diff --git a/ansible/roles/common_deb/tasks/main.yml b/ansible/roles/common_deb/tasks/main.yml index b36bbf757eda045affd101df6e8c7c55d3450e18..1e44ab9cd09ad3ed74d5d993c8a5bfc308892ae9 100644 --- a/ansible/roles/common_deb/tasks/main.yml +++ b/ansible/roles/common_deb/tasks/main.yml @@ -327,3 +327,58 @@ apt: pkg: - sysbench + +- name: LVM logging + lineinfile: + path: /etc/lvm/lvm.conf + regexp: '^([ \t]*)(# )?{{item.key}} =' + line: '\1{{item.key}} = {{item.value}} ## set by ansible' + backrefs: true + with_items: + - key: 'syslog' + value: '1' + - key: 'level' + value: '3' + +- name: Log monitoring + block: + - name: "Monitor group" + group: + name: "mon" + system: true + + - name: "Monitor user" + user: + name: "mon" + system: true + create_home: true + home: "/srv/mon" + shell: "/usr/sbin/nologin" + group: "mon" + groups: ["systemd-journal"] + + - name: "Journal checker" + copy: + src: "../bin/{{item}}" + dest: "/usr/bin/{{item}}" + mode: "u=rx,g=rx,o=rx" + loop: + - "journal-checker" + - "dfwatch" + + - name: "Cron monitoring setup – mail" + cron: + user: "mon" + env: true + name: "MAILTO" + job: "{{admin_email}}" + + - name: "Cron monitoring setup – jobs" + cron: + user: "mon" + name: "{{item.1}}" + special_time: "{{item.0}}" + job: "/usr/bin/{{item.1}}" + loop: + - ["hourly", "journal-checker"] + - ["daily", "dfwatch"]