Petr, I'm personally already using a similar things on my deployed openSUSE /var/log/apache2/access_log /var/log/apache2/error_log /var/log/apache2/suexec.log /var/log/apache2/deflate.log /var/log/apache2/ssl_request_log /var/log/apache2/ssl_engine_log { compress dateext maxage 365 rotate 99 size=+1024k notifempty missingok create 644 root root postrotate systemctl reload apache2.service endscript } or and *.log when tuned ... Take care, we don't have httpd.service :-) And I'm not sure why they want to push everything to dev/null ? if it failed it's better to have the cron logrotate job sending an email.