Initial import

Signed-off-by: Thomas Schneider <qsx@qsx.re>

journal-remote/files/http.conf

+[Service]
+ExecStart=
+ExecStart=/lib/systemd/systemd-journal-remote --listen-http=-3 --output=/var/log/journal/remote/

journal-remote/handlers/main.yml

+- name: Run systemd-tmpfiles
+  command: systemd-tmpfiles --create --prefix=/var/log/journal/remote

journal-remote/tasks/main.yml

+- name: Install systemd-journal-remote
+  apt:
+    name: systemd-journal-remote
+    state: present
+  tags:
+    - journal-remote
+    - packages
+
+- name: Ensure presence of unit drop-in config directory
+  file:
+    path: /etc/systemd/system/systemd-journal-remote.service.d
+    owner: root
+    group: root
+    mode: 0755
+    state: directory
+  tags:
+    - journal-remote
+    - config
+
+- name: Configure journal-remote to use HTTP
+  copy:
+    dest: /etc/systemd/system/systemd-journal-remote.service.d/http.conf
+    owner: root
+    group: root
+    mode: 0644
+    src: http.conf
+  tags:
+    - journal-remote
+    - config
+
+- name: Ensure journal-remote directory is present
+  file:
+    path: /var/log/journal/remote
+    state: directory
+  notify:
+    - Run systemd-tmpfiles
+  tags:
+    - journal-remote
+
+- name: Enable journal-remote service
+  systemd:
+    name: systemd-journal-remote.socket
+    enabled: yes
+    daemon_reload: yes
+    state: started
+  tags:
+    - journal-remote
+    - service

journal-upload/tasks/main.yml

+- name: Install systemd-journal-remote
+  apt:
+    name: systemd-journal-remote
+    state: present
+  tags:
+    - journal-upload
+    - packages
+
+- name: Configure systemd-journal-upload
+  template:
+    dest: /etc/systemd/journal-upload.conf
+    src: journal-upload.conf
+  tags:
+    - journal-upload
+    - config
+
+- name: Enable journal-upload service
+  systemd:
+    name: systemd-journal-upload.service
+    enabled: yes
+    state: started
+  tags:
+    - journal-upload
+    - service

journal-upload/templates/journal-upload.conf

+[Upload]
+URL={{journal_remote_host}}
+# ServerKeyFile=/etc/ssl/private/journal-upload.pem
+# ServerCertificateFile=/etc/ssl/certs/journal-upload.pem
+# TrustedCertificateFile=/etc/ssl/ca/trusted.pem