From 4bc7a19d887c77e71d8abd806bba25994123b6a5 Mon Sep 17 00:00:00 2001
From: Anton Vakhrushev <anwinged@ya.ru>
Date: Sun, 6 Sep 2026 16:37:13 +0300
Subject: [PATCH] =?UTF-8?q?system:=20=D1=80=D0=B0=D0=B7=D0=BC=D0=B5=D1=80?=
 =?UTF-8?q?=20=D0=B6=D1=83=D1=80=D0=BD=D0=B0=D0=BB=D0=B0=20systemd=20?=
 =?UTF-8?q?=D0=BE=D0=B3=D1=80=D0=B0=D0=BD=D0=B8=D1=87=D0=B5=D0=BD=20500M?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Без потолка journald занимает до 10% файловой системы; на сервере он успел
дорасти до 745M. Лимит выставляется drop-in файлом в journald.conf.d.
---
 playbook-system.yml | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/playbook-system.yml b/playbook-system.yml
index cb3283c..1b5f1a8 100644
--- a/playbook-system.yml
+++ b/playbook-system.yml
@@ -36,6 +36,27 @@
         security_autoupdate_enabled: true
         security_fail2ban_enabled: true
 
+    - name: "Create systemd journald drop-in directory"
+      ansible.builtin.file:
+        path: /etc/systemd/journald.conf.d
+        state: directory
+        owner: root
+        group: root
+        mode: "0755"
+
+    - name: "Limit systemd journal size"
+      ansible.builtin.copy:
+        content: |
+          # Managed by ansible (playbook-system.yml)
+          # Без потолка journald занимает до 10% ФС.
+          [Journal]
+          SystemMaxUse=500M
+        dest: /etc/systemd/journald.conf.d/99-max-use.conf
+        owner: root
+        group: root
+        mode: "0644"
+      notify: "Restart systemd-journald"
+
     - name: "Copy keep files script"
       ansible.builtin.copy:
         src: "files/keep-files.py"
@@ -61,3 +82,9 @@
       when: mount_external_storage | default(false) | bool
       tags:
         - mount-storage
+
+  handlers:
+    - name: "Restart systemd-journald"
+      ansible.builtin.systemd_service:
+        name: systemd-journald
+        state: restarted