From 5a6f30c6cec91404cf6dad0105d71ebf6ae5813a Mon Sep 17 00:00:00 2001
From: Ahwx <ahwx@ahwx.org>
Date: Fri, 21 Nov 2025 11:32:44 +0100
Subject: [PATCH] feat: write `syslogd` service

---
 modules/security/syslogd.nix | 46 ++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)
 create mode 100644 modules/security/syslogd.nix

diff --git a/modules/security/syslogd.nix b/modules/security/syslogd.nix
new file mode 100644
index 0000000..2ee256a
--- /dev/null
+++ b/modules/security/syslogd.nix
@@ -0,0 +1,46 @@
+{ lib, ... }:
+{
+  services.syslogd = {
+    enable = true;
+    enableNetworkInput = lib.mkForce false;
+    tty = "";
+    defaultConfig = ''
+      local1.*                     -/var/log/dhcpd
+
+      *.=warning;*.=err            -/var/log/warn
+      *.crit                        /var/log/warn
+
+      *.*;mail.none;local1.none    -/var/log/messages
+
+      auth,authpriv.*                 /var/log/auth.log
+      *.*;auth,authpriv.none          -/var/log/syslog
+      cron.*                         /var/log/cron.log
+      daemon.*                        -/var/log/daemon.log
+      kern.*                          -/var/log/kern.log
+      lpr.*                           -/var/log/lpr.log
+      mail.*                          /var/log/mail.log
+      user.*                          -/var/log/user.log
+      uucp.*                          -/var/log/uucp.log
+      local6.debug                    /var/log/imapd.log
+
+      mail.info                       -/var/log/mail.info
+      mail.warn                       -/var/log/mail.warn
+      mail.err                        /var/log/mail.err
+
+      *.=debug;\
+         auth,authpriv.none;\
+         news.none;mail.none     -/var/log/debug
+      *.=info;*.=notice;*.=warn;\
+              auth,authpriv.none;\
+              cron,daemon.none;\
+              mail,news.none          -/var/log/messages
+      daemon,mail.*;\
+             news.=crit;news.=err;news.=notice;\
+             *.=debug;*.=info;\
+             *.=notice;*.=warn       /dev/tty8
+
+      *.emerg                         *
+      *.=alert                        *
+    '';
+  };
+}