From 2d402273b67d72e3c1cc84ad952151568bb8ac3c Mon Sep 17 00:00:00 2001
From: Patrick Spek <p.spek@tyil.nl>
Date: Fri, 6 May 2022 10:01:53 +0200
Subject: Add logrotate configuration for nginx

---
 playbooks.d/webserver-nginx/share/logrotate.conf            | 11 +++++++++++
 playbooks.d/webserver-nginx/share/sites.d/https/nl.tyil.www |  2 ++
 2 files changed, 13 insertions(+)
 create mode 100644 playbooks.d/webserver-nginx/share/logrotate.conf

(limited to 'playbooks.d/webserver-nginx/share')

diff --git a/playbooks.d/webserver-nginx/share/logrotate.conf b/playbooks.d/webserver-nginx/share/logrotate.conf
new file mode 100644
index 0000000..faa9996
--- /dev/null
+++ b/playbooks.d/webserver-nginx/share/logrotate.conf
@@ -0,0 +1,11 @@
+/var/log/nginx/access-logs/*.log {
+	daily
+	missingok
+	rotate -1
+	notifempty
+	create 0640 ${user} ${group}
+	sharedscripts
+	postrotate
+		nginx -s reopen >> /var/log/logrotate.log 2>&1
+	endscript
+}
diff --git a/playbooks.d/webserver-nginx/share/sites.d/https/nl.tyil.www b/playbooks.d/webserver-nginx/share/sites.d/https/nl.tyil.www
index 3304c8f..9430959 100644
--- a/playbooks.d/webserver-nginx/share/sites.d/https/nl.tyil.www
+++ b/playbooks.d/webserver-nginx/share/sites.d/https/nl.tyil.www
@@ -7,6 +7,8 @@ server {
 	ssl_certificate /etc/letsencrypt/live/www.tyil.nl/fullchain.pem;
 	ssl_certificate_key /etc/letsencrypt/live/www.tyil.nl/privkey.pem;
 
+	access_log /var/log/nginx/access-logs/nl.tyil.log;
+
 	include /etc/nginx/snippets.d/certbot.conf;
 	include /etc/nginx/snippets.d/headers.conf;
 	include /etc/nginx/snippets.d/ssl.conf;
-- 
cgit v1.1