system: add traefik access log to lograte

Does not seem to be covered by Traefik's internal log rotation.
saltyorg · Dec 11, 2023 · c275c8c · c275c8c
1 parent 3ec5319
commit c275c8c
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 7 deletions.
diff --git a/roles/system/tasks/subtasks/logrotate.yml b/roles/system/tasks/subtasks/logrotate.yml
@@ -56,6 +56,18 @@
               notifempty
               create 644 {{ user.name }} {{ user.name }}
           }
+      - path: "traefik"
+        content: |
+          /opt/traefik/access.log {
+              rotate {{ traefik_log_max_backups }}
+              size {{ traefik_max_log_size }}
+              missingok
+              notifempty
+              postrotate
+                docker kill --signal="USR1" traefik
+              endscript
+              create 644 {{ user.name }} {{ user.name }}
+          }
 
 - name: Logrotate | Add items to '/etc/logrotate.d'
   ansible.builtin.blockinfile:

diff --git a/roles/traefik/defaults/main.yml b/roles/traefik/defaults/main.yml
@@ -242,6 +242,11 @@ traefik_docker_commands_default:
   - "--log=true"
   - "--log.level={{ traefik_log_level }}"
   - "--log.filepath=/etc/traefik/traefik.log"
+  - "--log.maxsize={{ traefik_log_max_size }}"
+  - "--log.maxbackups={{ traefik_log_max_backups }}"
+  - "--log.maxage={{ traefik_log_max_age }}"
+  - "--log.compress={{ traefik_log_compress }}"
+  - "--log.nocolor=true"
   - "--accesslog={{ traefik_access_log }}"
   - "--accesslog.fields.names.StartUTC=drop"
   - "--accesslog.fields.headers.names.User-Agent=keep"

diff --git a/roles/traefik/templates/dynamic.yml.j2 b/roles/traefik/templates/dynamic.yml.j2
@@ -50,10 +50,3 @@ http:
   serversTransports:
     skipverify:
       insecureSkipVerify: true
-
-log:
-  noColor: true
-  maxSize: {{ traefik_log_max_size }}
-  maxBackups: "{{ traefik_log_max_backups }}"
-  maxAge: "{{ traefik_log_max_age }}"
-  compress: "{{ traefik_log_compress }}"