nginx: anonymize ip addresses in log files.

Tinkerforge · Jan 2, 2025 · ded0e05 · ded0e05
1 parent 4351ba9
commit ded0e05
Show file tree

Hide file tree

Showing 2 changed files with 34 additions and 0 deletions.
diff --git a/docker/nginx/config/default.conf b/docker/nginx/config/default.conf
@@ -2,11 +2,26 @@
 upstream host_service {
     server backend:8081;
 }
+
+map $remote_addr $remote_addr_anon {
+    ~(?P<ip>\d+\.\d+\.\d+)\.    $ip.0;
+    ~(?P<ip>[^:]+:[^:]+):       $ip::;
+    127.0.0.1                   $remote_addr;
+    ::1                         $remote_addr;
+    default                     0.0.0.0;
+}
+
+log_format anon '$remote_addr_anon - $remote_user [$time_local] "$request" '
+    '$status $body_bytes_sent "$http_referer" '
+    '"$http_user_agent" "$http_x_forwarded_for"';
+
 server {
     listen 80 default_server;
 
     server_name my.warp-charger.com;
 
+    access_log /var/log/nginx/access.log anon;
+
     return 301 https://$host$request_uri;
 }
 
@@ -58,4 +73,6 @@ server {
         proxy_http_version 1.1;
         proxy_set_header Connection "";
     }
+
+    access_log /var/log/nginx/access.log anon;
 }
diff --git a/docker/nginx/dev-config/default.conf b/docker/nginx/dev-config/default.conf
@@ -2,6 +2,19 @@
 upstream host_service {
     server 172.17.0.1:8081;
 }
+
+map $remote_addr $remote_addr_anon {
+    ~(?P<ip>\d+\.\d+\.\d+)\.    $ip.0;
+    ~(?P<ip>[^:]+:[^:]+):       $ip::;
+    127.0.0.1                   $remote_addr;
+    ::1                         $remote_addr;
+    default                     0.0.0.0;
+}
+
+log_format anon '$remote_addr_anon - $remote_user [$time_local] "$request" '
+    '$status $body_bytes_sent "$http_referer" '
+    '"$http_user_agent" "$http_x_forwarded_for"';
+
 server {
     listen 80 default_server;
 
@@ -45,6 +58,8 @@ server {
         proxy_http_version 1.1;
         proxy_set_header Connection "";
     }
+
+    access_log /var/log/nginx/access.log anon;
 }
 
 server {
@@ -96,4 +111,6 @@ server {
         proxy_http_version 1.1;
         proxy_set_header Connection "";
     }
+
+    access_log /var/log/nginx/access.log anon;
 }