---
# Auditd / journald / logrotate — port of Modules/Security/secharden-audit-agents.sh.

- name: Deploy /etc/audit/auditd.conf
  ansible.builtin.copy:
    src: auditd.conf
    dest: /etc/audit/auditd.conf
    owner: root
    group: root
    mode: "0640"
    backup: true
  notify: Restart auditd

- name: Deploy /etc/systemd/journald.conf
  ansible.builtin.copy:
    src: journald.conf
    dest: /etc/systemd/journald.conf
    owner: root
    group: root
    mode: "0644"
    backup: true
  notify: Restart journald

- name: Deploy /etc/logrotate.conf
  ansible.builtin.copy:
    src: logrotate.conf
    dest: /etc/logrotate.conf
    owner: root
    group: root
    mode: "0644"
    backup: true