rule => '&SERVICE_RANGE(tcp, 3493, ( 82.195.75.64/26 192.168.43.0/24 ))'
}
}
- lotti,lully,loghost-grnet-01: {
+ lotti,lully,loghost-grnet-01,loghost-osuosl-01: {
@ferm::rule { 'dsa-syslog':
description => 'Allow syslog access',
rule => '&SERVICE_RANGE(tcp, 5140, $HOST_DEBIAN_V4)'
source => 'puppet:///modules/syslog_ng/syslog-ng.logrotate',
require => Package['syslog-ng']
}
- if $::hostname in [lotty,lully,loghost-grnet-01] {
+ if $::hostname in [lotty,lully,loghost-grnet-01,loghost-osuosl-01] {
file { '/etc/logrotate.d/syslog-ng-loggers':
source => 'puppet:///modules/syslog_ng/syslog-ng.logrotate.loggers',
require => Package['syslog-ng']
<%- end -%>
};
-<%- if (@hostname == "lotti") || (@hostname == "lully") || (@hostname == "loghost-grnet-01") -%>
+<%- if (@hostname == "lotti") || (@hostname == "lully") || (@hostname == "loghost-grnet-01") || (@hostname == "loghost-osuosl-01") -%>
source s_network {
tcp6(port(5140) max-connections(400)
tls( key_file("/etc/exim4/ssl/thishost.key")
ca_dir("/etc/ssl/debian/certs/")
)
);
+};
+ <%- end -%>
+ <%- if @hostname != "loghost-osuosl-01" -%>
+destination loghost-loghost-osuosl-01 {
+ tcp("loghost-osuosl-01.debian.org" port (5140)
+ tls( key_file("/etc/ssl/private/thishost.key")
+ cert_file("/etc/ssl/debian/certs/thishost.crt")
+ ca_dir("/etc/ssl/debian/certs/")
+ )
+ );
};
<%- end -%>
<%- if @hostname != "loghost-grnet-01" -%>
destination(loghost-loghost-grnet-01);
<%- end -%>
+ <%- if @hostname != "loghost-osuosl-01" -%>
+ destination(loghost-loghost-osuosl-01);
+ <%- end -%>
};
-<%- if (@hostname == "lotti") || (@hostname == "lully") || (@hostname == "loghost-grnet-01") -%>
+<%- if (@hostname == "lotti") || (@hostname == "lully") || (@hostname == "loghost-grnet-01") || (@hostname == "loghost-osuosl-01") -%>
###############################################################################
########## ON LOG HOST ########################################################
###############################################################################