92 lines
2.5 KiB
YAML
92 lines
2.5 KiB
YAML
---
|
|
- name: create graylog docker network
|
|
community.general.docker_network:
|
|
name: "graylog"
|
|
tags: graylog
|
|
|
|
- name: create graylog required volumes
|
|
community.general.docker_volume:
|
|
name: "{{ item }}"
|
|
with_items:
|
|
- graylog-db
|
|
- graylog-es
|
|
- graylog-conf
|
|
tags: graylog
|
|
|
|
- name: create graylog mongodb container
|
|
community.general.docker_container:
|
|
name: graylog-mongo
|
|
image: mongo:4.2
|
|
recreate: false
|
|
restart: false
|
|
restart_policy: on-failure
|
|
restart_retries: 3
|
|
networks:
|
|
- name: "graylog"
|
|
volumes:
|
|
- graylog-db:/data/db
|
|
tags: graylog
|
|
|
|
- name: create graylog elasticsearch container
|
|
community.general.docker_container:
|
|
name: graylog-elastic
|
|
image: docker.elastic.co/elasticsearch/elasticsearch-oss:7.10.2
|
|
recreate: false
|
|
restart: false
|
|
restart_policy: on-failure
|
|
restart_retries: 3
|
|
networks:
|
|
- name: "graylog"
|
|
volumes:
|
|
- graylog-es:/usr/share/elasticsearch/data
|
|
env:
|
|
http.host: "0.0.0.0"
|
|
transport.host: "localhost"
|
|
network.host: "0.0.0.0"
|
|
cluster.name: "graylog"
|
|
ES_JAVA_OPTS: "-Dlog4j2.formatMsgNoLookups=true -Xms512m -Xmx2048m"
|
|
ulimits:
|
|
- "memlock:-1:-1"
|
|
- "nofile:64000:64000"
|
|
memory: 1G
|
|
tags: graylog
|
|
|
|
- name: create graylog container
|
|
community.general.docker_container:
|
|
name: graylog
|
|
image: graylog/graylog:4.2
|
|
recreate: false
|
|
restart: true
|
|
restart_policy: on-failure
|
|
restart_retries: 3
|
|
sysctls:
|
|
net.ipv6.conf.all.disable_ipv6: 1
|
|
net.ipv6.conf.default.disable_ipv6: 1
|
|
networks:
|
|
- name: "graylog"
|
|
volumes:
|
|
- graylog-conf:/usr/share/graylog/data/config
|
|
- /var/lib/docker/shared/graylog:/usr/share/graylog/bin:z
|
|
env:
|
|
GRAYLOG_PASSWORD_SECRET: "{{ graylog_secret }}"
|
|
GRAYLOG_ROOT_PASSWORD_SHA2: "{{ graylog_root_pass_sha2 }}"
|
|
GRAYLOG_HTTP_EXTERNAL_URI: http://192.168.1.10:9000/
|
|
GRAYLOG_HTTP_BIND_ADDRESS: 0.0.0.0:9000
|
|
GRAYLOG_MONGODB_URI: mongodb://graylog-mongo/graylog
|
|
GRAYLOG_ELASTICSEARCH_HOSTS: http://graylog-elastic:9200
|
|
ports:
|
|
# Graylog web interface and REST API
|
|
- "{{ graylog_port }}:9000"
|
|
# Syslog TCP
|
|
# Syslog UDP
|
|
- "0.0.0.0:{{ syslog_udp_default }}:{{ syslog_udp_default }}/udp"
|
|
# Syslog2 UDP
|
|
- "0.0.0.0:{{ syslog_udp_unifi }}:{{ syslog_udp_unifi }}/udp"
|
|
# Syslog2 UDP
|
|
- "0.0.0.0:{{ syslog_udp_error }}:{{ syslog_udp_error }}/udp"
|
|
# GELF TCP
|
|
# - 12201:12201
|
|
# GELF UDP
|
|
# - 12201:12201/udp
|
|
tags: graylog
|