75 lines
2.0 KiB
Puppet
75 lines
2.0 KiB
Puppet
## confdroid_alloy::main::files.pp
|
|
# Module name: confdroid_alloy
|
|
# Author: 12ww1160 (12ww1160@confdroid.com)
|
|
# @summary Class manages required config files for the confdroid_alloy module
|
|
###############################################################################
|
|
class confdroid_alloy::main::files (
|
|
|
|
) inherits confdroid_alloy::params {
|
|
require confdroid_alloy::main::dirs
|
|
|
|
$log_targets_array = Array($confdroid_alloy::params::ay_log_targets, true)
|
|
|
|
concat { $ay_main_file:
|
|
ensure => present,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
selrange => s0,
|
|
selrole => object_r,
|
|
seltype => etc_t,
|
|
seluser => system_u,
|
|
notify => Service[$ay_service],
|
|
}
|
|
|
|
concat::fragment { 'confdroid_alloy_config_header':
|
|
target => $ay_main_file,
|
|
content => template('confdroid_alloy/config.alloy.erb'),
|
|
order => '001',
|
|
}
|
|
|
|
if $ay_manage_loki == true {
|
|
concat::fragment { 'confdroid_alloy_log_targets_default':
|
|
target => $ay_main_file,
|
|
content => template('confdroid_alloy/log_targets.alloy.erb'),
|
|
order => '010',
|
|
}
|
|
}
|
|
|
|
concat::fragment { 'confdroid_alloy_config_tail':
|
|
target => $ay_main_file,
|
|
content => template('confdroid_alloy/config.alloy.tail.erb'),
|
|
order => '999',
|
|
}
|
|
|
|
# manage logrotate for rsyslog to allow adm group membership
|
|
file { '/etc/logrotate.d/rsyslog':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
selrange => s0,
|
|
selrole => object_r,
|
|
seltype => etc_t,
|
|
seluser => system_u,
|
|
content => template('confdroid_alloy/logrotate.rsyslog.erb'),
|
|
}
|
|
|
|
# manage log file group permissions
|
|
file { '/var/log/messages':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'adm',
|
|
mode => '0640',
|
|
notify => Service[$ay_service],
|
|
}
|
|
|
|
file { '/var/log/secure':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'adm',
|
|
mode => '0640',
|
|
notify => Service[$ay_service],
|
|
}
|
|
}
|