diff --git a/roles/base/tasks/journal.yml b/roles/base/tasks/journal.yml
index 5ebf912..b0499eb 100644
--- a/roles/base/tasks/journal.yml
+++ b/roles/base/tasks/journal.yml
@@ -6,3 +6,19 @@
     option: Storage
     value: persistent
   notify: restart-journald
+
+- name: set max data retention for journal
+  ini_file:
+    path: /etc/systemd/journald.conf
+    section: Journal
+    option: MaxRetentionSec
+    value: 1month
+  notify: restart-journald
+
+- name: do not forward journal entries to syslog
+  ini_file:
+    path: /etc/systemd/journald.conf
+    section: Journal
+    option: ForwardToSyslog
+    value: no
+  notify: restart-journald