Dzahn has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/274161

Change subject: dynamicproxy: custom log schema (http/https) for tools
......................................................................

dynamicproxy: custom log schema (http/https) for tools

We want all tools on toollabs to become https-only.
For that we want to log on the proxy which tools are still using
http.

Create a custom log that logs the $scheme (protocol), request and
status, but _no_ $remote_addr or anything else.

Bug:T128409
Change-Id: Ie8d7bff8b4546c8de7409470578a5bbda719b7c8
---
M modules/dynamicproxy/templates/urlproxy.conf
1 file changed, 4 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/61/274161/1

diff --git a/modules/dynamicproxy/templates/urlproxy.conf 
b/modules/dynamicproxy/templates/urlproxy.conf
index 6f58e34..ce456c2 100644
--- a/modules/dynamicproxy/templates/urlproxy.conf
+++ b/modules/dynamicproxy/templates/urlproxy.conf
@@ -64,6 +64,10 @@
     listen 80;
     <%- end -%>
 
+    #
+    log_format schemelog '$scheme $request $status'
+    access_log /var/log/nginx/dynamic-proxy.log.gz schemelog gzip flush=5m;
+
     # People upload large files, and that is okay.
     # We can make this larger if need be.
     client_max_body_size 128m;

-- 
To view, visit https://gerrit.wikimedia.org/r/274161
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie8d7bff8b4546c8de7409470578a5bbda719b7c8
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to