Logging changes: new hdd, removed ideapad instance, graylog
This commit is contained in:
@@ -99,10 +99,6 @@
|
||||
targets = [ "192.168.100.12" ];
|
||||
labels.instance = "r730xd-idrac";
|
||||
}
|
||||
{
|
||||
targets = [ "192.168.100.20" ];
|
||||
labels.instance = "ideapad";
|
||||
}
|
||||
{
|
||||
targets = [ "192.168.100.21" ];
|
||||
labels.instance = "r330-proxmox";
|
||||
@@ -189,12 +185,20 @@
|
||||
];
|
||||
};
|
||||
|
||||
services = {
|
||||
graylog.enable = true;
|
||||
mongodb.enable = true;
|
||||
opensearch.enable = true;
|
||||
};
|
||||
|
||||
|
||||
systemd.services.suricata = {
|
||||
description = "Suricata IDS/IPS";
|
||||
wantedBy = ["multi-user.target"];
|
||||
serviceConfig = {
|
||||
type = "simple";
|
||||
User = "logging";
|
||||
ExecStartPre = "/run/current-system/sw/bin/ip link set enp6s19 up";
|
||||
ExecStart = "${pkgs.suricata}/bin/suricata -c /etc/suricata.yaml -i enp6s19";
|
||||
Restart = "on-failure";
|
||||
CapabilityBoundingSet = "CAP_NET_RAW CAP_NET_ADMIN";
|
||||
|
||||
Reference in New Issue
Block a user