Ruslan PetrovichandCursor
664a544aa9
Updated the custom_check state to manage /var/log/mail_av and checked file with pmg-smtp-filter ownership and configurable modes, and documented new pillar settings for log owner/group/modes. Co-authored-by: Cursor <cursoragent@cursor.com>
130 lines
3.4 KiB
YAML+Jinja
130 lines
3.4 KiB
YAML+Jinja
pmg:
|
|
base_packages:
|
|
- curl
|
|
- vim-tiny
|
|
- rsync
|
|
- ca-certificates
|
|
- jq
|
|
|
|
ssh_allow_users: []
|
|
ssh_password_authentication: true
|
|
|
|
journald_system_max_use: 1G
|
|
journald_max_file_sec: 1month
|
|
|
|
node_exporter:
|
|
enabled: true
|
|
package: prometheus-node-exporter
|
|
service: prometheus-node-exporter
|
|
textfile_directory: /var/lib/prometheus/node-exporter
|
|
args: --collector.textfile.directory=/var/lib/prometheus/node-exporter
|
|
|
|
smtp_monitoring:
|
|
enabled: true
|
|
log_window_seconds: 300
|
|
ports:
|
|
- 25
|
|
- 26
|
|
blackbox:
|
|
package: prometheus-blackbox-exporter
|
|
service: prometheus-blackbox-exporter
|
|
|
|
pmg_services:
|
|
- postfix
|
|
- pmg-smtp-filter
|
|
- pmgpolicy
|
|
- pmgdaemon
|
|
- pmgmirror
|
|
- pmgtunnel
|
|
pmg_cluster_only_services:
|
|
- pmgmirror
|
|
- pmgtunnel
|
|
cluster_join:
|
|
enabled: true
|
|
master_ip: 10.80.38.152
|
|
fingerprint: "4C:63:ED:BB:01:F0:63:5B:92:AC:37:D8:52:D9:0A:CB:5B:78:EE:3A:36:83:86:29:C8:19:D2:EC:CE:AC:88:EC"
|
|
password: ""
|
|
update_dist_upgrade: true
|
|
update_auto_reboot: false
|
|
update_reboot_delay_minutes: 1
|
|
|
|
custom_check:
|
|
enabled: true
|
|
script_path: /usr/local/bin/pmg-custom-check
|
|
log_dir: /var/log/mail_av
|
|
log_dir_user: pmg-smtp-filter
|
|
log_dir_group: pmg
|
|
log_dir_mode: "0770"
|
|
log_file_mode: "0660"
|
|
managed_packages:
|
|
- pwgen
|
|
ksc_superuser:
|
|
enabled: true
|
|
name: superuser
|
|
manage_sudoers: true
|
|
required_services:
|
|
- kesl
|
|
- klnagent64
|
|
kesl_excluded_paths:
|
|
- /var/spool/pmg
|
|
- /var/lib/clamav
|
|
- /tmp/.proxdump_*
|
|
|
|
manage_hosts_file: false
|
|
hosts_file_entries:
|
|
- ip: 10.80.38.152
|
|
hostname: p-mailgw-x1-01
|
|
aliases:
|
|
- p-mailgw-x1-01.lmru.tech
|
|
- ip: 10.80.38.153
|
|
hostname: p-mailgw-x1-02
|
|
aliases:
|
|
- p-mailgw-x1-02.lmru.tech
|
|
- ip: 10.220.41.152
|
|
hostname: p-mailgw-x2-01
|
|
aliases:
|
|
- p-mailgw-x2-01.lmru.tech
|
|
- ip: 10.220.41.153
|
|
hostname: p-mailgw-x2-02
|
|
aliases:
|
|
- p-mailgw-x2-02.lmru.tech
|
|
|
|
wazuh:
|
|
enabled: true
|
|
version: 4.14.0-1
|
|
manager: 10.80.120.205
|
|
group: test_auditd_unix
|
|
|
|
kesl:
|
|
enabled: true
|
|
package_url: https://products.s.kaspersky-labs.com/endpoints/keslinux10/12.4.0.1225/multilanguage-INT-12.4.0.1225/167a2f9c5bdb4e869f4603fbc3a829c1/kesl_12.4.0-1225_amd64.deb
|
|
package_path: /opt/kesl_12.4.0-1225_amd64.deb
|
|
autoinstall_path: /etc/opt/kaspersky/kesl/autoinstall.ini
|
|
ksvla_mode: "No"
|
|
endpoint_agent_mode: "No"
|
|
eula_agreed: "Yes"
|
|
privacy_policy_agreed: "Yes"
|
|
use_ksn: "No"
|
|
group_clean: "No"
|
|
locale: ""
|
|
install_license: ""
|
|
updater_source: SCServer
|
|
update_execute: "No"
|
|
|
|
klnagent:
|
|
enabled: true
|
|
package_url: https://products.s.kaspersky-labs.com/administrationkit/ksc10/16.2.0.1023/russian-INT-29664057-ru/2129c97dba254c9fb8a4161f29a2241c/klnagent64_16.2.0-1023_amd64.deb
|
|
package_path: /opt/klnagent64_16.2.0-1023_amd64.deb
|
|
administration_server: 10.80.38.76
|
|
autoanswers_path: /etc/opt/kaspersky/klnagent64/autoanswers.conf
|
|
autoinstall: true
|
|
eula_accepted: true
|
|
|
|
qualys:
|
|
enabled: true
|
|
package_url: https://storage.yandexcloud.net/qualys-agent/QualysCloudAgent.deb
|
|
package_path: /opt/QualysCloudAgent.deb
|
|
activation_id: 5eb9ad8e-02cc-431a-9afb-b8caad175ec1
|
|
customer_id: 4d868109-dad3-5536-82b4-9f3a6f3010bc
|
|
server_uri: https://qagpublic.qg1.apps.qualys.eu/CloudAgent/
|