From a36f411c1b22171cb3ffa3ea2b91dc9d6b1671ab Mon Sep 17 00:00:00 2001
From: Ian Fijolek <ian@iamthefij.com>
Date: Sun, 4 Sep 2022 12:36:26 -0700
Subject: [PATCH] Add Traefik proxy for Syslogng

---
 .secrets-baseline           | 6 +++---
 nomad/syslogng.nomad        | 7 +++++++
 nomad/traefik/traefik.nomad | 6 ++++++
 3 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/.secrets-baseline b/.secrets-baseline
index 98b4c98..cde5284 100644
--- a/.secrets-baseline
+++ b/.secrets-baseline
@@ -171,7 +171,7 @@
         "filename": "nomad/syslogng.nomad",
         "hashed_secret": "298b5925fe7c7458cb8a12a74621fdedafea5ad6",
         "is_verified": false,
-        "line_number": 163,
+        "line_number": 170,
         "is_secret": false
       },
       {
@@ -179,7 +179,7 @@
         "filename": "nomad/syslogng.nomad",
         "hashed_secret": "3a1cec2d3c3de7e4da4d99c6731ca696c24b72b4",
         "is_verified": false,
-        "line_number": 163,
+        "line_number": 170,
         "is_secret": false
       }
     ],
@@ -210,5 +210,5 @@
       }
     ]
   },
-  "generated_at": "2022-07-27T03:09:38Z"
+  "generated_at": "2022-09-04T19:36:18Z"
 }
diff --git a/nomad/syslogng.nomad b/nomad/syslogng.nomad
index 798b172..d1be810 100644
--- a/nomad/syslogng.nomad
+++ b/nomad/syslogng.nomad
@@ -128,6 +128,13 @@ EOF
           }
         }
       }
+
+      tags = [
+        "traefik.enable=true",
+        "traefik.tcp.routers.syslogngtcp.entrypoints=syslogtcp",
+        "traefik.tcp.routers.syslogngtcp.rule=HostSNI(`*`)",
+        "traefik.udp.routers.syslogngudp.entrypoints=syslogudp",
+      ]
     }
 
     task "syslogng" {
diff --git a/nomad/traefik/traefik.nomad b/nomad/traefik/traefik.nomad
index 5ff0349..921773c 100644
--- a/nomad/traefik/traefik.nomad
+++ b/nomad/traefik/traefik.nomad
@@ -120,6 +120,12 @@ job "traefik" {
   [entryPoints.metrics]
     address = ":8989"
 
+  [entryPoints.syslogtcp]
+    address = ":514"
+
+  [entryPoints.syslogudp]
+    address = ":514/udp"
+
 [api]
   dashboard = true