#!/bin/sh
-# Copyright (c) 2023 Jakub Czajka <jakub@ekhem.eu.org>
+# Copyright (c) 2023-2024 Jakub Czajka <jakub@ekhem.eu.org>
# License: GPL-3.0 or later.
-DEPLOYABLE="dovecot fail2ban git matrix nginx opendkim postfix postgres sshd"
+DEPLOYABLE="dovecot fail2ban git matrix nginx opendkim postfix postgres rsyslog\
+ sshd"
while read old_revision new_revision branch
do
--- /dev/null
+# Copyright (c) 2024 Jakub Czajka <jakub@ekhem.eu.org>
+# License: GPL-3.0 or later.
+
+- hosts: servers
+ vars:
+ repo: "{{ ansible_local.env.vars.git_home_dir }}/server.git"
+ tasks:
+ - name: Install rsyslog's packages
+ package:
+ name:
+ - rsyslog
+ - rsyslog-pgsql
+ state: latest
+ become: true
+ - name: Checkout rsyslog's configuration files to /tmp
+ command: git --work-tree=/tmp --git-dir={{ repo }} checkout main --force \
+ rsyslog/*
+ become: true
+ - name: Copy files from /tmp/rsyslog to /etc/rsyslog.d
+ shell: envsubst < /tmp/rsyslog/{{ item }} > /etc/rsyslog.d/{{ item }}
+ environment: "{{ ansible_local.env.vars }}"
+ become: true
+ with_items:
+ - 51-website.conf
+ - name: Restart rsyslog
+ service:
+ name: rsyslog
+ state: restarted
+ become: true