diff options
| author | David Runge <dave@sleepmap.de> | 2020-09-12 18:18:00 +0200 |
|---|---|---|
| committer | David Runge <dave@sleepmap.de> | 2020-09-12 18:18:00 +0200 |
| commit | 549bf806e1e4b12a14a463db87438608f7025eb9 (patch) | |
| tree | 3adc825bebe46c683e550badd73800341e626a80 /.config/systemd | |
| parent | 0d104b87b8afdbf81dd5372f9ae36b9b4076a920 (diff) | |
| download | dotfiles-549bf806e1e4b12a14a463db87438608f7025eb9.tar.gz dotfiles-549bf806e1e4b12a14a463db87438608f7025eb9.tar.bz2 dotfiles-549bf806e1e4b12a14a463db87438608f7025eb9.tar.xz dotfiles-549bf806e1e4b12a14a463db87438608f7025eb9.zip | |
Add basic logrotate integration
.config/logrotate.conf:
Add configuration to rotate sway and a2jmidid logs.
.config/systemd/user/logrotate.{service,timer}:
Add service and timer based on the system versions provided by
logrotate.
Diffstat (limited to '.config/systemd')
| -rw-r--r-- | .config/systemd/user/logrotate.service | 28 | ||||
| -rw-r--r-- | .config/systemd/user/logrotate.timer | 11 |
2 files changed, 39 insertions, 0 deletions
diff --git a/.config/systemd/user/logrotate.service b/.config/systemd/user/logrotate.service new file mode 100644 index 0000000..f517394 --- /dev/null +++ b/.config/systemd/user/logrotate.service @@ -0,0 +1,28 @@ +[Unit] +Description=Rotate log files +Documentation=man:logrotate(8) man:logrotate.conf(5) +ConditionACPower=true + +[Service] +Type=oneshot +ExecStart=/usr/bin/logrotate %h/.config/logrotate.conf -s %S/logrotate.status -v +Nice=19 +IOSchedulingClass=best-effort +IOSchedulingPriority=7 + +# hardening options +# details: https://www.freedesktop.org/software/systemd/man/systemd.exec.html +# no ProtectHome for userdir logs +# no PrivateNetwork for mail deliviery +# no NoNewPrivileges for third party rotate scripts +# LockPersonality=true +# MemoryDenyWriteExecute=true +# PrivateDevices=true +# PrivateTmp=true +# ProtectControlGroups=true +# ProtectKernelLogs=true +# ProtectKernelModules=true +# ProtectKernelTunables=true +# ProtectSystem=full +# RestrictNamespaces=true +# RestrictRealtime=true diff --git a/.config/systemd/user/logrotate.timer b/.config/systemd/user/logrotate.timer new file mode 100644 index 0000000..ea37931 --- /dev/null +++ b/.config/systemd/user/logrotate.timer @@ -0,0 +1,11 @@ +[Unit] +Description=Daily rotation of log files +Documentation=man:logrotate(8) man:logrotate.conf(5) + +[Timer] +OnCalendar=daily +AccuracySec=1h +Persistent=true + +[Install] +WantedBy=timers.target |