From: Tom Hughes <tom@compton.nu>
Date: Tue, 3 Nov 2020 14:41:18 +0000 (+0000)
Subject: Rotate letsencrypt logs
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/6e3baefbe28ebff832a2bf5a5e8886fd79f31bbf

Rotate letsencrypt logs
---

diff --git a/cookbooks/letsencrypt/recipes/default.rb b/cookbooks/letsencrypt/recipes/default.rb
index 3590fc94d..c41732cf6 100644
--- a/cookbooks/letsencrypt/recipes/default.rb
+++ b/cookbooks/letsencrypt/recipes/default.rb
@@ -190,3 +190,10 @@ cron_d "letencrypt-check" do
   command "/srv/acme.openstreetmap.org/bin/check-certificates"
   mailto "admins@openstreetmap.org"
 end
+
+template "/etc/logrotate.d/letsencrypt" do
+  source "logrotate.erb"
+  owner "root"
+  group "root"
+  mode "644"
+end
diff --git a/cookbooks/letsencrypt/templates/default/logrotate.erb b/cookbooks/letsencrypt/templates/default/logrotate.erb
new file mode 100644
index 000000000..57fe6d67b
--- /dev/null
+++ b/cookbooks/letsencrypt/templates/default/logrotate.erb
@@ -0,0 +1,6 @@
+# DO NOT EDIT - This file is being maintained by Chef
+
+/srv/acme.openstreetmap.org/logs/*.log {
+    missingok
+    compress
+}