The Unifi Network controller runs a syslog server (listening on UDP port 5514) where Unifi devices can send their logs. We need to open the port in the firewall in order for it to receive log messages and write them to disk.
52 lines
1.0 KiB
YAML
52 lines
1.0 KiB
YAML
- name: ensure unifi.container systemd unit exists
|
|
template:
|
|
src: unifi.container.j2
|
|
dest: /etc/containers/systemd/unifi.container
|
|
owner: root
|
|
group: root
|
|
mode: u=rw,go=r
|
|
notify:
|
|
- reload systemd
|
|
- restart unifi
|
|
tags:
|
|
- container
|
|
- name: flush_handlers
|
|
meta: flush_handlers
|
|
|
|
- name: ensure unifi.service is running
|
|
systemd:
|
|
name: unifi.service
|
|
state: started
|
|
tags:
|
|
- service
|
|
|
|
- name: ensure firewall is configured for unifi
|
|
firewalld:
|
|
port: 8080/tcp
|
|
permanent: true
|
|
immediate: true
|
|
state: enabled
|
|
when: host_uses_firewalld|d(true)|bool
|
|
tags:
|
|
- firewalld
|
|
|
|
- name: ensure firewall is configured for unifi syslog
|
|
firewalld:
|
|
port: 5514/udp
|
|
permanent: true
|
|
immediate: true
|
|
state: enabled
|
|
when: host_uses_firewalld|d(true)|bool
|
|
tags:
|
|
- firewalld
|
|
|
|
- name: ensure caddy is configured to proxy for unifi
|
|
template:
|
|
src: unifi.caddyfile.j2
|
|
dest: /etc/caddy/Caddyfile.d/unifi.caddyfile
|
|
owner: root
|
|
group: root
|
|
mode: u=rw,go=r
|
|
notify:
|
|
- reload caddy
|