6af3c5dc69
- Add fluent-bit inputs for Caddy access logs (JSON) and SSH logs - Create GeoIP task to download MaxMind GeoLite2-City database - Mount GeoIP database in Graylog container - Enable Gitea access logging via environment variables - Add parsers.conf for Caddy JSON log parsing - Remove unused nosql/redis container and configuration Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
65 lines
1.5 KiB
YAML
65 lines
1.5 KiB
YAML
---
|
|
# Fluent Bit - Log forwarder from journald to Graylog GELF
|
|
# Deployed as systemd service (not container) for direct journal access
|
|
|
|
# Clean up old container deployment if it exists
|
|
- name: stop and remove fluent-bit container if exists
|
|
become: true
|
|
become_user: "{{ podman_user }}"
|
|
containers.podman.podman_container:
|
|
name: fluent-bit
|
|
state: absent
|
|
ignore_errors: true
|
|
|
|
- name: disable old fluent-bit container systemd service
|
|
become: true
|
|
become_user: "{{ podman_user }}"
|
|
ansible.builtin.systemd:
|
|
name: fluent-bit
|
|
enabled: false
|
|
state: stopped
|
|
scope: user
|
|
ignore_errors: true
|
|
|
|
- name: install fluent-bit package
|
|
become: true
|
|
ansible.builtin.dnf:
|
|
name: fluent-bit
|
|
state: present
|
|
|
|
- name: create fluent-bit state directory for tail db files
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: /var/lib/fluent-bit
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
|
|
- name: deploy fluent-bit parsers configuration
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: fluent-bit/parsers.conf.j2
|
|
dest: /etc/fluent-bit/parsers.conf
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
notify: restart fluent-bit
|
|
|
|
- name: deploy fluent-bit configuration
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: fluent-bit/fluent-bit.conf.j2
|
|
dest: /etc/fluent-bit/fluent-bit.conf
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
notify: restart fluent-bit
|
|
|
|
- name: enable and start fluent-bit service
|
|
become: true
|
|
ansible.builtin.systemd:
|
|
name: fluent-bit
|
|
enabled: true
|
|
state: started
|