Merge pull request supabase#34 from supabase/feat/add-logrotate

Feat/add logrotate

Author: inian

amazon-arm.json

@@ -3,9 +3,9 @@
     "aws_access_key": "",
     "aws_secret_key": "",
     "region": "ap-northeast-1",
-    "ami_regions": "us-east-1,eu-central-1,eu-west-1,eu-west-2,ap-south-1,ap-southeast-1,ap-southeast-2,us-west-1,us-east-1,ca-central-1,sa-east-1",
+    "ami_regions": "eu-central-1,eu-west-1,eu-west-2,ap-south-1,ap-southeast-1,ap-southeast-2,us-west-1,us-east-1,ca-central-1,sa-east-1",
     "ami": "ami-03345e027f391e3dc",
-    "ami_name": "supabase-postgres-arm-0.14.1",
+    "ami_name": "supabase-postgres-arm-0.14.2",
     "environment": "prod",
     "ansible_arguments": "--skip-tags,update-only -v"
   },

ansible/files/logrotate-postgres

@@ -0,0 +1,10 @@
+/var/lib/postgresql/12/main/pg_log/postgresql.csv {
+    daily
+    size 50M 
+    rotate 3  
+    copytruncate
+    delaycompress
+    compress
+    notifempty
+    missingok
+}

ansible/playbook.yml

@@ -37,7 +37,12 @@
         state: enabled
         policy: deny
         direction: incoming
-    
+
+    - name: Setup logrotate for postgres logs
+      copy:
+        src: files/logrotate-postgres
+        dest: /etc/logrotate.d/postgres
+
     # Install EC2 instance connect
     # Only for AWS images
     - name: install EC2 instance connect

scripts/91-log_cleanup.sh

@@ -3,3 +3,6 @@
 #
 echo "Clearing all log files"
 rm -rf /var/log/*
+
+# https://github.com/fail2ban/fail2ban/issues/1593
+touch /var/log/auth.log