nginx: Lower default error log severity

2024-10-12 12:32:37 +02:00 · 2024-10-12 12:32:37 +02:00 · 83b12e1977
parent 70bd878298
commit 83b12e1977
1 changed files with 6 additions and 3 deletions
--- a/modules/nginx.nix
+++ b/modules/nginx.nix
@ -35,9 +35,12 @@ in
      '';
    })
    (lib.mkIf cfg.privacy.enable {
-      services.nginx.commonHttpConfig = ''
-        access_log off;
-      '';
+      services.nginx = {
+        logError = "stderr crit"; # error (the default severity) logs potential PII (IP addresses) on 404 errors
+        commonHttpConfig = ''
+          access_log off;
+        '';
+      };
    })
    (lib.mkIf cfg.recommended.enable {
      services.nginx = {