Draft: Enable Loki as a replacement for Elasticsearch when `enable_loki` is set.

Note, it is not possible to have both Loki and Elasticsearch enabled, so enable_elasticsearch must be disabled, when enable_loki is enabled.

roles/base/tasks/harden.yml

@@ -49,6 +49,7 @@
     packages:
       - auditd
       - audisp-json
+  when: not enable_loki
 
 - name: Auditd default config removed
   file:
@@ -63,6 +64,7 @@
     - "templates/audit/rules.d/*.j2"
   notify:
     - restart auditd
+  when: not enable_loki
 
 - name: Auditd configured
   template:
@@ -70,6 +72,7 @@
     dest: /etc/audit/auditd.conf
   notify:
     - restart auditd
+  when: not enable_loki
 
 - name: Audispd plugins configured
   copy:
@@ -80,11 +83,13 @@
     - json.conf
   notify:
     - restart auditd
+  when: not enable_loki
 
 - name: Enable auditd service
   systemd:
     name: auditd.service
     enabled: yes
+  when: not enable_loki
 
 - name: Disable journald-auditd link
   systemd:
@@ -92,3 +97,4 @@
     state: stopped
     enabled: no
     masked: yes
+  when: not enable_loki