playbooks/roles/logcheck/tasks/main.yml

   1 - name: Install logcheck (Debian)
   2   become: true
   3   apt:
   4     autoclean: yes
   5     autoremove: yes
   6     cache_valid_time: 3600
   7     install_recommends: no
   8     name: logcheck
   9     state: latest
  10     update_cache: yes
  11   when: ansible_facts.os_family == 'Debian'
  12
  13 - name: Install logcheck (RedHat)
  14   become: true
  15   dnf:
  16     name: logcheck
  17     state: latest
  18     update_cache: yes
  19   when: ansible_facts.os_family == 'RedHat'
  20
  21 - name: Configure logcheck - intro
  22   become: true
  23   lineinfile:
  24     path: /etc/logcheck/logcheck.conf
  25     regexp: "^INTRO=0$"
  26     line: "INTRO=0"
  27     insertafter: "^#INTRO=1$"
  28
  29 - name: Configure logcheck - send email to root
  30   become: true
  31   lineinfile:
  32     path: /etc/logcheck/logcheck.conf
  33     regexp: '^SENDMAILTO="root"$'
  34     line: 'SENDMAILTO="root"'
  35     insertafter: '^SENDMAILTO="logcheck"$'
  36
  37 - name: Configure logcheck - do not send email to logcheck
  38   become: true
  39   lineinfile:
  40     path: /etc/logcheck/logcheck.conf
  41     regexp: '^SENDMAILTO="logcheck"$'
  42     state: absent
  43
  44 - name: Update logcheck ignore files
  45   become: true
  46   copy:
  47     src: ignore.d/
  48     dest: "/etc/logcheck/ignore.d.{{ item }}"
  49     owner: root
  50     group: logcheck
  51     directory_mode: '0750'
  52     mode: 0640
  53   loop: ['server', 'workstation']