openvpn: configure logrotate

CHANGELOG.md

@@ -13,6 +13,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 ### Added
 
 * haproxy: add haproxy_allow_ip_nonlocal_bind to set sysctl value (optional)
+* openvpn: configure logrotate
 
 ### Changed
 

openvpn/files/logrotate_openvpn

@@ -0,0 +1,10 @@
+/var/log/openvpn.log
+{
+    weekly
+    rotate 52
+    missingok
+    notifempty
+    delaycompress
+    compress
+    copytruncate
+}

openvpn/tasks/debian.yml

@@ -149,6 +149,12 @@
     value: "1"
     sysctl_file: "/etc/sysctl.d/openvpn.conf"
 
+- name: Configure logrotate for OpenVPN
+  copy:
+    src: logrotate_openvpn
+    dest: /etc/logrotate.d/openvpn
+    force: no
+
 - name: Generate a password for the management interface
   set_fact:
     management_pwd: "{{ lookup('password', '/dev/null length=15 chars=ascii_letters,digits') }}"