aboutsummaryrefslogtreecommitdiffstats
path: root/fripost-docs.org
diff options
context:
space:
mode:
Diffstat (limited to 'fripost-docs.org')
-rw-r--r--fripost-docs.org31
1 files changed, 31 insertions, 0 deletions
diff --git a/fripost-docs.org b/fripost-docs.org
index f61e51b..9d0f33e 100644
--- a/fripost-docs.org
+++ b/fripost-docs.org
@@ -714,6 +714,37 @@ TODO: add the necessary configuration files
- sudo apt-get install apache2
+** Logging
+*** Overview
+We want to limit how much we log for privacy reasons. At the same time we want
+to be able to debug technical problems and detect intrusions.
+
+For the webmail, we only log messages of priority warn or higher.
+*** Configuration
+
+ :: /etc/rsyslog.conf
+
+ *.*;auth,authpriv.none;mail.err -/var/log/syslog
+
+# NOTE: /var/log/mail.{err,warn} can be kept at the default
+# values since they do not contain any sensitive information.
+ :: /etc/logrotate.d/rsyslog
+
+ /var/log/mail.log
+ /var/log/mail.info
+ {
+ rotate 3
+ daily
+ missingok
+ ifempty
+ compress
+ delaycompress
+ sharedscripts
+ postrotate
+ invoke-rc.d rsyslog reload > /dev/null
+ endscript
+ }
+
** Necessary stuff to fix for security
*** Bacula for backups
Also has tripwire-like capabilities.