Update for automated response around poorly behaving archlinux-keyring weekly timer; rename Sora role to Password

roles/Sharingan/tasks/scans.yml

@@ -33,33 +33,17 @@
      - sharingan-scan.service
      - sharingan-scan.timer
 
- - name: Scanning services
-   become: yes
-   register: clam_svc
-   copy:
-     src: "clamav/{{ item }}"
-     dest: /usr/lib/systemd/system/
-     owner: root
-     group: root
-     mode: 0664
-   loop:
-     - freshclam.service
-     - freshclam.timer
-     - clamscan.service
-     - clamscan.timer
-
  - systemd:
      daemon_reload: yes
    become: yes
-   when: clam_svc.changed or lynis_svc.changed
-
+   when: lynis_svc.changed
 
  - name: Enable timers
    become: yes
-   loop:
-     - freshclam.timer
-     - sharingan-scan.timer
    service:
-     name: "{{ item }}"
+     name: sharingan-scan.timer
      state: restarted
      enabled: yes
+
+ - import_tasks: "./vscan.yml"
+   when: vscan_enabled is defined

roles/Sharingan/tasks/siem.yml

@@ -5,7 +5,8 @@
    package:
      name:
        - elasticsearch
-       - mongodb44-bin # Temporarily pinned for extensions
+       - mongodb-bin
+       - mongodb-tools-bin
        - graylog
      state: present
 

roles/Sharingan/tasks/vscan.yml

@@ -0,0 +1,26 @@
+---
+
+ - name: Virus scanning services
+   become: yes
+   register: clam_svc
+   copy:
+     src: "clamav/{{ item }}"
+     dest: /usr/lib/systemd/system/
+     owner: root
+     group: root
+     mode: 0664
+   loop:
+     - freshclam.service
+     - freshclam.timer
+     - clamscan.service
+     - clamscan.timer
+
+ - name: Enable timers
+   become: yes
+   loop:
+     - freshclam.timer
+     - clamscan.timer
+   service:
+     name: "{{ item }}"
+     state: restarted
+     enabled: yes