diff --git a/script/script.sh b/script/script.sh index caecafa..9ff2eb4 100755 --- a/script/script.sh +++ b/script/script.sh @@ -130,12 +130,14 @@ EOF systemctl enable --now opensearch.service opensearch-dashboards.service # Configurar systemd-journal-remote +cp CA/certs/ca.crt.pem /etc/systemd/ cp CA/certs/oglog-jrem.mytld.crt.pem /etc/systemd/ cp CA/private/oglog-jrem.mytld.key.nopass.pem /etc/systemd/oglog-jrem.mytld.key.pem chown systemd-journal-remote:systemd-journal-remote /etc/systemd/oglog-jrem.mytld.crt.pem /etc/systemd/oglog-jrem.mytld.key.pem install --owner systemd-journal-remote --group systemd-journal-remote --mode 0750 --directory /var/log/journal/remote/ sed -i -e '/ServerKeyFile/ s%.*%ServerKeyFile=/etc/systemd/oglog-jrem.mytld.key.pem%' /etc/systemd/journal-remote.conf sed -i -e '/ServerCertificateFile/s%.*%ServerCertificateFile=/etc/systemd/oglog-jrem.mytld.crt.pem%' /etc/systemd/journal-remote.conf +sed -i -e '/TrustedCertificateFile/s%.*%TrustedCertificateFile=/etc/systemd/ca.crt.pem%' /etc/systemd/journal-remote.conf systemctl enable --now systemd-journal-remote.service