rene/ansible-pull
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

corrected rsyslog settings

Browse Source
This commit is contained in:
Rene Mewissen
2025-10-07 19:00:27 +02:00
parent 8bdd951174
commit 6335e200cd
3 changed files with 60 additions and 69 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/bastionhost/tasks/system_setup/auditd_logging.yml
View File

@@ -49,9 +49,6 @@
# Forward all audit logs to a remote server via TLS # Forward all audit logs to a remote server via TLS
# This file is managed by Ansible. # This file is managed by Ansible.
# Define the CA certificate rsyslog should trust
global(DefaultNetstreamDriverCAFile="{{ rsyslog_tls_ca_cert }}")
# Define the forwarding rule # Define the forwarding rule
if $programname == 'audisp-syslog' then { if $programname == 'audisp-syslog' then {
action(type="omfwd" action(type="omfwd"

12
roles/bastionhost/tasks/system_setup/rsyslog_forwarding.yml
View File

@@ -57,15 +57,15 @@
template="gelf" template="gelf"
StreamDriver="gtls" StreamDriver="gtls"
StreamDriverMode="1" StreamDriverMode="1"
StreamDriver.AuthMode="x509/name" StreamDriverAuthMode="x509/name"
StreamDriver.PermittedPeer="{{ log_forwarding_permitted_peer }}" StreamDriverPermittedPeers="{{ log_forwarding_permitted_peers }}"
) )
} }
notify: restart rsyslog notify: restart rsyslog
when: when:
- log_forwarding_type == 'gelf' - log_forwarding_type == 'gelf'
- log_forwarding_target is defined - log_forwarding_target is defined
- log_forwarding_permitted_peer is defined - log_forwarding_permitted_peers is defined
- name: Bastionhost | rsyslog forwarding | Configure standard TLS forwarding for SSH logs - name: Bastionhost | rsyslog forwarding | Configure standard TLS forwarding for SSH logs
ansible.builtin.copy: ansible.builtin.copy:
@@ -86,12 +86,12 @@
template="RSYSLOG_SyslogProtocol23Format" template="RSYSLOG_SyslogProtocol23Format"
StreamDriver="gtls" StreamDriver="gtls"
StreamDriverMode="1" StreamDriverMode="1"
StreamDriver.AuthMode="x509/name" StreamDriverAuthMode="x509/name"
StreamDriver.PermittedPeer="{{ log_forwarding_permitted_peer }}" StreamDriverPermittedPeer="{{ log_forwarding_permitted_peers }}"
) )
} }
notify: restart rsyslog notify: restart rsyslog
when: when:
- log_forwarding_target is defined - log_forwarding_target is defined
- log_forwarding_permitted_peer is defined - log_forwarding_permitted_peers is defined
- log_forwarding_type == 'syslog' - log_forwarding_type == 'syslog'

114
roles/bastionhost/vars/main.yml
View File

@@ -1,61 +1,55 @@
$ANSIBLE_VAULT;1.1;AES256 $ANSIBLE_VAULT;1.1;AES256
35616333396265623232643732626564646261363632383437353966616361323530346138613263 64623031383838303530363462653461373631643139386465626336353665653531373266303263
3963326461303233333331303366383934313730353734320a346133333030653832333461316465 3132666435343532383230336235383531313934396433340a653261383633623661313263643935
39623634653864613132656364643134663565373762383137316636303562646237396164636337 64326539303030353063393231646438653464636437663737663833316138313732373430343830
6138656239323431360a303738303064663735613036313232626561636639653862643030616334 6333343034633462620a323264386266303263616662303435323032383862333934613531653764
62323630373631373130373362363562373364316337346132623739333630353566396138616336 38316363653431646465333337656232326166326361353734653833353066623364326438383434
33656465383539373734373465613863656337313139393066373864383235343034333434633165 62373834653331323939343063346364353431393661373231663537386336353166343432643063
65626337666164643065346335303366376238376538633932656232376130303436633036333239 37383334656537646631653265303137376139316638383435393664633136346562363161343838
35376431616431636131633932666364656534643636366539366335396334346138666562616664 37323865343735616230653561626161616635653234613133643935346435383130653933363530
65643234396330656266303832333334333736656238363435633937616366306165383766303162 38306336643266316333653733373634646230666133643634383463623936363137663035653133
30643936623132346335386338393563646462356236616465326137663763633338326163663036 66656639636365663932353031356234633130626133356433633932373763643865316432666364
39353463356433663566663537323333353662393964363530663732373537346339396465663064 35353033383863396430623135333031353138386665313064666331613765313531653331323161
38633538333934613837316135666363373834626562333637303866633735343631636535666236 35363363343738313637656534613062353237636662663637623431623937396434373636396266
31313930353939646532613361663965353138373234663831386366643931653934626139326536 38623234613438323933653039343237633432643239333262623536656264346131373863376630
39313461323162306339393830313164363362663336653436373962353231343138323531646334 65393239323934376164373066656538333766376433386665623733303939363233663565366236
30323966303666353132376335666465303037656437616166396432396365376461626331356537 31376162313966623639303137313134363238326136383432333963656439383133393662656566
61666133393365633139656233636432653032636638303837633037333563383864333366303661 32333430343963646633666635306334613363666266623838363931653563383632386237623764
34353731353434383633383366373931643161646261383563636230316335356332666533623834 34356334383931636233663565663035623833353166346261373265653464636561313762633532
65346361333135393934346331396162383163346636646132376530303463643230653934656566 31353738333331626561636262376638303632663063393464356539363162653133383466383237
61303563333061333066623964616461326138363361313362373462643633393064386662396631 61626236386538383131613962336330313230346366393734663063653234343131326261306131
35386264313664306437303662613934646234353062646136376234616362613436623938666263 35623339346461373230623133313562313034393632343863373634643561373761366139613335
62313533363038336634646662623637623136623864386431323030636464333130306332393735 61343431636531353933373031646635353530393436323831386663643465336461626537626132
66356331616231663232663532323637623231376162646331626437333763613235653361306639 63656337356437356532313438306465306630386266633137646161366365326537313563373466
34313534303032386436323962303664316430653265326666616332383164373032386466393236 34336566626363616637393838343539306665363938316562363033353961306261363033613932
65376636383538613732616337623666653666626430633564613936613231356165373239316137 61313633633036346163613233313937623963663562396333343265396238363938313563653731
38373964363966323263316263343361343630663661333063616665333132613432373330656135 65333836626161363031633264336161653439303064373634353638376561393764326333343831
35666166656132363837363961643037653734306361313839663736353138656531633433633231 38343338303162613333333732636465363066613037663566353961666238376565333961656665
35306664373961326133376330353435386234636364633738393735333063656137633766376662 38396334383638313662613565366436326565346235636564393332626466666162353562306264
64333762326339376530323561366133303565303137616462633262393636333237303864653336 37316339393635373763616366353139393235626363346633663036373262343532336465326461
32643761636539313336646634323839666531353264336430346363393238303863353636333038 30616234386363366436653431636463366136616633346233663739353230396638363665366666
62656163373263663338666466613363633531333839386239643538396465393837663763396235 34663638333939396337303430663465653337373563376663316136383262643032616462363265
34386663396664636164376564613562393736373735643731343038363835346666396463616530 61343938356364396534396533646638636634613435333166336632656433666463373236613637
61366533663461393164633437633731613334613033393862386264323132336635313165623964 65646566363638653530663038633362373662666334383332613232613333343938356261663039
37336264303137656563616461636334616239356534666633363732626331333737393632383634 63393962663935616636363563376331623566373736633836393764623634336336613063633739
32383135616462373863613132663662653330663633323965646330393434376532313037396132 31336465333461363166623537363738633433613732386532663261396135643937326239616238
30333332633738376336353839633639663434313962653963326532626266353437316166366639 36653562646466303763653964316262383034366565633465386663343063386337326435346362
66333937306666303962343334663261363937643065346165343830643138346463633530363230 33336533626362373936343833353534333538386336663834383235626137623766626163613237
31656531326361383239343435653130323833383538386536666564633130643061323034653433 62306630373833626564363036633062356533313864653030326439323339383535353964336633
64653766636335643563393465363565626534363733356431626539333066656235376436643761 31643832623935613234646638653861363738633032663635353466613837303634343036623034
32626531373038393666333730646536373866343562643765333238653439613238623636396634 38383833303736653936633339626364313337663738396638323235386562396339393235313864
37643065303063323164313430316537376430356638313963383165616564653438383039663362 64383238646530643438343965363465396438323464346535663364323837373137393533656138
31353739663435346566353237303434353237636338623937613962303463346531643263623631 37363066643237623633393966383463316663633536643163646433346230653033323836366430
30316163656137393330333565343431343038393031613032623138373663323337326166383632 34646534323135363333623861326562653238383433623639306438376535363632363831633739
36636235363137333465383738616561643031333966316266636166616565356266346338393730 35656631383030303630623766303165393936653037653463313961663666373634323839346236
63393964333039643462376239643664316138303836313132313037356431356263653537646466 37616163323430373138313230626633326630353639373034393865303663336435383466343062
37613835623161323661353163316336323230643334346266343662343563393635666531333564 66303233356664613337373066323038383132303163646135333936663832373966303963616432
61353262613166373235376434613635616264326637356339366265393034633035343438313539 37383632646263376434323864623636666131363238383533643136653138316631323863316361
34333964316137326364303333346634666630333935663932336638353338656231353732323265 37663330333337323835346138643362363435643732373036613862303465373937323062333035
66356334626438613365656238333731303539336530643637376465323766303962313937313461 63626263353532656230356366383139666331396266386635396437363936356566666238306437
35336261303639626539333736373161363166656465666639643662643932346331393335393235 37373636633533396139383765623766306339653135373934356463393366306631366461396237
33373465306130343161346636346330333136663439363166393338623931663034363436303735 32663036303230313764316162346436386639623266303862613639643936613463363031646432
39616564653935616639613233666261393738316532663461643039326165363530316234633762 37303162646635336336393864623964326537333234626462373333643562396266633732646439
31353261386331313739666262636133643133613237333936663934663133353463336535653065 30366334323137613839343462353634633530636339306237633638613638333764326333383931
33346130383936613632643434633334353238643736383939386633656338333035383662346235 64633461653762326536643139323361343937376562663662663830653961333635376132313435
30306432643364666564336432356238636130613433663034636234636531306539626662343166 6461323662663734646436353962333036336430333230333263
36323137323961303064336261633661363062393962326638353537346262636366303934373266
37336461393661343363376634326262376364373163636337373936373135623964633933383765
66373935393033643266653338306365306531333662616665343539303337353733343138363161
37396566626364333561643837363666323364626331373831653162366631346162666337653833
65376135386665346336363136623039643533663662353462376538376262636233343231333563
36623337303335396566