feat: setup la roation des journaux systemd

betagouv · Oct 29, 2024 · 5b5a6b2 · 5b5a6b2
1 parent 55560e9
commit 5b5a6b2
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 0 deletions.
diff --git a/roles/bootstrap/handlers/main.yaml b/roles/bootstrap/handlers/main.yaml
@@ -8,3 +8,7 @@
   ansible.builtin.service:
     name: sshd
     state: restarted
+- name: restart systemd-journald
+  ansible.builtin.service:
+    name: systemd-journald
+    state: restarted
diff --git a/roles/bootstrap/tasks/main.yaml b/roles/bootstrap/tasks/main.yaml
@@ -27,6 +27,10 @@
 - name: Install and configure certbot
   ansible.builtin.include_tasks: install_certbot.yaml
 
+## Setup systemd
+- name: Setup systemd journal rotation
+  ansible.builtin.include_tasks: setup_systemd_journal.yaml
+
 ## Setup Monitoring service
 - name: Configure monitoring service
   ansible.builtin.include_tasks: setup_monitor.yaml

diff --git a/roles/bootstrap/tasks/setup_systemd_journal.yaml b/roles/bootstrap/tasks/setup_systemd_journal.yaml
@@ -0,0 +1,15 @@
+---
+- name: Setup systemd journal rotation
+  ansible.builtin.blockinfile:
+    path: /etc/systemd/journald.conf
+    block: |
+      [Journal]
+      SystemMaxUse=2G
+      SystemMaxFileSize=100M
+      MaxRetentionSec=90d
+      Compress=yes
+  notify: restart systemd-journald
+
+- name: Force immediate cleanup of old journals
+  ansible.builtin.command: journalctl --vacuum-time=90d
+  changed_when: true