# StellaOps Logrotate Configuration
# Place in /etc/logrotate.d/stellaops

/var/log/stellaops/*/*.log {
    daily
    rotate 14
    compress
    delaycompress
    missingok
    notifempty
    create 0640 stellaops stellaops
    sharedscripts
    dateext
    dateformat -%Y%m%d
    
    # Size-based rotation (rotate if larger than 100MB regardless of time)
    maxsize 100M
    
    # Minimum size before considering rotation
    minsize 1M
    
    postrotate
        # Signal services to reopen log files if needed
        # Most Serilog file sinks handle this automatically
        /bin/true
    endscript
}

# Scanner service specific (higher volume)
/var/log/stellaops/scanner/*.log {
    daily
    rotate 7
    compress
    delaycompress
    missingok
    notifempty
    create 0640 stellaops stellaops
    sharedscripts
    dateext
    maxsize 200M
}

# Concelier service (vulnerability processing)
/var/log/stellaops/concelier/*.log {
    daily
    rotate 14
    compress
    delaycompress
    missingok
    notifempty
    create 0640 stellaops stellaops
    sharedscripts
    dateext
    maxsize 150M
}

# Authority service (signing operations - keep longer for audit)
/var/log/stellaops/authority/*.log {
    daily
    rotate 30
    compress
    delaycompress
    missingok
    notifempty
    create 0640 stellaops stellaops
    sharedscripts
    dateext
    maxsize 50M
}

# Router/Gateway logs
/var/log/stellaops/router/*.log {
    daily
    rotate 7
    compress
    delaycompress
    missingok
    notifempty
    create 0640 stellaops stellaops
    sharedscripts
    dateext
    maxsize 100M
}