nginx: do not log query params

2025-11-24 14:05:44 +01:00
parent 6c0d5cb601
commit 8907b692c1
1 changed files with 7 additions and 1 deletions
--- a/setup/start/nginx/nginx.conf
+++ b/setup/start/nginx/nginx.conf
@@ -22,7 +22,13 @@ http {
    # required for long host names
    server_names_hash_bucket_size 128;

-    access_log /var/log/nginx/access.log combined;
+    # no query parameters since tokens might get logged
+    log_format no_query '$remote_addr - $remote_user [$time_local] '
+        '"$request_method $uri $server_protocol" '
+        '$status $body_bytes_sent '
+        '"$http_referer" "$http_user_agent"';
+
+    access_log /var/log/nginx/access.log no_query;

    sendfile        on;