update

opnsense/plugin/src/etc/newsyslog.conf.d/rustproxy.conf

@@ -0,0 +1,10 @@
+# FreeBSD/OPNsense newsyslog equivalent for RustProxy log retention.
+# Fields: path owner:group mode count size when flags [pidfile signal]
+# 14 archives; rotate daily or above 100 MiB; gzip, keep newest uncompressed.
+# G=glob, B=no injected text (important for JSONL), E=skip empty, P=delay gzip.
+# The supervised *.log output is reopened on SIGHUP via daemon(8) -H.
+# JSONL files and other application-owned logs cannot use Linux copytruncate:
+# their writers must close/reopen the files to avoid writing to old inodes.
+/var/log/rustproxy/*.jsonl         root:wheel 0640 14 100M $D0 GBEZPN
+/var/log/rustproxy/*.log           root:wheel 0640 14 100M $D0 GBEZP /var/run/rustproxy/daemon.pid SIGHUP
+/var/log/rustproxy/vhosts/*.jsonl  root:wheel 0640 14 100M $D0 GBEZPN

opnsense/plugin/src/etc/rc.d/rustproxy

@@ -163,7 +163,8 @@ rustproxy_daemon_user_arg=""
 if [ "$rustproxy_user" != "root" ]; then
     rustproxy_daemon_user_arg="-u ${rustproxy_user}"
 fi
-command_args="-r -R ${rustproxy_restart_delay} -P ${pidfile} -p ${child_pidfile} ${rustproxy_daemon_user_arg} -o ${rustproxy_log_file} ${rustproxy_command} ${rustproxy_runtime_args}"
+# -H allows daemon(8) to reopen the stdout/stderr log when newsyslog sends SIGHUP.
+command_args="-r -R ${rustproxy_restart_delay} -H -P ${pidfile} -p ${child_pidfile} ${rustproxy_daemon_user_arg} -o ${rustproxy_log_file} ${rustproxy_command} ${rustproxy_runtime_args}"
 required_files="${rustproxy_command}"
 start_precmd="rustproxy_prestart"
 start_postcmd="rustproxy_poststart"