Sets 30 day retention period for apache logs

freedomofpress · Jun 10, 2019 · 4b5f4fb · 4b5f4fb
1 parent 97d603d
commit 4b5f4fb
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/install_files/ansible-base/roles/app/files/apache2-logrotate.conf b/install_files/ansible-base/roles/app/files/apache2-logrotate.conf
@@ -0,0 +1,10 @@
+/var/log/apache2/*.log {
+  daily
+  missingok
+  rotate 30
+  create 640 root adm
+  sharedscripts
+  postrotate
+    /usr/bin/killall -HUP apache2
+  endscript
+}
diff --git a/install_files/ansible-base/roles/app/tasks/install_and_harden_apache.yml b/install_files/ansible-base/roles/app/tasks/install_and_harden_apache.yml
@@ -116,3 +116,12 @@
     - restart apache2
   tags:
     - apache
+
+- name: Retain no more than one month of apache logs
+  copy:
+    src: apache2-logrotate.conf
+    dest: /etc/logrotate.d/apache2
+    owner: root
+    mode: "0644"
+  tags:
+    - apache