{ pkgs, lib, ... }:
{
  services.logrotate.settings = {
    "/var/log/audit/audit.log" = { };

    header = {
      global = true;
      dateext = true;
      dateformat = "-%Y-%m-%d";
      nomail = true;
      missingok = true;
      copytruncate = true;
      priority = 1;
      frequency = "daily";
      rotate = 7;
      minage = 1;
      compress = true;
      compresscmd = "${lib.getExe' pkgs.zstd "zstd"}";
      compressoptions = " -Xcompression-level 10";
      compressext = "zst";
      uncompresscmd = "${lib.getExe' pkgs.zstd "unzstd"}";
    };
  };
}