Commit Graph

3 Commits

Author SHA1 Message Date
Дмитрий 34bcc570ad fix(setup-logrotate): add 'su postgres postgres' directive для PG logrotate
ремонт: logrotate отказал rotation PG log из-за insecure parent dir permissions

/var/log/postgresql/ имеет permissions drwxrwxr-t (group-writable + sticky).
Logrotate refuses to rotate без явного su directive в config.
Стандарт postgresql-common тоже использует 'su' — копирую идиому.
2026-05-29 14:48:05 +03:00
Дмитрий 6383da7f12 chore(incident-followup): close 4 tails from 29.05 disk-full incident
ремонт: incident-followup cleanup batch — 4 хвоста

1. Larastan baseline regenerated (was 161 errors pre-existing IDE helper drift)
2. Deptrac Mail: [Model, Service] + ADR-005 amend (was 4 pre-existing violations)
3. PG logrotate config in setup-logrotate.yml
4. F1 6 mismatches — RCA updated (algorithm divergence trigger global vs verify per-tenant)

+3 cspell words: notifempty, missingok, верифицируется.

Ref: docs/incidents/2026-05-29-disk-full-pg-recovery.md §4-5
2026-05-29 14:45:28 +03:00
Дмитрий a21712c9e1 ops(incident-prevention): setup-logrotate workflow для Laravel logs
ремонт: 8.7G laravel.log сожрал диск 29.05 — нужна size-based rotation 50M/5 копий

Installs /etc/logrotate.d/laravel-liderra:
- size 50M (rotate when >= 50MB, не daily)
- rotate 5 (keep 5 rotated copies = max ~250MB total)
- compress + delaycompress
- copytruncate (atomic, не сбивает Laravel file handle)
- su/create www-data:www-data

Verified через logrotate --debug + --force.
Prevents recurrence of disk-full incident 2026-05-29.
2026-05-29 13:25:40 +03:00