chore: enable filebeat for all hosts

playbook.yaml

@@ -16,8 +16,7 @@
   roles:
     - { role : signal, tags : [ "signal" ] }
 
-- hosts:
-    - kube1
+- hosts: all
   strategy: free
   roles:
     - { role : filebeat, tags : [ "filebeat" ] }

roles/base/tasks/main.yaml

@@ -9,6 +9,7 @@
         - apt-file
         - htop
         - ncdu
+        - gpg
 
 - name: Ensure Opt dir exists and accessible
   file:

roles/base/templates/wg-client.conf

@@ -0,0 +1,5 @@
+[Peer]
+PublicKey = {{ hypervisor_wg_public_key }}
+Endpoint= {{ hypervisor_internal_ip }}:51820
+AllowedIPs = 0.0.0.0/0
+PersistentKeepalive = 21

roles/base/templates/wg-hypervisor.conf

@@ -0,0 +1,11 @@
+[Interface]
+PrivateKey = <server_private_key>
+Address = 10.0.0.1/24
+ListenPort = 51820
+
+{% for client in clients %}
+# {{ client.name }}
+[Peer]
+PublicKey = <client1_public_key>
+AllowedIPs = 10.0.0.{{ loop.index + }}/32
+{% endfor %}

roles/filebeat/handlers/main.yml

@@ -0,0 +1,4 @@
+- name: restart filebeat
+  systemd:
+    name: filebeat
+    state: restarted

roles/filebeat/tasks/main.yaml

@@ -31,3 +31,10 @@
   ansible.builtin.systemd:
     name: filebeat
     enabled: yes
+
+- name: copy filebeat config
+  template:
+    src: filebeat.yml
+    dest: /etc/filebeat/filebeat.yml
+  notify:
+    - restart filebeat

roles/filebeat/templates/filebeat.yml

@@ -1,10 +1,16 @@
+logging.level: error
 filebeat.inputs:
 
 - type: filestream
   id: kube1-var-log
   enabled: true
   paths:
-    - /var/log/*.log
+    - /var/log/syslog
+  fields:
+    syslog: true
+  processors:
+    - syslog:
+        field: message
 
 - type: log
   paths: