160 (12ww1160@confdroid.com)
# @summary Class manages required config files for the confdroid_alloy module
###############################################################################
class confdroid_alloy::main::files (

) inherits confdroid_alloy::params {
  require confdroid_alloy::main::dirs

  # Ensure log_targets is always an array
  $log_targets_array = Array($confdroid_alloy::params::ay_log_targets, true)

  file { $ay_main_file:
    ensure   => file,
    owner    => 'root',
    group    => 'root',
    mode     => '0644',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template('confdroid_alloy/config.alloy.erb'),
    notify   => Service[$ay_service],
  }

  # manage logrotate for rsyslog to allow adm group membership
  file { '/etc/logrotate.d/rsyslog':
    ensure   => file,
    owner    => 'root',
    group    => 'root',
    mode     => '0644',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template('confdroid_alloy/logrotate.rsyslog.erb'),
  }

  # manage log file group permissions
  file { '/var/log/messages':
    ensure => file,
    owner  => 'root',
    group  => 'adm',
    mode   => '0640',
    notify => Service[$ay_service],
  }

  file { '/var/log/secure':
    ensure => file,
    owner  => 'root',
    group  => 'adm',
    mode   => '0640',
    notify => Service[$ay_service],
  }
}