Feat(debian-logcheck): Add a playbook to update logcheck ignore files

diff --git a/playbooks/debian-logcheck.yml b/playbooks/debian-logcheck.yml
new file mode 100644 (file)
index 0000000..1311f45
--- /dev/null
+++ b/playbooks/debian-logcheck.yml
@@ -0,0 +1,5 @@
+- name: Update logcheck ignore patterns
+  hosts: "{{ hosts | default('all') }}"
+  gather_facts: false
+  roles:
+    - debian-logcheck

diff --git a/playbooks/roles/debian-logcheck/README.txt b/playbooks/roles/debian-logcheck/README.txt
new file mode 100644 (file)
index 0000000..670499d
--- /dev/null
+++ b/playbooks/roles/debian-logcheck/README.txt
@@ -0,0 +1 @@
+Update logcheck ignore patterns.

diff --git a/playbooks/roles/debian-logcheck/files/.gitignore b/playbooks/roles/debian-logcheck/files/.gitignore
new file mode 100644 (file)
index 0000000..d6b7ef3
--- /dev/null
+++ b/playbooks/roles/debian-logcheck/files/.gitignore
@@ -0,0 +1,2 @@
+*
+!.gitignore

diff --git a/playbooks/roles/debian-logcheck/tasks/main.yml b/playbooks/roles/debian-logcheck/tasks/main.yml
new file mode 100644 (file)
index 0000000..1aa03f4
--- /dev/null
+++ b/playbooks/roles/debian-logcheck/tasks/main.yml
@@ -0,0 +1,9 @@
+- name: Update logcheck ignore patterns
+  become: true
+  copy:
+    src: ignore.d/
+    dest: "{{ item }}"
+    owner: root
+    group: logcheck
+    mode: 0640
+  loop: ['/etc/logcheck/ignore.d.server', '/etc/logcheck/ignore.d.workstation']