# Runaway-log cap — an hourly size check on the logs an attack inflates faster
# than the nightly logrotate timer notices (Asterisk security/messages, fail2ban).
# Both confs carry `maxsize`, so this rotates ONLY when a file is past its cap and
# is a no-op otherwise. Why: a SIP scanner plus a silently broken ban wrote 26 GB
# of logs in a few days (2026-10-08) — 66 GB used became 77 GB overnight.
17 * * * * root /usr/sbin/logrotate /etc/logrotate.d/alpha-asterisk /etc/logrotate.d/fail2ban >/dev/null 2>&1
