Sets 30 day retention period for apache logs

Makefile

@@ -105,7 +105,7 @@ docker-build-ubuntu: ## Builds SD Ubuntu docker container
 
 .PHONY: build-debs
 build-debs: ## Builds and tests debian packages
-	@if [[ "${CIRCLE_BRANCH}" != docs-* ]]; then molecule test -s builder; else echo Not running on docs branch...; fi
+	@if [[ "${CIRCLE_BRANCH}" != docs-* ]]; then molecule --debug test -s builder; else echo Not running on docs branch...; fi
 
 .PHONY: safety
 safety: ## Runs `safety check` to check python dependencies for vulnerabilities

install_files/ansible-base/roles/app/files/apache2-logrotate.conf

@@ -0,0 +1,10 @@
+/var/log/apache2/*.log {
+  daily
+  missingok
+  rotate 30
+  create 640 root adm
+  sharedscripts
+  postrotate
+    /usr/bin/killall -HUP apache2
+  endscript
+}

install_files/ansible-base/roles/app/tasks/install_and_harden_apache.yml

@@ -115,3 +115,12 @@
     - restart apache2
   tags:
     - apache
+
+- name: Retain no more than one month of apache logs
+  copy:
+    src: apache2-logrotate.conf
+    dest: /etc/logrotate.d/apache2
+    owner: root
+    mode: "0644"
+  tags:
+    - apache