~xenrox/ansible: nginx: Log ssl_protocol

39867ed5c7345937dcd67f89a779206993130598 — Thorben Günther 1 year, 3 months ago fdecf54

nginx: Log ssl_protocol

Adding the ssl_protocol to the default log format ("combined") of nginx
allows to see when TLSv1.2 support will no longer be necessary.

patch browse .tar.gz

1 files changed, 6 insertions(+), 1 deletions(-)

M roles/nginx/files/nginx.conf

M roles/nginx/files/nginx.conf => roles/nginx/files/nginx.conf +6 -1

@@ 19,7 19,12 @@ http {
     gzip_comp_level 6;
     gzip_types text/plain text/css application/javascript application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
 
-    access_log /var/log/nginx/access.log;
+    log_format ssl_combined '$remote_addr - $remote_user [$time_local] '
+                    '$ssl_protocol/$ssl_cipher '
+                    '"$request" $status $body_bytes_sent '
+                    '"$http_referer" "$http_user_agent"';
+
+    access_log /var/log/nginx/access.log ssl_combined;
 
     include snippets/sslsettings.conf;
     include nginx.d/*.conf;