I just noticed that /var/log/postfix.log file was 200MB and hadn't been rotated since it was created in September.
Added /etc/logrotate.d/postfix to roll the log weekly, and logrotate files because of permissions on /var/log.
❯ ls -ld /var/log /var/log/postfix.log
drwxrwxr-x 16 root syslog 4096 Nov 25 02:41 /var/log/
-rw------- 1 root root 51523 Nov 25 03:09 /var/log/postfix.log
❯ sudo logrotate -d /etc/logrotate.d/postfix
...
rotating pattern: /var/log/postfix.log weekly (4 rotations)
empty log files are not rotated, old logs are removed
considering log /var/log/postfix.log
error: skipping "/var/log/postfix.log" because parent directory has insecure permissions (It's world writable or writable by group which is not "root") Set "su" directive in config file to tell logrotate which user/group should be used for rotation.
Creating new state
Easy to fix permissions on /var/log, but ...
- are group write permissions required for something?
- will they just be reset by a future Enhance update?
- does anyone know why Postfix is configured to log to file rather than to syslog?
Seems like a weird setup ...