Skip to main content

Log raoted policy enforcement

Final logrotate config for access.json

Create / edit:


sudo nano /etc/logrotate.d/nginx-access-json

Paste exactly this:


/var/log/nginx/access.json { daily rotate 30 maxsize 30G missingok notifempty compress delaycompress dateext dateformat -%Y%m%d copytruncate create 0640 www-data adm }

🔍 What this guarantees

Requirement Covered
Rotate daily ✅
Keep 30 days ✅ rotate 30
Rotate early if huge ✅ maxsize 30G
No nginx reload ✅ copytruncate
Promtail-safe ✅
Disk protected ✅
JSON intact ✅

🧪 Test immediately (no waiting)


sudo logrotate -d /etc/logrotate.d/nginx-access-json
sudo logrotate -f /etc/logrotate.d/nginx-access-json

No comments to display

Back to top