I set it to debug at somepoint and forgot maybe? Idk, but why the heck does the default config of the official Docker is to keep all logs, forever, in a single file woth no rotation?

Feels like 101 of log files. Anyway, this explains why my storage recipt grew slowly but unexpectedly.

    • non_burglar@lemmy.world
      link
      fedilink
      English
      arrow-up
      14
      ·
      11 hours ago

      I don’t disagree that logrotate is a sensible answer here, but making that the responsibility of the user is silly.

      • Shimitar@downonthestreet.eu
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        4
        ·
        4 hours ago

        Are you crazy? I understand that we are used to dumbed down stuff, but come on…

        Rotating logs is in the ABC of any sysadmin, even before backups.

        First, secure your ssh logins, then secure your logs, then your fail2ban then your backups…

        To me, that’s in the basic stuff you must always ensure.

        • catloaf@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 hours ago

          Those should also all be secure by default. What is this, Windows?

          • Shimitar@downonthestreet.eu
            link
            fedilink
            English
            arrow-up
            2
            ·
            3 hours ago

            Just basic checks I prefer to ensure, not leave to distribution good faith. If all is set, good to go. Otherwise, fix and move on.

            Specially with self hosted stuff that is a bit more custom than the usual.

    • catloaf@lemm.ee
      link
      fedilink
      English
      arrow-up
      23
      ·
      13 hours ago

      We should each not have to configure log rotation for every individual service. That would require identify what and how it logs data in the first place, then implementing a logrotate config. Services should include a reasonable default in logrotate.d as part of their install package.

      • Shimitar@downonthestreet.eu
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 hours ago

        Agreed, but going container route those nice basic practices are dead.

        And also, being mextcloud a php service, of can’t by definition ship with a logrotate config too, because its never packaged by your repo.

      • RubberElectrons@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        13 hours ago

        Ideally yes, but I’ve had to do this regularly for many services developed both in-house and out of house.

        Solve problems, and maybe share your work if you like, I think we all appreciate it.