limit logs size with logrotatev0.62.10

3 files changed, 32 insertions, 1 deletions

diff --git a/etc/ncp-config.d/UFW.sh b/etc/ncp-config.d/UFW.sh
index b12380d3..3676e338 100644
--- a/etc/ncp-config.d/UFW.sh
+++ b/etc/ncp-config.d/UFW.sh
@@ -21,6 +21,9 @@ install()
   apt-get update
   DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ufw
   systemctl disable ufw
+
+  # Disable logging to kernel
+  grep -q maxsize /etc/logrotate.d/ufw || sed -i /weekly/amaxsize2M /etc/logrotate.d/ufw
 }
 
 configure()
diff --git a/ncp.sh b/ncp.sh
index 1fa2ae15..2ebf2da7 100644
--- a/ncp.sh
+++ b/ncp.sh
@@ -184,6 +184,19 @@ EOF
   # update to latest version from github as part of the build process
   bin/ncp-update $BRANCH
 
+  # LIMIT LOG SIZE
+  grep -q maxsize /etc/logrotate.d/apache2 || sed -i /weekly/amaxsize2M /etc/logrotate.d/apache2
+  cat >> /etc/logrotate.d/ncp <<'EOF'
+/var/log/ncp.log
+{
+        rotate 4
+        size 500K
+        missingok
+        notifempty
+        compress
+}
+EOF
+
   # ONLY FOR IMAGE BUILDS
   if [[ -f /.ncp-image ]]; then
     rm -rf /var/log/ncp.log
diff --git a/update.sh b/update.sh
index a51777bb..f2f8ec82 100755
--- a/update.sh
+++ b/update.sh
@@ -216,7 +216,6 @@ Package: *
 Pin: release n=stretch
 Pin-Priority: 600
 EOF
-
     apt-get update
 
     apt-get purge -y php7.0-*
@@ -288,6 +287,22 @@ EOF
       URL="$(ncc config:system:get overwrite.cli.url)"
       [[ "${URL: -1}" != "/" ]] && ncc config:system:set overwrite.cli.url --value="${URL}/"
 
+      # Implement logrotate restrictions
+      grep -q "^\& stop" /etc/rsyslog.d/20-ufw.conf ||  echo "& stop" >> /etc/rsyslog.d/20-ufw.conf
+      grep -q maxsize /etc/logrotate.d/ufw     || sed -i /weekly/amaxsize2M /etc/logrotate.d/ufw
+      grep -q maxsize /etc/logrotate.d/apache2 || sed -i /weekly/amaxsize2M /etc/logrotate.d/apache2
+      service rsyslog restart
+      cat >> /etc/logrotate.d/ncp <<'EOF'
+/var/log/ncp.log
+{
+        rotate 4
+        size 500K
+        missingok
+        notifempty
+        compress
+}
+EOF
+
 } # end - only live updates
 
 exit 0