#cloud-config
package_update: true
package_upgrade: true

packages:
  - rsyslog
  - logrotate

write_files:
  - path: /etc/rsyslog.d/50-default.conf
    content: |
      # Default logging rules
      auth,authpriv.*                 /var/log/auth.log
      *.*;auth,authpriv.none          -/var/log/syslog
      daemon.*                        -/var/log/daemon.log
      kern.*                          -/var/log/kern.log
      lpr.*                           -/var/log/lpr.log
      mail.*                          -/var/log/mail.log
      user.*                          -/var/log/user.log
      
      # Application logs
      local0.*                        /var/log/application.log
      
  - path: /etc/logrotate.d/application
    content: |
      /var/log/application.log {
          daily
          missingok
          rotate 52
          compress
          delaycompress
          notifempty
          create 644 root root
          postrotate
              /bin/kill -HUP `cat /var/run/rsyslogd.pid 2> /dev/null` 2> /dev/null || true
          endscript
      }

runcmd:
  - systemctl enable rsyslog
  - systemctl restart rsyslog
  - logrotate -d /etc/logrotate.conf