### {{ ansible_managed }} # Without a cap journald sizes itself at 10% of the filesystem, which on this # 1.9 TB root means it will happily grow into the tens of gigabytes; it had # reached 4 GB before this was set. # # Kept small on purpose: every container runs with log_driver=journald and # fluent-bit drains the journal into Graylog continuously (systemd input, # _COMM=conmon -- see templates/fluent-bit/fluent-bit.conf.j2), so Graylog is # the system of record. What stays here is only the buffer that covers # fluent-bit being down, and 500M is a long outage at this log rate. [Journal] SystemMaxUse={{ journald_max_use | default('500M') }}