Example of daemonized teler

README.md

Example of daemonized teler

This example turns teler into a service, then implements inotifywatch to monitor the configuration file for changes. This way teler will automatically load on start on boot, and when config.yaml changes the teler service will restart and load the changes.

Steps

1. Install inotify-tools

apt-get -y install inotify-tools

2. Move teler (binary) to /usr/local/bin

3. Create folder /opt/teler

mkdir -p /opt/teler

3. Put .sh and config.yaml files in that folder
4. Make the files executable

chmod +x teler.sh
chmod +x teler-watcher.sh

5. Put .service files in /etc/systemd/system/
6. Reload systemd manager configuration

systemctl daemon-reload

7. Enable services

systemctl enable teler.service
systemctl enable teler-watcher.service

8. Adjust variable paths in config.yaml as needed
9. Start services

systemctl start teler.service
systemctl start teler-watcher.service

config.yaml

# To write log format, see https://teler.app/configuration/log-format
log_format: |
  $remote_addr $x $x $x [$time_local] "$request_method $request_uri $request_protocol" $status $body_bytes_sent "$http_referer" "$http_user_agent"

teler-watcher.service

[Unit]
Description=Watch teler config for changes and restart teler service
After=network.target

[Service]
Type=simple
ExecStart=/opt/teler/teler-watcher.sh

[Install]
WantedBy=multi-user.target

teler-watcher.sh

#!/bin/sh

# Define vars
CONFIG_FILE="/opt/teler/config.yaml"

# Watch for configuration changes and restart teler
while inotifywait -e modify $CONFIG_FILE; do systemctl restart teler.service; done

teler.service

[Unit]
Description=Teler Realtime HTTP Intrusion Detection
After=network.target

[Service]
Type=simple
ExecStart=/opt/teler/teler.sh
Restart=always

[Install]
WantedBy=multi-user.target

teler.sh

#!/bin/sh

# Define vars
CONFIG_FILE="/opt/teler/config.yaml"
LOG_FILE="/var/log/apache2/access.log"

# Start teler
tail -f $LOG_FILE | teler -c $CONFIG_FILE