Màj preprod (#211)

* Ajout wrapper cron sentry (production) (#198)

* chore: upgrade version github actions (cd.yml) (#201)

downgrade python github action to v4

fix cd

* feat: ajoute un wrapper pour capturer les erreurs des crons sur sentry

* feat: add sentry-cli

* fix: indentation

* fix: sentry-cli install

* fix: sentry_wrapper_cron path

* fix: sentry wrapper fonctionnel

* Merge dev -> main (#207)

* chore: upgrade version github actions (cd.yml) (#201)

downgrade python github action to v4

fix cd

* Ajout wrapper cron sentry (#204)

* feat: ajoute un wrapper pour capturer les erreurs des crons sur sentry

* feat: add sentry-cli

* fix: indentation

* fix: sentry-cli install

* fix: sentry_wrapper_cron path

* fix: sentry wrapper fonctionnel

* fix: arg invalide en production - install ansible

* chore: bump pm2 v5.4.2 (#206)

* fix: utilise apt pour l'install ansible

* fix: utilise environnement virtuel pour l'install ansible

* fix: utilise environnement virtuel pour l'install ansible

* chore: reset pm2 v5.2

* fix: setup openfisca install

* Debian 11 to 12 (#208)

* fix: ajout de paramétrage pour gérer les M1 plus proprement

* feat: passage a la version 12 de debian

---------

Co-authored-by: Jeremy PASTOURET <[email protected]>

* chore: upgrade pm2 version

* trigger CD

---------

Co-authored-by: Jeremy PASTOURET <[email protected]>

* Setup la roation des journaux systemd (#209)

* feat: setup la roation des journaux systemd

* lint: handler name

* fix: la casse du notify pour restart systemd-journald

* refactor: rotation des logs fixée à 30 jours

---------

Co-authored-by: Jeremy PASTOURET <[email protected]>

Author: Shamzic

roles/bootstrap/handlers/main.yaml

@@ -8,3 +8,7 @@
   ansible.builtin.service:
     name: sshd
     state: restarted
+- name: Restart systemd-journald
+  ansible.builtin.service:
+    name: systemd-journald
+    state: restarted

roles/bootstrap/tasks/main.yaml

@@ -31,6 +31,10 @@
 - name: Install and configure certbot
   ansible.builtin.include_tasks: install_certbot.yaml
 
+## Setup systemd
+- name: Setup systemd journal rotation
+  ansible.builtin.include_tasks: setup_systemd_journal.yaml
+
 ## Setup Monitoring service
 - name: Configure monitoring service
   ansible.builtin.include_tasks: setup_monitor.yaml

roles/bootstrap/tasks/setup_systemd_journal.yaml

@@ -0,0 +1,15 @@
+---
+- name: Setup systemd journal rotation
+  ansible.builtin.blockinfile:
+    path: /etc/systemd/journald.conf
+    block: |
+      [Journal]
+      SystemMaxUse=2G
+      SystemMaxFileSize=100M
+      MaxRetentionSec=30d
+      Compress=yes
+  notify: Restart systemd-journald
+
+- name: Force immediate cleanup of old journals
+  ansible.builtin.command: journalctl --vacuum-time=30d
+  changed_when: true