+++ /dev/null
-- name: Install logcheck (Debian)
- become: true
- apt:
- autoclean: yes
- autoremove: yes
- cache_valid_time: 3600
- install_recommends: no
- name: ['logcheck', 'logcheck-database']
- state: latest
- update_cache: yes
- when: ansible_facts.os_family == 'Debian'
-
-- name: Install logcheck (RedHat)
- become: true
- dnf:
- name: logcheck
- state: latest
- update_cache: yes
- when: ansible_facts.os_family == 'RedHat'
-
-- name: Configure logcheck - intro
- become: true
- lineinfile:
- path: /etc/logcheck/logcheck.conf
- regexp: "^INTRO=0$"
- line: "INTRO=0"
- insertafter: "^#INTRO=1$"
-
-- name: Configure logcheck - send email to root
- become: true
- lineinfile:
- path: /etc/aliases
- line: 'logcheck: root'
-
-- name: Update logcheck ignore files
- become: true
- copy:
- src: ignore.d/
- dest: "/etc/logcheck/ignore.d.{{ item }}"
- owner: root
- group: logcheck
- directory_mode: '0750'
- mode: 0640
- loop: ['server', 'workstation']