global(nginx): add anonymized access log

i don't entirely consider UA strings to be *that* sensitive. this is
mainly used to figure out what bot/scraper/whatever is hammering the
server.

Changed files
+8 -3
global
gensokyo
presets
+8
global/gensokyo/presets/nginx.nix
···
recommendedTlsSettings = lib.mkDefault true;
recommendedProxySettings = lib.mkDefault true;
# prevent people from just being able to take the server down immediately
eventsConfig = ''
worker_connections 1024;
···
recommendedTlsSettings = lib.mkDefault true;
recommendedProxySettings = lib.mkDefault true;
+
logError = "/var/log/nginx/error.log crit"; # override so we don't log to stderr.
+
commonHttpConfig = ''
+
log_format anonymized_combined '0.0.0.0 - - [$time_local] "$request" '
+
'$status $body_bytes_sent "-" '
+
'"$http_user_agent" "host=$host"';
+
access_log /var/log/nginx/access.log anonymized_combined;
+
'';
+
# prevent people from just being able to take the server down immediately
eventsConfig = ''
worker_connections 1024;
-3
global/utils.nix
···
};
extraConfig = ''
-
access_log off;
-
error_log /var/log/nginx/error.log crit;
-
error_page 503 /_cgi/error/503.html;
error_page 502 /_cgi/error/502.html;
error_page 404 /_cgi/error/404.html;
···
};
extraConfig = ''
error_page 503 /_cgi/error/503.html;
error_page 502 /_cgi/error/502.html;
error_page 404 /_cgi/error/404.html;