I deliberately log as little as possible about my users. My nginx logrotate config is configured to store one week’s worth of access and error logs: /var/log/nginx/*.log { ... rotate 7 ... } As of this moment, that looks like: -rw-r----- 1 www-data adm 443615 Jan 5 08:29 freeradical.zone-access.log -rw-r----- 1 www-data adm 5405613 Jan 5 06:25 freeradical.zone-access.log.1 -rw-r----- 1 www-data adm 395094 Jan 4 06:24 freeradical.zone-access.log.2.gz -rw-r----- 1 www-data adm 407455 Jan 3 06:24 freeradical.