diff options
| author | Jan Tuomi <jan@jantuomi.fi> | 2026-08-03 22:27:15 +0300 |
|---|---|---|
| committer | Jan Tuomi <jan@jantuomi.fi> | 2026-08-03 22:27:15 +0300 |
| commit | 017b29539749da3c62202879d757a45ffc71208c (patch) | |
| tree | e44ad456a4dd4e883b4496c4345c57d77a359819 /roles/host | |
| parent | 0eb9ce78949c148cb20c6396a15033b10f4eb902 (diff) | |
Improvements
Diffstat (limited to 'roles/host')
| -rw-r--r-- | roles/host/tasks/main.yml | 5 | ||||
| -rw-r--r-- | roles/host/templates/usr_local_etc_pylogsentinel.conf.j2 | 12 |
2 files changed, 10 insertions, 7 deletions
diff --git a/roles/host/tasks/main.yml b/roles/host/tasks/main.yml index 0840f08..2a18e7a 100644 --- a/roles/host/tasks/main.yml +++ b/roles/host/tasks/main.yml @@ -44,11 +44,6 @@ - bash - git - python312 - - py312-pip - - py312-setuptools - - py312-build - - py312-installer - - py312-wheel - python - fastfetch - vim diff --git a/roles/host/templates/usr_local_etc_pylogsentinel.conf.j2 b/roles/host/templates/usr_local_etc_pylogsentinel.conf.j2 index c3f000e..cf24b20 100644 --- a/roles/host/templates/usr_local_etc_pylogsentinel.conf.j2 +++ b/roles/host/templates/usr_local_etc_pylogsentinel.conf.j2 @@ -3,7 +3,10 @@ state_dir = /var/run/pylogsentinel max_block_size = 10M [logs.standard] -cmd = /usr/local/bin/fd -t f -E 'access.log' -E 'syncthing.log' '^[a-zA-Z-_]+(\.log|\.txt)$' /var/log /usr/local/jails/containers/*/var/log /usr/local/jails/containers/dl/usr/local/*/logs +cmd = /usr/local/bin/fd -t f -E 'access.log' -E 'syncthing.log' '^[a-zA-Z-_]+(\.log|\.txt)$' /var/log /usr/local/jails/containers/*/var/log + +[logs.arr] +cmd = /usr/local/bin/fd -t f '^[a-zA-Z-_]+(\.log|\.txt)$' /usr/local/jails/containers/dl/usr/local/*/logs [logs.access] paths = /usr/local/jails/containers/ingress/var/log/nginx/access.log @@ -11,11 +14,16 @@ paths = /usr/local/jails/containers/ingress/var/log/nginx/access.log [action.default] cmd = echo -e "---------\nMatched $RULE_ID in $FILE at line $LINE, context:\n\n$CONTEXT\n" >> /tmp/pylogsentinel.daily -[rule.error] +[rule.error_std] description = Error-like conditions pattern = /(error|fatal|exception|killed)/i logs = standard +[rule.error_arr] +description = Arr software error +pattern = /(\|error\|)/i +logs = arr + [rule.access] description = HTTP code >=500 in access log pattern = /HTTP\/[0-9].[0-9]" 5[0-9][0-9]/ |