Claude 1

sophos-xgs-ansible/roles/sophos_snmp_logging/tasks/main.yml

@@ -0,0 +1,68 @@
+---
+# ============================================================================
+# Sophos SNMP and Logging Role - Main Tasks
+# ============================================================================
+
+- name: Display SNMP and logging configuration overview
+  ansible.builtin.debug:
+    msg:
+      - "======================================"
+      - "Configuring SNMP and Logging"
+      - "======================================"
+      - "Firewall: {{ inventory_hostname }}"
+      - "SNMP Enabled: {{ sophos_snmp.enabled | default(false) }}"
+      - "Syslog Servers: {{ sophos_logging.syslog_servers | default([]) | length }}"
+  tags: ['always']
+
+# Configure SNMP
+- name: Configure SNMP settings
+  ansible.builtin.uri:
+    url: "https://{{ sophos_mgmt_host }}:{{ sophos_mgmt_port }}/webconsole/APIController"
+    method: POST
+    validate_certs: "{{ sophos_validate_certs }}"
+    headers:
+      Content-Type: "application/x-www-form-urlencoded"
+    body: "reqxml={{ lookup('template', 'snmp_config.json.j2') | urlencode }}"
+    status_code: [200, 201]
+    timeout: "{{ sophos_api_timeout }}"
+  when: sophos_snmp is defined
+  no_log: "{{ sophos_no_log_sensitive }}"
+  tags: ['snmp']
+
+# Configure Syslog
+- name: Configure syslog servers
+  ansible.builtin.uri:
+    url: "https://{{ sophos_mgmt_host }}:{{ sophos_mgmt_port }}/webconsole/APIController"
+    method: POST
+    validate_certs: "{{ sophos_validate_certs }}"
+    headers:
+      Content-Type: "application/x-www-form-urlencoded"
+    body: "reqxml={{ lookup('template', 'syslog_server.json.j2') | urlencode }}"
+    status_code: [200, 201]
+    timeout: "{{ sophos_api_timeout }}"
+  loop: "{{ sophos_logging.syslog_servers | default([]) }}"
+  loop_control:
+    label: "{{ item.host }}"
+  when: sophos_logging is defined
+  no_log: "{{ sophos_no_log_sensitive }}"
+  tags: ['logging', 'syslog']
+
+# Configure NTP
+- name: Configure NTP settings
+  ansible.builtin.uri:
+    url: "https://{{ sophos_mgmt_host }}:{{ sophos_mgmt_port }}/webconsole/APIController"
+    method: POST
+    validate_certs: "{{ sophos_validate_certs }}"
+    headers:
+      Content-Type: "application/x-www-form-urlencoded"
+    body: "reqxml={{ lookup('template', 'ntp_config.json.j2') | urlencode }}"
+    status_code: [200, 201]
+    timeout: "{{ sophos_api_timeout }}"
+  when: sophos_ntp is defined
+  no_log: "{{ sophos_no_log_sensitive }}"
+  tags: ['ntp']
+
+- name: SNMP and logging configuration completed
+  ansible.builtin.debug:
+    msg: "SNMP, logging, and NTP configured successfully"
+  tags: ['always']