playbooks/roles/logcheck/tasks/main.yaml

   1 - name: Install logcheck (Debian)
   2   become: true
   3   apt:
   4     autoclean: yes
   5     autoremove: yes
   6     cache_valid_time: 3600
   7     install_recommends: no
   8     name: ['logcheck', 'logcheck-database']
   9     state: latest
  10     update_cache: yes
  11   when: ansible_facts.os_family == 'Debian'
  12
  13 - name: Install logcheck (RedHat)
  14   become: true
  15   dnf:
  16     name: logcheck
  17     state: latest
  18     update_cache: yes
  19   when: ansible_facts.os_family == 'RedHat'
  20
  21 - name: Configure logcheck - intro
  22   become: true
  23   lineinfile:
  24     path: /etc/logcheck/logcheck.conf
  25     regexp: "^INTRO=0$"
  26     line: "INTRO=0"
  27     insertafter: "^#INTRO=1$"
  28
  29 - name: Configure logcheck - disable systemd journal
  30   become: true
  31   lineinfile:
  32     path: /etc/logcheck/logcheck.logfiles.d/journal.logfiles
  33     regexp: "^journal$"
  34     line: "#journal"
  35
  36 - name: Configure logcheck - send email to root
  37   become: true
  38   lineinfile:
  39     path: /etc/aliases
  40     line: 'logcheck: root'
  41
  42 - name: Update logcheck ignore files
  43   become: true
  44   copy:
  45     src: "{{ ansible_facts.user_dir }}/admin/ansible/playbooks/roles/logcheck/files/ignore.d/"
  46     remote_src: true
  47     dest: "/etc/logcheck/ignore.d.{{ item }}"
  48     owner: root
  49     group: logcheck
  50     directory_mode: '0750'
  51     mode: 'u=rwX,g=rX,o='
  52   loop: ['server', 'workstation']