First version in Galaxy

seb4itik/byow/roles/ovh_ldp/README.md

@@ -0,0 +1,5 @@
+# BYOW - Build Your Own WAF
+
+A WAF _à la carte_.
+
+## OVH Log Data Platform

seb4itik/byow/roles/ovh_ldp/defaults/main.yml

@@ -0,0 +1,6 @@
+# Required
+ovh_ldp_token: null
+ovh_ldp_cluster: null
+
+# Defaults
+ovh_ldp_tls_syslog_port: 6514

seb4itik/byow/roles/ovh_ldp/handlers/main.yml

@@ -0,0 +1,5 @@
+- name: Restart syslog-ng
+  ansible.builtin.service:
+    name: "syslog-ng"
+    state: "restarted"
+    daemon_reload: true

seb4itik/byow/roles/ovh_ldp/tasks/main.yml

@@ -0,0 +1,13 @@
+- name: Install syslog-ng
+  ansible.builtin.apt:
+    name:
+      - "syslog-ng"
+      - "ca-certificates"
+
+- name: Generate syslog-ng config file for OVH LDP
+  ansible.builtin.template:
+    src: "templates/ldp-ovh.conf"
+    dest: "/etc/syslog-ng/conf.d/ldp-ovh.conf"
+    mode: "0640"
+  notify:
+    - "Restart syslog-ng"

seb4itik/byow/roles/ovh_ldp/templates/ldp-ovh.conf

@@ -0,0 +1,22 @@
+rewrite ovh-token {
+    set("{{ ovh_ldp_token }}", value(".SDATA.token@29084.X-OVH-TOKEN"));
+};
+
+destination ovhPaaSLogs {
+    network("{{ ovh_ldp_cluster }}"
+        port({{ ovh_ldp_tls_syslog_port }})
+        transport("tls")
+        flags(syslog-protocol)
+        ts_format("iso")
+        frac-digits(6)
+        tls(peer-verify("required-trusted") ca_dir("/etc/ssl/certs/"))
+        keep-alive(yes)
+        so_keepalive(yes)
+    );
+};
+
+log {
+    source(s_src);
+    rewrite(ovh-token);
+    destination(ovhPaaSLogs);
+};