dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

roles/graylog: Add Graylog server deployment

Browse Source 
The *graylog* role installs Graylog from the *graylog2.org* Yum
repository and manages basic server configuration.  It augments the
default systemd unit to provide the `CAP_NET_BIND_SERVICE` capability to
the Graylog server process via ambient capabilities, thereby allowing
the server to bind to the privileged Syslog UDP port.
This commit is contained in:
Dustin
2019-10-28 18:35:55 -05:00
parent 07eb3633e3
commit 3aad9c1dda
7 changed files with 800 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/graylog/files/graylog-server-capabilities.systemd.conf Normal file
View File

@@ -0,0 +1,3 @@
[Service]
# Allow graylog-server to bind to the privileged Syslog UDP port
AmbientCapabilities=CAP_NET_BIND_SERVICE