Only keep 7 days of logs

modules/linux/base.nix

@@ -72,5 +72,11 @@ with lib; {
       services.iperf3.enable = true;
       environment.systemPackages = with pkgs; [ iperf ];
     }
+    # Don't store logs longer than 7 days
+    {
+      services.journald.extraConfig = ''
+        MaxRetentionSec=7day
+      '';
+    }
   ];
 }

modules/linux/services/nginx.nix

@@ -14,6 +14,11 @@ in with lib; {
         recommendedGzipSettings = true;
         recommendedProxySettings = true;
       };
+      # Only keep 7 days of logs
+      services.logrotate.settings.nginx = {
+        rotate = 7;
+        frequency = "daily";
+      };
     })
     (mkIf nathan.services.nginx.acme {
       security.acme = {