Log rate limits and size

roles/iri/files/journald.conf

@@ -0,0 +1,26 @@
+[Journal]
+#Storage=auto
+#Compress=yes
+#Seal=yes
+#SplitMode=uid
+#SyncIntervalSec=5m
+RateLimitInterval=30s
+RateLimitBurst=1000
+SystemMaxUse=2000MB
+#SystemKeepFree=
+#SystemMaxFileSize=100M
+#RuntimeMaxUse=
+#RuntimeKeepFree=
+#RuntimeMaxFileSize=
+#MaxRetentionSec=
+#MaxFileSec=1month
+#ForwardToSyslog=yes
+#ForwardToKMsg=no
+#ForwardToConsole=no
+#ForwardToWall=yes
+#TTYPath=/dev/console
+#MaxLevelStore=debug
+#MaxLevelSyslog=debug
+#MaxLevelKMsg=notice
+#MaxLevelConsole=info
+#MaxLevelWall=emerg

roles/iri/files/rsyslog.ubuntu

@@ -0,0 +1,39 @@
+/var/log/syslog
+{
+        rotate 7
+        daily
+        size 100M
+        missingok
+        notifempty
+        delaycompress
+        compress
+        postrotate
+                invoke-rc.d rsyslog rotate > /dev/null
+        endscript
+}
+
+/var/log/mail.info
+/var/log/mail.warn
+/var/log/mail.err
+/var/log/mail.log
+/var/log/daemon.log
+/var/log/kern.log
+/var/log/auth.log
+/var/log/user.log
+/var/log/lpr.log
+/var/log/cron.log
+/var/log/debug
+/var/log/messages
+{
+        rotate 4
+        weekly
+        size 100M
+        missingok
+        notifempty
+        compress
+        delaycompress
+        sharedscripts
+        postrotate
+                invoke-rc.d rsyslog rotate > /dev/null
+        endscript
+}

roles/iri/files/syslog.centos

@@ -0,0 +1,13 @@
+/var/log/cron
+/var/log/maillog
+/var/log/messages
+/var/log/secure
+/var/log/spooler
+{
+    missingok
+    size 100M    
+    sharedscripts
+    postrotate
+        /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
+    endscript
+}

roles/iri/handlers/main.yml

@@ -13,3 +13,8 @@
 - name: reload systemd
   sudo: yes
   command: systemctl daemon-reload
+
+- name: restart systemd-journald
+  systemd:
+    name: systemd-journald
+    state: restarted

roles/iri/tasks/logging.yml

@@ -0,0 +1,19 @@
+- name: copy new journald.conf with limits
+  copy:
+    src: files/journald.conf
+    dest: /etc/systemd/journald.conf
+    backup: yes
+  notify:
+    - restart systemd-journald
+
+- name: copy logrotate overrides system logs ubuntu
+  copy:
+    src: files/rsyslog.ubuntu
+    dest: /etc/logrotate.d/rsyslog
+  when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
+
+- name: copy logrotate override system logs centos
+  copy:
+    src: files/syslog.centos
+    dest: /etc/logrotate.d/syslog
+  when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'

roles/iri/tasks/role.yml

@@ -8,6 +8,10 @@
     - iri_deps_yum
   when: ansible_distribution == 'CentOS' or ansible_distribution == 'Red Hat Enterprise Linux'
 
+- import_tasks: logging.yml
+  tags:
+    - logging_config
+
 - import_tasks: firewalld.yml
   tags:
     - iri_firewalld