diff --git a/modules/linux/base.nix b/modules/linux/base.nix
index 18c0230..7fb0bd1 100644
--- a/modules/linux/base.nix
+++ b/modules/linux/base.nix
@@ -72,5 +72,11 @@ with lib; {
       services.iperf3.enable = true;
       environment.systemPackages = with pkgs; [ iperf ];
     }
+    # Don't store logs longer than 7 days
+    {
+      services.journald.extraConfig = ''
+        MaxRetentionSec=7day
+      '';
+    }
   ];
 }
diff --git a/modules/linux/services/nginx.nix b/modules/linux/services/nginx.nix
index 8529452..d1dabab 100644
--- a/modules/linux/services/nginx.nix
+++ b/modules/linux/services/nginx.nix
@@ -14,6 +14,11 @@ in with lib; {
         recommendedGzipSettings = true;
         recommendedProxySettings = true;
       };
+      # Only keep 7 days of logs
+      services.logrotate.settings.nginx = {
+        rotate = 7;
+        frequency = "daily";
+      };
     })
     (mkIf nathan.services.nginx.acme {
       security.acme = {