diff --git a/roles/people/files/rsyslog-logrotate b/roles/people/files/rsyslog-logrotate
new file mode 100644
index 0000000000..8804bce6cc
--- /dev/null
+++ b/roles/people/files/rsyslog-logrotate
@@ -0,0 +1,17 @@
+/var/log/cron
+/var/log/maillog
+/var/log/messages
+/var/log/secure
+/var/log/spooler
+{
+    missingok
+    sharedscripts
+    postrotate
+        /usr/bin/systemctl reload rsyslog.service >/dev/null 2>&1 || true
+    endscript
+    compress
+    compresscmd /usr/bin/xz
+    uncompresscmd /usr/bin/xz
+    compressext .xz
+    dateext
+}
diff --git a/roles/people/tasks/main.yml b/roles/people/tasks/main.yml
index 7d2834968b..7d6386edd9 100644
--- a/roles/people/tasks/main.yml
+++ b/roles/people/tasks/main.yml
@@ -308,3 +308,14 @@
   - config
   notify:
   - Restart sssd
+
+#  We don't have much space on / and anubis makes messages big, default
+# doesn't compress rotations and this does.
+- name: People log rotate
+  ansible.builtin.copy: src=rsyslog-logrotate dest=/etc/logrotate.d/rsyslog mode=0644
+  notify:
+  - Restart rsyslog
+  tags:
+  - rsyslogd
+  - config
+  - base