Added the limitation to the log

1 files changed, 8 insertions, 0 deletions

diff --git a/modules/adguard.nix b/modules/adguard.nix
index 35cafc3..fc01278 100644
--- a/modules/adguard.nix
+++ b/modules/adguard.nix
@@ -67,6 +67,14 @@
         enable_dnssec = true;
       };
 
+      # Query log retention. `interval` accepts a duration string between
+      # "1h" and "8760h" (1 year) - trimmed down from AdGuard's 90-day
+      # default to 1 hour.
+      querylog = {
+        enabled = true;
+        interval = "1h";
+      };
+
       # Users block: username "admin", password from sops secret.
       # The ExecStartPre below writes the hash into the config on every
       # service start, because mutableSettings=false uses a static config