move ssl/debian into IgnoreAll

[mirror/dsa-puppet.git] / templates / syslog-ng.conf.erb

diff --git a/templates/syslog-ng.conf.erb b/templates/syslog-ng.conf.erb
index 637250b..f21ccc5 100644 (file)
--- a/templates/syslog-ng.conf.erb
+++ b/templates/syslog-ng.conf.erb
@@ -1,3 +1,11 @@
+<% if syslogversion == "3" -%>
+@version: 3.0
+<%end%>
+##
+## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
+## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
+##
+
 #
 # Configuration file for syslog-ng under Debian
 #
@@ -83,23 +91,44 @@ options {
 source s_all {
         # message generated by Syslog-NG
         internal();
-<% if $kernel == 'Linux' %>
+<% if kernel == 'Linux' %>
         # standard Linux log source (this is the default place for the syslog()
         # function to send logs to)
         unix-stream("/dev/log");
         # messages from the kernel
+<% if syslogversion == "2" -%>
         file("/proc/kmsg" log_prefix("kernel: "));
 <% else %>
+        file("/proc/kmsg" program_override("kernel: "));
+<%end%>
+<%else%>
         # standard Linux log source (this is the default place for the syslog()
         # function to send logs to)
         unix-dgram("/var/run/log");
         # messages from the kernel
+<% if syslogversion == "2" -%>
         file("/dev/klog" log_prefix("kernel: "));
+<% else %>
+        file("/dev/klog" program_override("kernel: "));
 <%end%>
+<%end%>
+<% if hostname == "paganini" -%>
         # use the following line if you want to receive remote UDP logging messages
         # (this is equivalent to the "-r" syslogd flag)
-        # udp();
+        udp();
+<%end%>
+};
+
+<% if hostname == "heininen" -%>
+source s_network {
+       tcp6(port(5140)
+               tls( key_file("/etc/exim4/ssl/thishost.key")
+                    cert_file("/etc/exim4/ssl/thishost.cert")
+                    ca_dir("/etc/exim4/ssl/")
+               )
+       );
 };
+<%end%>
 
 
 ######
@@ -138,10 +167,12 @@ destination df_news_dot_crit { file("/var/log/news/news.crit" owner("news")); };
 destination df_debug { file("/var/log/debug"); };
 destination df_messages { file("/var/log/messages"); };
 
+<% if kernel == 'Linux' %>
 # pipes
 # a console to view log messages under X
 destination dp_xconsole { pipe("/dev/xconsole"); };
 
+<% end %>
 # consoles
 # this will send messages to everyone logged in
 destination du_all { usertty("*"); };
@@ -190,6 +221,7 @@ filter f_messages {
 # messages with priority emerg
 filter f_emerg { level(emerg); };
 
+<% if kernel == 'Linux' %>
 # complex filter for messages usually sent to the xconsole
 filter f_xconsole {
     facility(daemon,mail)
@@ -198,7 +230,7 @@ filter f_xconsole {
                 and level(crit,err,notice));
 };
 
-
+<% end %>
 ######
 # logs
 # order matters if you use "flags(final);" to mark the end of processing in a
@@ -209,6 +241,9 @@ filter f_xconsole {
 # auth,authpriv.*                 /var/log/auth.log
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_auth);
         destination(df_auth);
 };
@@ -216,6 +251,9 @@ log {
 # *.*;auth,authpriv.none          -/var/log/syslog
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_syslog);
         destination(df_syslog);
 };
@@ -231,6 +269,9 @@ log {
 # daemon.*                        -/var/log/daemon.log
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_daemon);
         destination(df_daemon);
 };
@@ -238,6 +279,9 @@ log {
 # kern.*                          -/var/log/kern.log
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_kern);
         destination(df_kern);
 };
@@ -245,6 +289,9 @@ log {
 # lpr.*                           -/var/log/lpr.log
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_lpr);
         destination(df_lpr);
 };
@@ -252,6 +299,9 @@ log {
 # mail.*                          -/var/log/mail.log
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_mail);
         destination(df_mail);
 };
@@ -259,6 +309,9 @@ log {
 # user.*                          -/var/log/user.log
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_user);
         destination(df_user);
 };
@@ -266,6 +319,9 @@ log {
 # uucp.*                          /var/log/uucp.log
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_uucp);
         destination(df_uucp);
 };
@@ -273,6 +329,9 @@ log {
 # mail.info                       -/var/log/mail.info
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_mail);
         filter(f_at_least_info);
         destination(df_mail_info);
@@ -281,6 +340,9 @@ log {
 # mail.warn                       -/var/log/mail.warn
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_mail);
         filter(f_at_least_warn);
         destination(df_mail_warn);
@@ -289,6 +351,9 @@ log {
 # mail.err                        /var/log/mail.err
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_mail);
         filter(f_at_least_err);
         destination(df_mail_err);
@@ -297,6 +362,9 @@ log {
 # news.crit                       /var/log/news/news.crit
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_news);
         filter(f_at_least_crit);
         destination(df_news_dot_crit);
@@ -305,6 +373,9 @@ log {
 # news.err                        /var/log/news/news.err
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_news);
         filter(f_at_least_err);
         destination(df_news_dot_err);
@@ -313,6 +384,9 @@ log {
 # news.notice                     /var/log/news/news.notice
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_news);
         filter(f_at_least_notice);
         destination(df_news_dot_notice);
@@ -324,6 +398,9 @@ log {
 #         news.none;mail.none     -/var/log/debug
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_debug);
         destination(df_debug);
 };
@@ -335,6 +412,9 @@ log {
 #         mail,news.none          -/var/log/messages
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_messages);
         destination(df_messages);
 };
@@ -342,18 +422,36 @@ log {
 # *.emerg                         *
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_emerg);
         destination(du_all);
 };
 
 
+<% if kernel == 'Linux' %>
 # daemon.*;mail.*;\
 #         news.crit;news.err;news.notice;\
 #         *.=debug;*.=info;\
 #         *.=notice;*.=warn       |/dev/xconsole
 log {
         source(s_all);
+<% if hostname == "heininen" -%>
+        source(s_network);
+<% end %>
         filter(f_xconsole);
         destination(dp_xconsole);
 };
+<%end%>
+
+<% if hostname == "corelli" -%>
+destination loghost-paganini {
+       udp("192.168.2.10",port(514));
+};
 
+log {
+       source(s_all);
+       destination(loghost-paganini);
+};
+<%end%>