diff --git a/setup/start/nginx/nginx.conf b/setup/start/nginx/nginx.conf
index 6d074a4f1..67611b674 100644
--- a/setup/start/nginx/nginx.conf
+++ b/setup/start/nginx/nginx.conf
@@ -22,7 +22,13 @@ http {
     # required for long host names
     server_names_hash_bucket_size 128;
 
-    access_log /var/log/nginx/access.log combined;
+    # no query parameters since tokens might get logged
+    log_format no_query '$remote_addr - $remote_user [$time_local] '
+        '"$request_method $uri $server_protocol" '
+        '$status $body_bytes_sent '
+        '"$http_referer" "$http_user_agent"';
+
+    access_log /var/log/nginx/access.log no_query;
 
     sendfile        on;