From c9f7ab3912e98ec09e0a2c9ff12908c3324d6324 Mon Sep 17 00:00:00 2001
From: Rene Mewissen <rene@tantooine.myfirewall.org>
Date: Mon, 30 Jan 2023 17:18:00 +0100
Subject: [PATCH] prepare graylog

---
 roles/logserver/tasks/graylog.yml   | 23 +++++++++++++++++++++++
 roles/logserver/tasks/main.yml      | 24 ++++++++++++++++++++++++
 roles/logserver/tasks/rsyslog.yml   |  0
 roles/logserver/tasks/syslog-ng.yml |  0
 roles/logserver/vars/archlinux.yml  |  8 ++++++++
 roles/logserver/vars/debian.yml     |  8 ++++++++
 roles/logserver/vars/ubuntu.yml     |  8 ++++++++
 7 files changed, 71 insertions(+)
 create mode 100644 roles/logserver/tasks/graylog.yml
 create mode 100644 roles/logserver/tasks/main.yml
 create mode 100644 roles/logserver/tasks/rsyslog.yml
 create mode 100644 roles/logserver/tasks/syslog-ng.yml
 create mode 100644 roles/logserver/vars/archlinux.yml
 create mode 100644 roles/logserver/vars/debian.yml
 create mode 100644 roles/logserver/vars/ubuntu.yml

diff --git a/roles/logserver/tasks/graylog.yml b/roles/logserver/tasks/graylog.yml
new file mode 100644
index 0000000..8d6e88d
--- /dev/null
+++ b/roles/logserver/tasks/graylog.yml
@@ -0,0 +1,23 @@
+- name: server | logserver | get mongodb signing key
+  uri:
+    url: "https://www.mongodb.org/static/pgp/server-{{ mongodb_version }}.asc" # required. HTTP or HTTPS URL in the form (http|https)://host.domain[:port]/path
+    dest: "/tmp/mongodb.asc"
+    creates: "/tmp/mongodb.asc"
+
+- name: server | logserver | import key
+  shell:
+    cmd: "cat /tmp/mongodb.asc | gpg --dearmor > /etc/apt/trusted.gpg.d/mongodb.gpg"
+    creates: "/etc/apt/trusted.gpg.d/mongodb.gpg"
+
+- name: server | logserver | create mongodb repo file
+  lineinfile:
+    path: "/etc/apt/sources.list.d/mongodb-org-{{ mongodb_version }}.list"
+    state: present
+    line: "deb http://repo.mongodb.org/apt/debian bullseye/mongodb-org/{{ mongodb_version }} main"
+    create: True
+
+- name: server | logserver | install mongodb
+  apt:
+    name: "{{ mongodb_pkg }}"
+    state: latest
+    update_cache: yes
diff --git a/roles/logserver/tasks/main.yml b/roles/logserver/tasks/main.yml
new file mode 100644
index 0000000..46c8564
--- /dev/null
+++ b/roles/logserver/tasks/main.yml
@@ -0,0 +1,24 @@
+- include_vars: "{{ ansible_distribution | lower }}.yml"
+  tags: always
+
+- block:
+  - block:
+    - include_tasks: graylog.yml
+    when: 
+      - graylog is defined
+      - graylog == true
+
+  - block:
+    - include_tasks: syslog-ng.yml
+    when:
+      - syslog-ng is defined
+      - syslog-ng == true
+
+  - block:
+    - include_tasks: rsyslog.yml
+    when:
+      - rsyslog is defined
+      - rsyslog == true
+
+  rescue:
+    - set_fact: task_failed=true
\ No newline at end of file
diff --git a/roles/logserver/tasks/rsyslog.yml b/roles/logserver/tasks/rsyslog.yml
new file mode 100644
index 0000000..e69de29
diff --git a/roles/logserver/tasks/syslog-ng.yml b/roles/logserver/tasks/syslog-ng.yml
new file mode 100644
index 0000000..e69de29
diff --git a/roles/logserver/vars/archlinux.yml b/roles/logserver/vars/archlinux.yml
new file mode 100644
index 0000000..87f0dad
--- /dev/null
+++ b/roles/logserver/vars/archlinux.yml
@@ -0,0 +1,8 @@
+syslogng_pkg: syslog-ng
+rsyslog_pkg: rsyslog
+
+# for graylog
+mongodb_version: 6.0
+mongodb_pkg: mongodb-org
+openjdk_pkg: openjdk-17-jdk-headless
+opensearch_pkg: 
\ No newline at end of file
diff --git a/roles/logserver/vars/debian.yml b/roles/logserver/vars/debian.yml
new file mode 100644
index 0000000..87f0dad
--- /dev/null
+++ b/roles/logserver/vars/debian.yml
@@ -0,0 +1,8 @@
+syslogng_pkg: syslog-ng
+rsyslog_pkg: rsyslog
+
+# for graylog
+mongodb_version: 6.0
+mongodb_pkg: mongodb-org
+openjdk_pkg: openjdk-17-jdk-headless
+opensearch_pkg: 
\ No newline at end of file
diff --git a/roles/logserver/vars/ubuntu.yml b/roles/logserver/vars/ubuntu.yml
new file mode 100644
index 0000000..87f0dad
--- /dev/null
+++ b/roles/logserver/vars/ubuntu.yml
@@ -0,0 +1,8 @@
+syslogng_pkg: syslog-ng
+rsyslog_pkg: rsyslog
+
+# for graylog
+mongodb_version: 6.0
+mongodb_pkg: mongodb-org
+openjdk_pkg: openjdk-17-jdk-headless
+opensearch_pkg: 
\ No newline at end of file