diff --git a/shared/applications/server/nginx.nix b/shared/applications/server/nginx.nix
index e5c281f..0d837d5 100644
--- a/shared/applications/server/nginx.nix
+++ b/shared/applications/server/nginx.nix
@@ -22,6 +22,11 @@ in {
     # only allow PFS-enabled ciphers with AES256
     sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
 
+    # disable access logs
+    commonHttpConfig= ''
+      access_log off;
+    '';
+
     # setup a default site
     virtualHosts.default = {
       default = lib.mkDefault true;
diff --git a/shared/base/common-config.nix b/shared/base/common-config.nix
index 814dc4b..7c6f8f2 100644
--- a/shared/base/common-config.nix
+++ b/shared/base/common-config.nix
@@ -6,7 +6,13 @@
       settings.PasswordAuthentication = false;
     };
 
-    journald.extraConfig = "SystemMaxUse=100M";
+    journald = {
+      storage = "volatile";
+      extraConfig = ''
+        SystemMaxUse=100M
+        MaxRetentionSec=1d
+      '';
+    };
   };
 
   nix = {