diff options
Diffstat (limited to 'straper/db/public/logging')
19 files changed, 258 insertions, 0 deletions
diff --git a/straper/db/public/logging/logrotate.conf b/straper/db/public/logging/logrotate.conf new file mode 100644 index 0000000..c99018c --- /dev/null +++ b/straper/db/public/logging/logrotate.conf @@ -0,0 +1,23 @@ +# see "man logrotate" for details + +# global options do not affect preceding include directives + +# rotate log files weekly +weekly + +# keep 4 weeks worth of backlogs +rotate 4 + +# create new (empty) log files after rotating old ones +create + +# use date as a suffix of the rotated file +#dateext + +# uncomment this if you want your log files compressed +#compress + +# packages drop log rotation information into this directory +include /etc/logrotate.d + +# system-specific logs may also be configured here. diff --git a/straper/db/public/logging/logrotate.d/alternatives b/straper/db/public/logging/logrotate.d/alternatives new file mode 100644 index 0000000..41c8a9c --- /dev/null +++ b/straper/db/public/logging/logrotate.d/alternatives @@ -0,0 +1,9 @@ +/var/log/alternatives.log { + monthly + rotate 12 + compress + delaycompress + missingok + notifempty + create 644 root root +} diff --git a/straper/db/public/logging/logrotate.d/apt b/straper/db/public/logging/logrotate.d/apt new file mode 100644 index 0000000..9a6e5d1 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/apt @@ -0,0 +1,16 @@ +/var/log/apt/term.log { + rotate 12 + monthly + compress + missingok + notifempty +} + +/var/log/apt/history.log { + rotate 12 + monthly + compress + missingok + notifempty +} + diff --git a/straper/db/public/logging/logrotate.d/btmp b/straper/db/public/logging/logrotate.d/btmp new file mode 100644 index 0000000..0aa1ae1 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/btmp @@ -0,0 +1,7 @@ +# no packages own btmp -- we'll rotate it here +/var/log/btmp { + missingok + monthly + create 0660 root utmp + rotate 1 +} diff --git a/straper/db/public/logging/logrotate.d/certbot b/straper/db/public/logging/logrotate.d/certbot new file mode 100644 index 0000000..05caa95 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/certbot @@ -0,0 +1,6 @@ +/var/log/letsencrypt/*.log { + rotate 12 + weekly + compress + missingok +}
\ No newline at end of file diff --git a/straper/db/public/logging/logrotate.d/dpkg b/straper/db/public/logging/logrotate.d/dpkg new file mode 100644 index 0000000..cf36f08 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/dpkg @@ -0,0 +1,9 @@ +/var/log/dpkg.log { + monthly + rotate 12 + compress + delaycompress + missingok + notifempty + create 644 root root +} diff --git a/straper/db/public/logging/logrotate.d/fail2ban b/straper/db/public/logging/logrotate.d/fail2ban new file mode 100644 index 0000000..892f5d2 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/fail2ban @@ -0,0 +1,19 @@ +/var/log/fail2ban.log { + + weekly + rotate 4 + compress + # Do not rotate if empty + notifempty + + delaycompress + missingok + postrotate + fail2ban-client flushlogs 1>/dev/null + endscript + + # If fail2ban runs as non-root it still needs to have write access + # to logfiles. + # create 640 fail2ban adm + create 640 root adm +} diff --git a/straper/db/public/logging/logrotate.d/i2pd b/straper/db/public/logging/logrotate.d/i2pd new file mode 100644 index 0000000..d0ca70a --- /dev/null +++ b/straper/db/public/logging/logrotate.d/i2pd @@ -0,0 +1,9 @@ +"/var/log/i2pd/*.log" { + copytruncate + daily + rotate 5 + compress + delaycompress + missingok + notifempty +} diff --git a/straper/db/public/logging/logrotate.d/mariadb b/straper/db/public/logging/logrotate.d/mariadb new file mode 100644 index 0000000..985c7c2 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/mariadb @@ -0,0 +1,59 @@ +# This is the MariaDB configuration for the logrotate utility +# +# Note that on most Linux systems logs are written to journald, which has its +# own rotation scheme. +# +# Read https://mariadb.com/kb/en/error-log/ to learn more about logging and +# https://mariadb.com/kb/en/rotating-logs-on-unix-and-linux/ about rotating logs. + +/var/lib/mysql/mysqld.log /var/lib/mysql/mariadb.log /var/log/mysql/*.log { + + # Depends on a mysql@localhost unix_socket authenticated user with RELOAD privilege + #su mysql mysql + + # If any of the files listed above is missing, skip them silently without + # emitting any errors + missingok + + # If file exists but is empty, don't rotate it + notifempty + + # Run monthly + monthly + + # Keep 6 months of logs + rotate 6 + + # If file is growing too big, rotate immediately + maxsize 500M + + # If file size is too small, don't rotate at all + minsize 50M + + # Compress logs, as they are text and compression will save a lot of disk space + compress + + # Don't compress the log immediately to avoid errors about "file size changed while zipping" + delaycompress + + # Don't run the postrotate script for each file configured in this file, but + # run it only once if one or more files were rotated + sharedscripts + + # After each rotation, run this custom script to flush the logs. Note that + # this assumes that the mariadb-admin command has database access, which it + # has thanks to the default use of Unix socket authentication for the 'mysql' + # (or root on Debian) account used everywhere since MariaDB 10.4. + postrotate + if test -r /etc/mysql/debian.cnf + then + EXTRAPARAM='--defaults-file=/etc/mysql/debian.cnf' + fi + + if test -x /usr/bin/mariadb-admin + then + /usr/bin/mariadb-admin $EXTRAPARAM --local flush-error-log \ + flush-engine-log flush-general-log flush-slow-log + fi + endscript +} diff --git a/straper/db/public/logging/logrotate.d/nginx b/straper/db/public/logging/logrotate.d/nginx new file mode 100644 index 0000000..423c6ad --- /dev/null +++ b/straper/db/public/logging/logrotate.d/nginx @@ -0,0 +1,18 @@ +/var/log/nginx/*.log { + daily + missingok + rotate 14 + compress + delaycompress + notifempty + create 0640 www-data adm + sharedscripts + prerotate + if [ -d /etc/logrotate.d/httpd-prerotate ]; then \ + run-parts /etc/logrotate.d/httpd-prerotate; \ + fi \ + endscript + postrotate + invoke-rc.d nginx rotate >/dev/null 2>&1 + endscript +} diff --git a/straper/db/public/logging/logrotate.d/ppp b/straper/db/public/logging/logrotate.d/ppp new file mode 100644 index 0000000..3505463 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/ppp @@ -0,0 +1,9 @@ +/var/log/ppp-connect-errors { + weekly + rotate 4 + missingok + notifempty + compress + nocreate +} + diff --git a/straper/db/public/logging/logrotate.d/prometheus b/straper/db/public/logging/logrotate.d/prometheus new file mode 100644 index 0000000..40d373f --- /dev/null +++ b/straper/db/public/logging/logrotate.d/prometheus @@ -0,0 +1,9 @@ +/var/log/prometheus/prometheus.log { + weekly + rotate 10 + copytruncate + compress + delaycompress + notifempty + missingok +} diff --git a/straper/db/public/logging/logrotate.d/prometheus-node-exporter b/straper/db/public/logging/logrotate.d/prometheus-node-exporter new file mode 100644 index 0000000..f8becf8 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/prometheus-node-exporter @@ -0,0 +1,9 @@ +/var/log/prometheus/prometheus-node-exporter.log { + weekly + rotate 10 + copytruncate + compress + delaycompress + notifempty + missingok +} diff --git a/straper/db/public/logging/logrotate.d/prosody b/straper/db/public/logging/logrotate.d/prosody new file mode 100644 index 0000000..5407a18 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/prosody @@ -0,0 +1,12 @@ +/var/log/prosody/prosody.log /var/log/prosody/prosody.err { + weekly + rotate 52 + compress + delaycompress + create 640 prosody adm + postrotate + [ ! -e /run/prosody/prosody.pid ] || service prosody reload > /dev/null + endscript + sharedscripts + missingok +} diff --git a/straper/db/public/logging/logrotate.d/tor b/straper/db/public/logging/logrotate.d/tor new file mode 100644 index 0000000..14c0ba8 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/tor @@ -0,0 +1,15 @@ +/var/log/tor/*log { + daily + rotate 5 + compress + delaycompress + missingok + notifempty + create 0640 debian-tor adm + sharedscripts + postrotate + if invoke-rc.d tor status > /dev/null; then + invoke-rc.d tor reload > /dev/null + fi + endscript +} diff --git a/straper/db/public/logging/logrotate.d/unattended-upgrades b/straper/db/public/logging/logrotate.d/unattended-upgrades new file mode 100644 index 0000000..8393767 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/unattended-upgrades @@ -0,0 +1,10 @@ +/var/log/unattended-upgrades/unattended-upgrades.log +/var/log/unattended-upgrades/unattended-upgrades-dpkg.log +/var/log/unattended-upgrades/unattended-upgrades-shutdown.log +{ + rotate 6 + monthly + compress + missingok + notifempty +} diff --git a/straper/db/public/logging/logrotate.d/wtmp b/straper/db/public/logging/logrotate.d/wtmp new file mode 100644 index 0000000..cc8a151 --- /dev/null +++ b/straper/db/public/logging/logrotate.d/wtmp @@ -0,0 +1,8 @@ +# no packages own wtmp -- we'll rotate it here +/var/log/wtmp { + missingok + monthly + create 0664 root utmp + minsize 1M + rotate 1 +} diff --git a/straper/db/public/logging/logrotate.d/wtmpdb b/straper/db/public/logging/logrotate.d/wtmpdb new file mode 100644 index 0000000..cbfc00e --- /dev/null +++ b/straper/db/public/logging/logrotate.d/wtmpdb @@ -0,0 +1,7 @@ +/var/log/wtmp.db { + missingok + yearly + create + nocompress + rotate 4 +} diff --git a/straper/db/public/logging/rsyslog.d/postfix.conf b/straper/db/public/logging/rsyslog.d/postfix.conf new file mode 100644 index 0000000..7b5d9b0 --- /dev/null +++ b/straper/db/public/logging/rsyslog.d/postfix.conf @@ -0,0 +1,4 @@ +# Create an additional socket in postfix's chroot in order not to break +# mail logging when rsyslog is restarted. If the directory is missing, +# rsyslog will silently skip creating the socket. +$AddUnixListenSocket /var/spool/postfix/dev/log |