Logging and Rotation
Logging and Rotation
Do not make system logs world-readable. The former chmod 644 /var/log/messages guidance was unsafe.
Application logging
Configure channels and level through installation environment settings
Use structured context and avoid secrets/customer payloads
Ensure web, queue, scheduler, and CLI processes can write through approved ownership/groups
Rotation and retention
Use package-provided logrotate/journald policy
Set retention based on operations/legal requirements
Compress/archive without breaking active writers
Monitor disk usage and rotation failures
Developer access
Use php artisan logs:tail --redact where available. Do not publish raw production logs.