60 Zeilen
1,8 KiB
Markdown
60 Zeilen
1,8 KiB
Markdown
!!! warning
|
|
You will lose the integrated fail2ban functionality when using a logging driver other than json (default).
|
|
|
|
Enable Rsyslog to receive logs on 524/tcp at `rsyslog.conf`:
|
|
|
|
```
|
|
# This setting depends on your Rsyslog version and configuration format.
|
|
# For most Debian derivates it will work like this...
|
|
$ModLoad imtcp
|
|
$TCPServerAddress 127.0.0.1
|
|
$InputTCPServerRun 524
|
|
|
|
# ...while for Ubuntu 16.04 it looks like this:
|
|
module(load="imtcp")
|
|
input(type="imtcp" address="127.0.0.1" port="524")
|
|
|
|
# No matter your Rsyslog version, you should set this option to off
|
|
# if you plan to use Fail2ban
|
|
$RepeatedMsgReduction off
|
|
```
|
|
|
|
Restart rsyslog after enabling the TCP listener.
|
|
|
|
Now setup Docker daemon to start with the syslog driver.
|
|
This enables the syslog driver for all containers!
|
|
|
|
Linux users can add or change the configuration in `/etc/docker/daemon.json`. Windows users please have a look at the [docker documentation](https://docs.docker.com/engine/reference/commandline/dockerd//#windows-configuration-file) :
|
|
```
|
|
{
|
|
...
|
|
"log-driver": "syslog",
|
|
"log-opts": {
|
|
"syslog-address": "tcp://127.0.0.1:524"
|
|
}
|
|
...
|
|
}
|
|
|
|
```
|
|
|
|
!!! warning
|
|
In newer versions of mailcow: dockerized we decided to set a max. log size. You need to remove all "logging: xy" lines and options from docker-compose.yml to be able to start the stack.
|
|
|
|
Example:
|
|
````
|
|
logging:
|
|
options:
|
|
max-size: "5m"
|
|
```
|
|
|
|
!!! info
|
|
If you prefere the udp protocol use:
|
|
|
|
```
|
|
$ModLoad imudp
|
|
$UDPServerRun 524
|
|
```
|
|
|
|
at `rsyslog.conf` and `"syslog-address": "udp://127.0.0.1:524"` at `daemon.json`.
|
|
|
|
Restart the Docker daemon and run `docker-compose down && docker-compose up -d` to recreate the containers.
|