Lightweight Docker image to be used in conjunction with a dockerized Traefik instance to rotate Traefik's access logs.
Home Page: https://buymeacoffee.com/vegardit
License: Apache License 2.0
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
can you provide also an ARM builds?
It seems that the log files don't seem to get compressed.
Whilst I can see it in the template, it doesn't seem to compress the files into gz.
Hi,
first of all thanks for this, it's really helpful. :)
Wanted to ask if you could please create a release version with semver tagging, I'm using WUD and without the semver tag this container gets an update notification very often because the digest changes using tag latest.
Thanks in advance. :)
My compose config for Traefik:
traefik:
image: traefik:v2.8.3
container_name: traefik
hostname: traefik
restart: unless-stoppedThe documented command doesn't find the image:
# command to determine the id of the container running Traefik:
TRAEFIK_CONTAINER_ID_COMMAND: docker ps --quiet --filter ancestor=traefikHad to replace with one of the following:
TRAEFIK_CONTAINER_ID_COMMAND: docker inspect --format="{{.Id}}" traefik
TRAEFIK_CONTAINER_ID_COMMAND: docker ps --no-trunc -aqf "name=^traefik$$"Hope it helps anyone else having with the same issue.
Any reason you build new container on daily basis? I think it’s more propitiate to push new images ones a week if there were no code change. I have my containers with automatic update with new images. Yours updates every single day.
Hi,
as many people are using traefik + crowdsec or fail2ban I think it would be beneficial to accept multiple directories to do the log rotation.
E.g.:
volumes:
- /var/run/docker.sock:/var/run/docker.sock:rw # required to send USR1 signal to Traefik after log rotation
- ./log:/var/log/traefik:rw # folder containing access.log file
- ../crowdsec/log:/var/log/crowdsec:rw
environment:
TZ: "Europe/Berlin"
LOGROTATE_LOGS: "/var/log/traefik/*.log, /var/loge/crowdsec/*.log"
Would it be possible to have the ability to change the owner of the log file after rotation?
Currently, it defaults to root:root as that's what the container runs as.
My Traefik logs are currently owned by a different user and group.
An env var to override the create 0644 root root section would probably do it quite nicely.
It would be nice if we could use a socket-protector like knrdl/traefik-docker-protector (or any other) instead of, not too not too secure, /var/run/docker.sock.
Any chance this could be implemented?
hi,
I am running this with Docker traefik
I get the following issue
error: skipping "/logs/traefik/access.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.
I have tried changing the directory ownership, setting the puid and guid
Any help greatly appreciated.
Mo
full output below:
*********************
* TRAEFIK LOGROTATE *
*********************
GIT_REPO: https://github.com/vegardit/docker-traefik-logrotate
GIT_BRANCH: main
GIT_COMMIT: 45ab8ef @ 2022-03-25 14:53:41 UTC
IMAGE_BUILD: 2022-05-09T01:52:20Z
2022-05-09 18:13:21 INFO [/opt/run.sh:26] Timezone is UTC +0000
2022-05-09 18:13:21 INFO [/opt/run.sh:48] Generating [/etc/logrotate.conf] based on template [/opt/logrotate.conf.template]...
/logs/traefik/access.log {
�
y
maxsize 50M
rotate 14
start 1
missingok
notifempty
�
compress
delaycompress
create 0644 root root
sharedscripts
postrotate
/opt/notify-traefik.sh
endscript
}
2022-05-09 18:13:21 INFO [/opt/run.sh:61] Scheduling logrotate cronjob...
2022-05-09 18:13:21 INFO [/opt/run.sh:64] Starting cron daemon...
2022-05-09 18:14:00 INFO [/opt/rotate-logs.sh:16] ########## logrotate START ##########
reading config file /etc/logrotate.conf
Creating stub state file: /var/lib/logrotate.status
Reading state from file: /var/lib/logrotate.status
Allocating hash table for state file, size 64 entries
Handling 1 logs
rotating pattern: /logs/traefik/access.log after 1 days (14 rotations)
empty log files are not rotated, log files >= 52428800 are rotated earlier, old logs are removed
considering log /logs/traefik/access.log
error: skipping "/logs/traefik/access.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.
Creating new state
18:14:00 Error - exited with status 1 in [/opt/rotate-logs.sh] at line 18:
15 #################################################
16 log INFO "########## logrotate START ##########"
17
18 /usr/sbin/logrotate --verbose /etc/logrotate.conf 2> >(sed 's/^/ /' >&2)
19
20 log INFO "########## logrotate END ############"
2022-05-09 18:15:00 INFO [/opt/rotate-logs.sh:16] ########## logrotate START ##########
reading config file /etc/logrotate.conf
Reading state from file: /var/lib/logrotate.status
Allocating hash table for state file, size 64 entries
Creating new state
Handling 1 logs
rotating pattern: /logs/traefik/access.log after 1 days (14 rotations)
empty log files are not rotated, log files >= 52428800 are rotated earlier, old logs are removed
considering log /logs/traefik/access.log
error: skipping "/logs/traefik/access.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.
18:15:00 Error - exited with status 1 in [/opt/rotate-logs.sh] at line 18:
15 #################################################
16 log INFO "########## logrotate START ##########"
17
18 /usr/sbin/logrotate --verbose /etc/logrotate.conf 2> >(sed 's/^/ /' >&2)
19
20 log INFO "########## logrotate END ############"
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.