advice audit log retention according to docs

mafredri · mafredri · commit d5062e2d124e · 2025-12-02T09:46:21.000Z
diff --git a/cli/testdata/coder_server_--help.golden b/cli/testdata/coder_server_--help.golden
@@ -710,7 +710,9 @@ that data type.
 
       --audit-logs-retention duration, $CODER_AUDIT_LOGS_RETENTION (default: 0)
           How long audit log entries are retained. Set to 0 to use the global
-          retention value, or to disable if global is also 0.
+          retention value, or to disable if global is also 0. We advise keeping
+          audit logs for at least a year, and in accordance with your compliance
+          requirements.
 
       --connection-logs-retention duration, $CODER_CONNECTION_LOGS_RETENTION (default: 0)
           How long connection log entries are retained. Set to 0 to use the
diff --git a/cli/testdata/server-config.yaml.golden b/cli/testdata/server-config.yaml.golden
@@ -754,7 +754,8 @@ retention:
   # (default: 0, type: duration)
   global: 0s
   # How long audit log entries are retained. Set to 0 to use the global retention
-  # value, or to disable if global is also 0.
+  # value, or to disable if global is also 0. We advise keeping audit logs for at
+  # least a year, and in accordance with your compliance requirements.
   # (default: 0, type: duration)
   audit_logs: 0s
   # How long connection log entries are retained. Set to 0 to use the global
diff --git a/codersdk/deployment.go b/codersdk/deployment.go
@@ -3405,7 +3405,7 @@ Write out the current server config as YAML to stdout.`,
 		},
 		{
 			Name:        "Audit Logs Retention",
-			Description: "How long audit log entries are retained. Set to 0 to use the global retention value, or to disable if global is also 0.",
+			Description: "How long audit log entries are retained. Set to 0 to use the global retention value, or to disable if global is also 0. We advise keeping audit logs for at least a year, and in accordance with your compliance requirements.",
 			Flag:        "audit-logs-retention",
 			Env:         "CODER_AUDIT_LOGS_RETENTION",
 			Value:       &c.Retention.AuditLogs,
diff --git a/docs/reference/cli/server.md b/docs/reference/cli/server.md
diff --git a/enterprise/cli/testdata/coder_server_--help.golden b/enterprise/cli/testdata/coder_server_--help.golden
@@ -711,7 +711,9 @@ that data type.
 
       --audit-logs-retention duration, $CODER_AUDIT_LOGS_RETENTION (default: 0)
           How long audit log entries are retained. Set to 0 to use the global
-          retention value, or to disable if global is also 0.
+          retention value, or to disable if global is also 0. We advise keeping
+          audit logs for at least a year, and in accordance with your compliance
+          requirements.
 
       --connection-logs-retention duration, $CODER_CONNECTION_LOGS_RETENTION (default: 0)
           How long connection log entries are retained. Set to 0 to use the

Original file line number	Diff line number	Diff line change
@@ -3405,7 +3405,7 @@ Write out the current server config as YAML to stdout.`,
`3405`	`3405`	`},`
`3406`	`3406`	`{`
`3407`	`3407`	`Name: "Audit Logs Retention",`
`3408`		`- Description: "How long audit log entries are retained. Set to 0 to use the global retention value, or to disable if global is also 0.",`
	`3408`	`+ Description: "How long audit log entries are retained. Set to 0 to use the global retention value, or to disable if global is also 0. We advise keeping audit logs for at least a year, and in accordance with your compliance requirements.",`
`3409`	`3409`	`Flag: "audit-logs-retention",`
`3410`	`3410`	`Env: "CODER_AUDIT_LOGS_RETENTION",`
`3411`	`3411`	`Value: &c.Retention.AuditLogs,`