Commit graph

9 commits

Author SHA1 Message Date
Daniel Micay
d825e67a39 make /var/log/nginx permissions match log files 2025-11-15 15:26:31 -05:00
Daniel Micay
c9fae6c345 syslog-ng: split nginx configuration into conf.d 2025-11-08 13:44:52 -05:00
Daniel Micay
a05232d2f6 add syslog-ng include directory 2025-11-08 01:41:56 -05:00
Daniel Micay
2caa67529a set up syslog-ng for nginx access log
This sets up the infrastructure for moving from storing nginx access
logs in journald to plain text files written by syslog-ng and rotated by
logrotate. This works around the poor performance, poor space efficiency
and lack of archived log compression for journald. Unlike writing access
logs directly with nginx, this continues avoiding blocking writes in the
event loop and sticks to asynchronous sends through a socket.

Since nginx only supports syslog via the RFC 3164 protocol rather than
the more modern RFC 5424 protocol, this leaves formatting timestamps up
to nginx rather than using the ones provided via the syslog protocol.
2025-11-03 00:33:28 -05:00
Daniel Micay
97d55a130e enable web services immediately 2025-11-01 20:14:35 -04:00
Daniel Micay
48bdeb4033 explicitly refer to nginx.service 2025-11-01 20:05:50 -04:00
Daniel Micay
0d1705320f use consistent naming for session ticket key scripts/units 2025-10-30 17:06:07 -04:00
Daniel Micay
c4af821eda always create /var/cache/nginx for web servers
This avoids needing to restart nginx for ReadWritePaths to kick in after
creating it.
2025-10-27 20:52:34 -04:00
Daniel Micay
04d0489e57 add certbot and web deployment scripts 2025-10-19 12:30:53 -04:00