updated graylog, firewall, hass

ansible/roles/podman/tasks/containers/home/graylog.yml

@@ -10,7 +10,7 @@
   notify: restorecon podman
   loop:
     - "{{ graylog_path }}/mongo"
-    - "{{ graylog_path }}/elastic"
+    - "{{ graylog_path }}/opensearch"
     - "{{ graylog_path }}/conf"
     - "{{ graylog_path }}/bin"
 
@@ -29,12 +29,12 @@
       dest: "conf/graylog.conf"
   notify: restorecon podman
 
-- name: unshare chown the elastic volume
+- name: unshare chown the opensearch volume
   become: true
   become_user: "{{ podman_user }}"
   changed_when: false
   ansible.builtin.command: |
-    podman unshare chown -R 1000:1000 {{ graylog_path }}/elastic
+    podman unshare chown -R 1000:1000 {{ graylog_path }}/opensearch
 
 - name: flush handlers
   ansible.builtin.meta: flush_handlers
@@ -63,31 +63,33 @@
 
 - import_tasks: podman/podman-check.yml
   vars:
-    container_name: graylog-elastic
-    container_image: "{{ es_image }}"
+    container_name: graylog-opensearch
+    container_image: "{{ os_image }}"
 
-- name: create graylog elasticsearch container
+- name: create graylog opensearch container
   become: true
   become_user: "{{ podman_user }}"
   containers.podman.podman_container:
-    name: graylog-elastic
-    image: "{{ es_image }}" 
+    name: graylog-opensearch
+    image: "{{ os_image }}" 
     restart_policy: on-failure:3
     network:
       - shared
     volumes:
-      - "{{ graylog_path }}/elastic:/usr/share/elasticsearch/data"
+      - "{{ graylog_path }}/opensearch:/usr/share/opensearch/data"
     env:
-      http.host: "0.0.0.0"
-      transport.host: "localhost"
-      network.host: "0.0.0.0"
-      cluster.name: "graylog"
-      ES_JAVA_OPTS: "-Dlog4j2.formatMsgNoLookups=true -Xms512m -Xmx2048m"
+      OPENSEARCH_JAVA_OPTS: "-Xms1g -Xmx1g"
+      bootstrap.memory_lock: "true"
+      discovery.type: "single-node"
+      action.auto_create_index: "false"
+      plugins.security.ssl.http.enabled: "false"
+      plugins.security.disabled: "true"
+      OPENSEARCH_INITIAL_ADMIN_PASSWORD: "{{ graylog_secret }}"
 
-- name: create systemd startup job for graylog-elastic
+- name: create systemd startup job for graylog-opensearch
   include_tasks: podman/systemd-generate.yml
   vars:
-    container_name: graylog-elastic
+    container_name: graylog-opensearch
 
 - import_tasks: podman/podman-check.yml
   vars:
@@ -115,7 +117,8 @@
       GRAYLOG_HTTP_EXTERNAL_URI: http://{{ ansible_default_ipv4.address }}:9000/
       GRAYLOG_HTTP_BIND_ADDRESS: 0.0.0.0:9000
       GRAYLOG_MONGODB_URI: mongodb://graylog-mongo/graylog
-      GRAYLOG_ELASTICSEARCH_HOSTS: http://graylog-elastic:9200
+      GRAYLOG_ELASTICSEARCH_HOSTS: http://graylog-opensearch:9200
+      GRAYLOG_REPORT_DISABLE_SANDBOX: "true"
     ports:
       - "{{ graylog_port }}:9000"
       - "{{ syslog_udp_default }}:{{ syslog_udp_default }}/udp"

ansible/roles/podman/tasks/containers/home/hass.yml

@@ -15,6 +15,7 @@
 - name: copy configuration and automations
   become: true
   ansible.builtin.copy:
+    backup: true
     src: "files/hass/{{ item }}"
     dest: "{{ hass_path }}/config/{{ item }}"
     owner: "{{ podman_user }}"

ansible/roles/podman/tasks/firewall.yml

@@ -27,9 +27,9 @@
     # Factorio
     - 27015/tcp
     - 34197/udp
-    # Palworld
-    - 8211/udp
-    - 25575/udp
+    # Zomboid
+    - 16261/udp
+    - 16262/udp
   notify: restart firewalld
   tags: firewall
 
@@ -54,5 +54,8 @@
     # cam2ip
     - 56000/tcp
     - 56000/udp
+    # Palworld
+    - 8211/udp
+    - 25575/udp
   notify: restart firewalld
   tags: firewall

ansible/roles/podman/tasks/main.yml

@@ -22,7 +22,7 @@
 
 - import_tasks: containers/home/hass.yml
   vars:
-    image: ghcr.io/home-assistant/home-assistant:2023.11
+    image: ghcr.io/home-assistant/home-assistant:2024.6.4
   tags: hass
 
 - import_tasks: containers/home/partkeepr.yml
@@ -33,15 +33,15 @@
 
 - import_tasks: containers/home/graylog.yml
   vars:
-    db_image: docker.io/library/mongo:4.2
-    es_image: docker.elastic.co/elasticsearch/elasticsearch-oss:7.10.2
-    image: docker.io/graylog/graylog:4.3.11
+    db_image: docker.io/library/mongo:6.0.14
+    os_image: docker.io/opensearchproject/opensearch:2.12.0
+    image: docker.io/graylog/graylog:5.2
   tags: graylog
 
 - import_tasks: containers/skudak/wiki.yml
   vars:
     db_image: docker.io/library/mysql:5.7.21
-    image: docker.io/solidnerd/bookstack:23.12
+    image: docker.io/solidnerd/bookstack:24.5
   tags: skudak, skudak-wiki
 
 - import_tasks: containers/home/photos.yml