From c2c4ad89ae7ad3f1f722bf4528e1057c377e2886 Mon Sep 17 00:00:00 2001
From: ale <ale@incal.net>
Date: Tue, 2 Aug 2022 16:51:51 +0100
Subject: [PATCH] Set an egress_policy on rsyslog

---
 services.yml.default          | 1 +
 services.yml.no-elasticsearch | 1 +
 2 files changed, 2 insertions(+)

diff --git a/services.yml.default b/services.yml.default
index bb6f7158..c7c67a69 100644
--- a/services.yml.default
+++ b/services.yml.default
@@ -54,6 +54,7 @@ log-collector:
         - /etc/rsyslog-collector-lognorm: /etc/rsyslog-collector-lognorm
         - /var/spool/rsyslog-collector: /var/spool/rsyslog
         - /var/log/remote: /var/log/remote
+      egress_policy: internal
     - name: kibana
       image: registry.git.autistici.org/ai3/docker/kibana:master
       port: 5601
diff --git a/services.yml.no-elasticsearch b/services.yml.no-elasticsearch
index 8ce6e82f..3665352d 100644
--- a/services.yml.no-elasticsearch
+++ b/services.yml.no-elasticsearch
@@ -52,6 +52,7 @@ log-collector:
         - /etc/rsyslog-collector-lognorm: /etc/rsyslog-collector-lognorm
         - /var/spool/rsyslog-collector: /var/spool/rsyslog
         - /var/log/remote: /var/log/remote
+      egress_policy: internal
   ports:
     - 6514
 
-- 
GitLab