main.yml

- name: Install loki and logcli
  pacman: name=loki,logcli state=present

- name: Install loki configuration
  copy: src=loki.yaml dest=/etc/loki/ owner=root group=root mode=0644
  notify: Restart loki

- name: Create directories for loki recording rules
  file: path={{ item }} state=directory owner=root group=root mode=0755
  loop:
    - /etc/loki/rules
    - /etc/loki/rules/fake

- name: Install loki recording rules
  copy: src=rules.yaml dest=/etc/loki/rules/fake/ owner=root group=root mode=0644
  notify: Restart loki

- name: Make nginx log dir
  file: path=/var/log/nginx/loki state=directory owner=root group=root mode=0755

- name: Set up nginx
  template: src=nginx.d.conf.j2 dest="/etc/nginx/nginx.d/logging.conf" owner=root group=root mode=640
  notify: Reload nginx
  tags: ['nginx']

- name: Open firewall hole
  ansible.posix.firewalld: service=http zone=wireguard permanent=true state=enabled immediate=yes

- name: Create drop-in directory for loki
  file: path=/etc/systemd/system/loki.service.d state=directory owner=root group=root mode=0755

- name: Install drop-in snippet for loki
  copy: src=loki-override.conf dest=/etc/systemd/system/loki.service.d/override.conf owner=root group=root mode=0644

- name: Start and enable loki
  systemd: name=loki.service enabled=yes daemon_reload=yes state=started