Initial commit.

logrotate.d/aide

@@ -0,0 +1,9 @@
+/var/log/aide/*.log {
+        weekly
+        missingok
+        rotate 4
+        compress
+        delaycompress
+        copytruncate
+        minsize 100k
+}

logrotate.d/btmp

@@ -0,0 +1,7 @@
+# no packages own btmp -- we'll rotate it here
+/var/log/btmp {
+    missingok
+    monthly
+    create 0600 root utmp
+    rotate 1
+}

logrotate.d/chrony

@@ -0,0 +1,8 @@
+/var/log/chrony/*.log {
+    missingok
+    nocreate
+    sharedscripts
+    postrotate
+        /usr/bin/chronyc cyclelogs > /dev/null 2>&1 || true
+    endscript
+}

logrotate.d/clamav-unofficial-sigs

@@ -0,0 +1,33 @@
+# https://eXtremeSHOK.com ######################################################
+# This file contains the logrotate settings for clamav-unofficial-sigs.sh
+###################
+# This is property of eXtremeSHOK.com
+# You are free to use, modify and distribute, however you may not remove this notice.
+# Copyright (c) Adrian Jon Kriel :: admin@extremeshok.com
+##################
+#
+# Script updates can be found at: https://github.com/extremeshok/clamav-unofficial-sigs
+#
+# Originially based on:
+# Script provide by Bill Landry (unofficialsigs@gmail.com).
+#
+# License: BSD (Berkeley Software Distribution)
+#
+##################
+# Automatically Generated: Fri Oct 23 14:02:50 EEST 2020
+##################
+#
+# This logrotate file will rotate the logs generated by the clamav-unofficial-sigs.sh
+#
+# To Adjust the logrotate values, edit your configs and run
+# bash clamav-unofficial-sigs.sh --install-logrotate to generate a new file.
+
+/var/log/clamav-unofficial-sigs/clamav-unofficial-sigs.log {
+  weekly
+  rotate 4
+  missingok
+  notifempty
+  compress
+  create 0640 amavis amavis
+}
+

logrotate.d/clamav-update

@@ -0,0 +1,8 @@
+/var/log/freshclam.log {
+        monthly
+        notifempty
+        missingok
+        postrotate
+                systemctl try-restart clamav-freshclam.service
+        endscript
+}

logrotate.d/dnf

@@ -0,0 +1,15 @@
+/var/log/dnf.librepo.log {
+    missingok
+    notifempty
+    rotate 4
+    weekly
+    create 0600 root root
+}
+
+/var/log/hawkey.log {
+    missingok
+    notifempty
+    rotate 4
+    weekly
+    create 0600 root root
+}

logrotate.d/fail2ban

@@ -0,0 +1,14 @@
+#
+# Gentoo:
+# http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-analyzer/fail2ban/files/fail2ban-logrotate?view=markup
+#
+# Debian:
+# https://github.com/fail2ban/fail2ban/blob/debian/debian/fail2ban.logrotate
+
+/var/log/fail2ban.log {
+    missingok
+    notifempty
+    postrotate
+      /usr/bin/fail2ban-client flushlogs >/dev/null || true
+    endscript
+}

logrotate.d/firewalld

@@ -0,0 +1,7 @@
+/var/log/firewalld {
+    weekly
+    missingok
+    rotate 4
+    copytruncate
+    minsize 1M
+}

logrotate.d/httpd

@@ -0,0 +1,9 @@
+/var/log/httpd/*log {
+    missingok
+    notifempty
+    sharedscripts
+    delaycompress
+    postrotate
+        /bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true
+    endscript
+}

logrotate.d/iptraf-ng

@@ -0,0 +1,9 @@
+# Logrotate file for iptraf
+/var/log/iptraf-ng/*.log {
+	compress
+	delaycompress
+	missingok
+	notifempty
+	rotate 4
+	create 0600 root root
+}

logrotate.d/lfd

@@ -0,0 +1,12 @@
+/var/log/lfd.log {
+        weekly
+        rotate 1
+        compress
+	missingok
+}
+/var/log/lfd_messenger.log {
+        weekly
+        rotate 1
+        compress
+	missingok
+}

logrotate.d/mysql

@@ -0,0 +1,37 @@
+# This logname can be set in /etc/my.cnf
+# by setting the variable "log-error"
+# in the [mysqld] section as follows:
+#
+# [mysqld]
+# log-error=/var/lib/mysql/mysqld.log
+#
+# If the root user has a password you have to create a
+# /root/.my.cnf configuration file with the following
+# content:
+#
+# [mysqladmin]
+# password = <secret> 
+# user= root
+#
+# where "<secret>" is the password. 
+#
+# ATTENTION: This /root/.my.cnf should be readable ONLY
+# for root !
+
+/var/lib/mysql/mysqld.log {
+        # create 600 mysql mysql
+        notifempty
+        daily
+        rotate 3
+        missingok
+        compress
+    postrotate
+	# just if mariadbd is really running
+	if test -x /usr/bin/mysqladmin && \
+	   /usr/bin/mysqladmin ping &>/dev/null
+	then
+	   /usr/bin/mysqladmin --local flush-error-log \
+              flush-engine-log flush-general-log flush-slow-log
+	fi
+    endscript
+}

logrotate.d/named

@@ -0,0 +1,12 @@
+/var/named/data/named.run {
+    missingok
+    su named named
+    create 0644 named named
+    postrotate
+        /usr/bin/systemctl reload named.service > /dev/null 2>&1 || true
+        /usr/bin/systemctl reload named-chroot.service > /dev/null 2>&1 || true
+        /usr/bin/systemctl reload named-sdb.service > /dev/null 2>&1 || true
+        /usr/bin/systemctl reload named-sdb-chroot.service > /dev/null 2>&1 || true
+        /usr/bin/systemctl reload named-pkcs11.service > /dev/null 2>&1 || true
+    endscript
+}

logrotate.d/nginx

@@ -0,0 +1,15 @@
+/var/log/nginx/*.log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                if [ -f /var/run/nginx.pid ]; then
+                        kill -USR1 `cat /var/run/nginx.pid`
+                fi
+        endscript
+}

logrotate.d/php-fpm

@@ -0,0 +1,9 @@
+/var/log/php-fpm/*log {
+    missingok
+    notifempty
+    sharedscripts
+    delaycompress
+    postrotate
+	/bin/kill -SIGUSR1 `cat /run/php-fpm/php-fpm.pid 2>/dev/null` 2>/dev/null || true
+    endscript
+}

logrotate.d/ppp

@@ -0,0 +1,10 @@
+# Logrotate file for ppp RPM
+ 
+/var/log/ppp/connect-errors {
+	missingok
+	compress
+	notifempty
+	daily
+	rotate 5
+	create 0600 root root
+}

logrotate.d/psacct

@@ -0,0 +1,15 @@
+# Logrotate file for psacct RPM
+
+/var/account/pacct {
+    compress
+    delaycompress
+    notifempty
+    daily
+    rotate 31
+    create 0600 root root
+    postrotate
+       if /usr/bin/systemctl --quiet is-active psacct.service ; then
+           /usr/sbin/accton /var/account/pacct | /usr/bin/grep -v "Turning on process accounting, file set to '/var/account/pacct'." | /usr/bin/cat
+       fi
+    endscript
+}

logrotate.d/redis

@@ -0,0 +1,9 @@
+/var/log/redis/*.log {
+    weekly
+    rotate 10
+    copytruncate
+    delaycompress
+    compress
+    notifempty
+    missingok
+}

logrotate.d/rkhunter

@@ -0,0 +1,5 @@
+/var/log/rkhunter/rkhunter.log {
+    weekly
+    notifempty
+    create 640 root root
+}

logrotate.d/rspamd

@@ -0,0 +1,11 @@
+/var/log/rspamd/*log {
+    daily
+    rotate 10
+    missingok
+    notifempty
+    compress
+    sharedscripts
+    postrotate
+        export `systemctl -p MainPID show rspamd.service`; if [ -n "$MainPID" ]; then kill -USR1 $MainPID; fi
+    endscript
+}

logrotate.d/sa-update

@@ -0,0 +1,5 @@
+/var/log/sa-update.log {
+    monthly
+    notifempty
+    missingok
+}

logrotate.d/sssd

@@ -0,0 +1,12 @@
+/var/log/sssd/*.log {
+    weekly
+    missingok
+    notifempty
+    sharedscripts
+    rotate 2
+    compress
+    delaycompress
+    postrotate
+        /bin/kill -HUP `cat /var/run/sssd.pid  2>/dev/null`  2> /dev/null || true
+    endscript
+}

logrotate.d/subscription-manager

@@ -0,0 +1,6 @@
+/var/log/rhsm/*.log {
+    missingok
+    notifempty
+    sharedscripts
+    copytruncate
+}

logrotate.d/syslog

@@ -0,0 +1,12 @@
+/var/log/cron
+/var/log/maillog
+/var/log/messages
+/var/log/secure
+/var/log/spooler
+{
+    missingok
+    sharedscripts
+    postrotate
+        /usr/bin/systemctl kill -s HUP rsyslog.service >/dev/null 2>&1 || true
+    endscript
+}

logrotate.d/up2date

@@ -0,0 +1,3 @@
+/var/log/up2date {
+	missingok
+}

logrotate.d/vsftpd

@@ -0,0 +1,11 @@
+/var/log/vsftpd.log {
+    # ftpd doesn't handle SIGHUP properly
+    nocompress
+    missingok
+}
+
+/var/log/xferlog {
+    # ftpd doesn't handle SIGHUP properly
+    nocompress
+    missingok
+}

logrotate.d/wtmp

@@ -0,0 +1,8 @@
+# no packages own wtmp -- we'll rotate it here
+/var/log/wtmp {
+    missingok
+    monthly
+    create 0664 root utmp
+    minsize 1M
+    rotate 1
+}