/var/log/fail2ban.log {
    compress
    dateext
    maxage 365
    rotate 99
    size=+4096k
    notifempty
    missingok
    # Debian uses 640. CentOS used to use 600. Users shouldn't see who we're banning for what!
    create 600 root root
    postrotate
      fail2ban-client flushlogs  1>/dev/null || true
    endscript
}
