From 8787281ca2ad16fb7fa6dbee38a21bae3421c839 Mon Sep 17 00:00:00 2001
From: albert <albert@sysctl.io>
Date: Mon, 12 Aug 2024 09:48:40 +0900
Subject: [PATCH] Update firewalls

---
 nixos/hosts/framework-server/fail2ban/traefik.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/nixos/hosts/framework-server/fail2ban/traefik.nix b/nixos/hosts/framework-server/fail2ban/traefik.nix
index 95793b49..fc18f423 100644
--- a/nixos/hosts/framework-server/fail2ban/traefik.nix
+++ b/nixos/hosts/framework-server/fail2ban/traefik.nix
@@ -4,6 +4,17 @@
   # https://blog.lrvt.de/configuring-fail2ban-with-traefik/
   # https://nixos.wiki/wiki/Fail2ban#Extending_Fail2ban
 
+  services.logrotate = {
+    enable = true;
+    checkConfig = true;
+    settings = {
+      "/var/log/traefik/access.log" = {
+        frequency = "daily";
+        rotate = 3;
+      };
+    };
+  };
+
   services.fail2ban.jails = {
     traefik-general-forceful-browsing = {
       settings = {