nginx logs

hyperknot · Jul 23, 2024 · d19f3a4 · d19f3a4
1 parent d001c1e
commit d19f3a4
Show file tree

Hide file tree

Showing 5 changed files with 18 additions and 46 deletions.
diff --git a/scripts/http_host/http_host_lib/nginx/cf.bak b/scripts/http_host/http_host_lib/nginx/cf.bak
diff --git a/scripts/http_host/http_host_lib/nginx/le.conf b/scripts/http_host/http_host_lib/nginx/le.conf
@@ -23,8 +23,8 @@ server {
     ssl_prefer_server_ciphers off;
 
     # access log disabled by default
-    #access_log /data/ofm/http_host/logs_nginx/le-access.jsonl access_json buffer=32k;
-    access_log off;
+    access_log /data/ofm/http_host/logs_nginx/le-access.jsonl access_json buffer=32k;
+    #access_log off;
 
     error_log /data/ofm/http_host/logs_nginx/le-error.log;
 

diff --git a/scripts/http_host/http_host_lib/nginx/ledns.conf b/scripts/http_host/http_host_lib/nginx/ledns.conf
@@ -23,8 +23,8 @@ server {
     ssl_prefer_server_ciphers off;
 
     # access log disabled by default
-    #access_log /data/ofm/http_host/logs_nginx/ledns-access.jsonl access_json buffer=32k;
-    access_log off;
+    access_log /data/ofm/http_host/logs_nginx/ledns-access.jsonl access_json buffer=32k;
+    #access_log off;
 
     error_log /data/ofm/http_host/logs_nginx/ledns-error.log;
 

diff --git a/ssh_lib/assets/nginx/nginx.conf b/ssh_lib/assets/nginx/nginx.conf
@@ -43,23 +43,31 @@ http {
     gzip_types application/json;
 
     log_format access_json '{'
+
+    # general
     '"time": "$time_iso8601", '
     '"status": $status, '
     '"request_method": "$request_method", '
     '"uri": "$uri", '
     '"request": "$request", '
     '"request_time": $request_time, '
     '"body_bytes_sent": $body_bytes_sent, '
-    '"remote_addr": "$remote_addr", '
-    '"http_x_forwarded_for": "$http_x_forwarded_for", '
-    '"http_cf_connecting_ip": "$http_cf_connecting_ip", '
     '"http_referrer": "$http_referer", '
     '"http_user_agent": "$http_user_agent", '
     '"scheme": "$scheme", '
     '"host": "$host", '
     '"http_host": "$http_host", '
-    '"http_cf_ray": "$http_cf_ray", '
-    '"http_cf_ipcountry": "$http_cf_ipcountry"'
+
+    # IP address related
+    #'"remote_addr": "$remote_addr", '
+    #'"http_x_forwarded_for": "$http_x_forwarded_for", '
+
+    # CF related
+    #'"http_cf_ray": "$http_cf_ray", '
+    #'"http_cf_ipcountry": "$http_cf_ipcountry", '
+    #'"http_cf_connecting_ip": "$http_cf_connecting_ip", '
+
+    '"_": "_"' # no trailing comma
     '}';
 
     # access log disabled by default

diff --git a/website/src/pages/privacy.md b/website/src/pages/privacy.md
@@ -15,7 +15,7 @@ This page is a static HTML hosted on GitHub pages.
 
 We do not send newsletters. Please follow us on X or GitHub for updates.
 
-The only data we might collect are server logs. Technically, these are disabled by default and are only enabled temporarily to investigate problems with our service.
+The only data we might collect are server logs. The IP addresses are not included in these logs, but we reserve the right to temporarily enable them to investigate problems or misuse of our services.
 
 ---
-Original file line number
+Diff line change
@@ Expand Up / @@ -15,7 +15,7 @@ This page is a static HTML hosted on GitHub pages. @@
     We do not send newsletters. Please follow us on X or GitHub for updates.
-    The only data we might collect are server logs. Technically, these are disabled by default and are only enabled temporarily to investigate problems with our service.
+    The only data we might collect are server logs. The IP addresses are not included in these logs, but we reserve the right to temporarily enable them to investigate problems or misuse of our services.
     ---
@@ Expand Down @@