#docker

Persist Vault audit logs on the host: permissions, HUP, and 90-day rotation

Configure the audit device, container storage, and logrotate separately, then verify that new requests reach the new file after rotation.