33 lines
924 B
YAML
33 lines
924 B
YAML
---
|
|
|
|
# Write logs to /var/log/journal (persistent across reboots) — CIS 4.2.1.1.1
|
|
linux_journald_storage: "persistent"
|
|
|
|
# Compress large journal files — CIS 4.2.1.1.2
|
|
linux_journald_compress: "yes"
|
|
|
|
# Forward entries to syslog socket (integrates with rsyslog)
|
|
linux_journald_forward_to_syslog: "yes"
|
|
|
|
# Rate limiting — prevent log flooding
|
|
linux_journald_rate_limit_interval: "30s"
|
|
linux_journald_rate_limit_burst: 10000
|
|
|
|
# Maximum total disk usage by journald
|
|
linux_journald_system_max_use: "1G"
|
|
|
|
# Minimum free disk space journald will leave available
|
|
linux_journald_system_keep_free: "256M"
|
|
|
|
# Maximum size of a single journal file
|
|
linux_journald_system_max_file_size: "100M"
|
|
|
|
# Rotate individual files after this period
|
|
linux_journald_max_file_sec: "1month"
|
|
|
|
# Delete old journal files beyond this total retention period
|
|
linux_journald_max_retention_sec: "2year"
|
|
|
|
# Role disable var
|
|
linux_journald_disabled: false
|