feat: deploy logrotate via system-manager

Author: jfroche

.editorconfig

@@ -0,0 +1,12 @@
+# EditorConfig is awesome: https://EditorConfig.org
+
+# top-most EditorConfig file
+root = true
+
+[*.nix]
+indent_style = space
+indent_size = 2
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true

ansible/files/logrotate_config/logrotate-postgres-auth.conf

@@ -50,20 +50,6 @@
     policy: 'deny'
     state: 'enabled'
 
-- name: Move logrotate files to /etc/logrotate.d/
-  ansible.builtin.copy:
-    dest: "/etc/logrotate.d/{{ logrotate_item['file'] }}"
-    mode: '0700'
-    owner: 'root'
-    src: "files/logrotate_config/{{ logrotate_item['file'] }}"
-  loop:
-    - { file: 'logrotate-postgres.conf' }
-    - { file: 'logrotate-postgres-auth.conf' }
-    - { file: 'logrotate-postgres-csv.conf' }
-    - { file: 'logrotate-walg.conf' }
-  loop_control:
-    loop_var: 'logrotate_item'
-
 - name: Ensure default PostgreSQL logrotate config is removed
   ansible.builtin.file:
     path: '/etc/logrotate.d/postgresql-common'
@@ -74,36 +60,6 @@
     dest: '/etc/cron.deny'
     src: 'files/cron.deny'
 
-- name: Create logrotate.timer.d overrides dir
-  become: true
-  ansible.builtin.file:
-    group: 'root'
-    mode: '0755'
-    owner: 'root'
-    path: '/etc/systemd/system/logrotate.timer.d'
-    state: 'directory'
-
-- name: Configure logrotate.timer.d overrides
-  become: true
-  community.general.ini_file:
-    group: 'root'
-    mode: '0644'
-    no_extra_spaces: true
-    option: 'OnCalendar'
-    owner: 'root'
-    path: '/etc/systemd/system/logrotate.timer.d/override.conf'
-    section: 'Timer'
-    state: 'present'
-    value: '*:0/5'
-
-- name: Reload systemd and start logrotate timer
-  become: true
-  ansible.builtin.systemd_service:
-    daemon_reload: true
-    enabled: true
-    name: 'logrotate.timer'
-    state: 'restarted'
-
 - name: import pgsodium_getkey script
   ansible.builtin.template:
     dest: "{{ pg_bindir }}/pgsodium_getkey.sh"

ansible/files/logrotate_config/logrotate-postgres-csv.conf

@@ -0,0 +1,8 @@
+---
+- name: Test system-manager deployment
+  hosts: localhost
+  tasks:
+    - name: Setup nix
+      ansible.builtin.import_tasks: ../tasks/setup-nix.yml
+    - name: Setup system-manager
+      ansible.builtin.import_tasks: ../tasks/setup-system-manager.yml

ansible/files/logrotate_config/logrotate-postgres.conf

@@ -0,0 +1,15 @@
+import pytest
+
+
+@pytest.fixture(scope="module", autouse=True)
+def run_ansible(run_ansible_playbook):
+    run_ansible_playbook("system-manager.yaml", verbose=True)
+
+
+def test_nix_service(host):
+    assert host.service("nix-daemon.service").is_running
+
+
+def test_system_manager_target(host):
+    target = host.service("system-manager.target")
+    assert target.is_running, "system-manager.target should be active"

ansible/files/logrotate_config/logrotate-walg.conf

@@ -1,9 +1,11 @@
 { self, inputs, ... }:
 let
   mkModules = system: [
+    self.systemModules.logrotate
     ({
       services.nginx.enable = true;
       nixpkgs.hostPlatform = system;
+      supabase.services.logrotate.enable = true;
     })
   ];