chore: fluent-bit zomboid, zomboid stats, home assistant, gregbot

ansible/roles/podman/tasks/containers/home/gregtime.yml

@@ -52,6 +52,7 @@
       - "{{ gregtime_path }}/logs:/app/logs"
       - "{{ gregtime_path }}/data:/app/data"
       - "{{ zomboid_path }}/data:/zomboid-logs:ro"
+      - "{{ podman_volumes }}/zomboid-stats.json:/app/data/zomboid-stats.json:ro"
 
 - name: create systemd startup job for gregtime
   include_tasks: podman/systemd-generate.yml

ansible/roles/podman/tasks/containers/home/zomboid.yml

@@ -64,7 +64,7 @@
 - name: create zomboid stats file with correct permissions
   become: true
   ansible.builtin.file:
-    path: "{{ gregtime_path }}/data/zomboid-stats.json"
+    path: "{{ podman_volumes }}/zomboid-stats.json"
     state: touch
     owner: "{{ podman_user }}"
     group: "{{ podman_user }}"
@@ -279,6 +279,28 @@
     - zomboid_ini_stat.stat.exists
   tags: zomboid-conf
 
+# Firewall logging for player IP correlation
+# Logs new UDP connections to Zomboid port for IP address tracking
+- name: add firewall rule to log zomboid connections
+  become: true
+  ansible.builtin.command: >
+    firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0
+    -p udp --dport 16261 -m conntrack --ctstate NEW
+    -j LOG --log-prefix "ZOMBOID_CONN: " --log-level 4
+  register: firewall_result
+  changed_when: "'already' not in firewall_result.stderr"
+  failed_when: false
+  notify: restart firewalld
+
+- name: add firewall rule to log zomboid connections (runtime)
+  become: true
+  ansible.builtin.command: >
+    firewall-cmd --direct --add-rule ipv4 filter INPUT 0
+    -p udp --dport 16261 -m conntrack --ctstate NEW
+    -j LOG --log-prefix "ZOMBOID_CONN: " --log-level 4
+  changed_when: false
+  failed_when: false
+
 # World reset is now triggered via Discord bot -> systemd path unit
 # See zomboid-world-reset.path and zomboid-world-reset.service
 - name: enable zomboid world reset path unit