Changing openVPN logrotate configuration to keep the logs for a year …

…in a weekly rotation and to keep for a month in a daily rotation Fixes: https://ibm.monday.com/boards/5591222586/pulses/8354436354 Signed-off-by: Fernando <[email protected]>
ceph · Jan 31, 2025 · 54fca6a · 54fca6a
1 parent 2148524
commit 54fca6a
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 3 deletions.
diff --git a/roles/gateway/files/openvpn.logrotate → roles/gateway/files/openvpn.logrotate-daily b/roles/gateway/files/openvpn.logrotate → roles/gateway/files/openvpn.logrotate-daily
@@ -1,6 +1,6 @@
 /var/log/openvpn/*.log {
 	daily
-	rotate 90
+	rotate 30
 	compress
 	missingok
 	copytruncate

diff --git a/roles/gateway/files/openvpn.logrotate-weekly b/roles/gateway/files/openvpn.logrotate-weekly
@@ -0,0 +1,9 @@
+/var/log/openvpn/*.log {
+	weekly
+	rotate 52
+	compress
+	missingok
+	copytruncate
+	notifempty
+	create 644 nobody nobody
+}
diff --git a/roles/gateway/tasks/logging.yml b/roles/gateway/tasks/logging.yml
@@ -9,8 +9,14 @@
 
 - name: Write logrotate conf file
   copy:
-    src: files/openvpn.logrotate
-    dest: /etc/logrotate.d/openvpn
+    src: files/openvpn.logrotate-weekly
+    dest: /etc/logrotate.d/openvpn-weekly
+  notify: restart rsyslog
+
+- name: Write logrotate conf file
+  copy:
+    src: files/openvpn.logrotate-daily
+    dest: /etc/logrotate.d/openvpn-daily
   notify: restart rsyslog
 
 - name: Write rsyslog conf file