Jelajahi Sumber

Document cleaning the logs for passwords (#5050)

Follow up of https://github.com/FreshRSS/FreshRSS/pull/5001
Alexandre Alapetite 3 tahun lalu
induk
melakukan
2303b29e68
1 mengubah file dengan 6 tambahan dan 0 penghapusan
  1. 6 0
      docs/en/admins/10_ServerConfig.md

+ 6 - 0
docs/en/admins/10_ServerConfig.md

@@ -1,8 +1,13 @@
 # Apache/Nginx Configuration Files
 # Apache/Nginx Configuration Files
 
 
+> ℹ️ For improved security, remove sensitive information in the Web server logs by using our [`sensitive-log.sh` script](https://github.com/FreshRSS/FreshRSS/blob/edge/cli/sensitive-log.sh),
+on the model of our [reference Apache configuration](https://github.com/FreshRSS/FreshRSS/blob/edge/Docker/FreshRSS.Apache.conf) used for our official Docker images
+(see [`CustomLog`](https://httpd.apache.org/docs/current/mod/mod_log_config.html#customlog)).
+
 ## Apache configuration
 ## Apache configuration
 
 
 This is an example Apache virtual hosts configuration file. It covers HTTP and HTTPS configuration.
 This is an example Apache virtual hosts configuration file. It covers HTTP and HTTPS configuration.
+For more details, check our [reference Apache configuration](https://github.com/FreshRSS/FreshRSS/blob/edge/Docker/FreshRSS.Apache.conf) used for our official Docker images.
 
 
 ```apache
 ```apache
 <VirtualHost *:80>
 <VirtualHost *:80>
@@ -24,6 +29,7 @@ This is an example Apache virtual hosts configuration file. It covers HTTP and H
 	</Directory>
 	</Directory>
 
 
 	ErrorLog ${APACHE_LOG_DIR}/freshrss_error.log
 	ErrorLog ${APACHE_LOG_DIR}/freshrss_error.log
+	# Consider piping the logs for cleaning passwords; cf. comment higher up.
 	CustomLog ${APACHE_LOG_DIR}/freshrss_access.log combined
 	CustomLog ${APACHE_LOG_DIR}/freshrss_access.log combined
 
 
 	AllowEncodedSlashes On
 	AllowEncodedSlashes On