/var/log/cert-alarm.log
{
  nodateext
  size 2M
  start 1
  rotate 20
  missingok
  notifempty
  compress
  sharedscripts
  postrotate
    systemctl reload syslog-ng > /dev/null 2>&1 || true
  endscript
}