#6 Implement logrotate

tasks/install.yml

@@ -17,3 +17,19 @@
     pkg: 'certbot'
     state: 'present'
     update_cache: yes
+
+- name: "Ensure log directory"
+  file:
+    path: '/var/log/letsencrypt'
+    state: 'directory'
+    mode: '700'
+  tags: 'logrotate'
+
+- name: "Enable logrotate"
+  template:
+    src: 'logrotate'
+    dest: '/etc/logrotate.d/letsencrypt'
+    owner: 'root'
+    group: 'root'
+    mode: '644'
+  tags: 'logrotate'

templates/logrotate

+/var/log/letsencrypt/*.log {
+  daily
+  rotate 7
+  missingok
+  compress
+  delaycompress
+  notifempty
+  sharedscripts
+}