Browse Source

Document cleaning the logs for passwords (#5050)

Follow up of https://github.com/FreshRSS/FreshRSS/pull/5001
Alexandre Alapetite 3 years ago
parent
commit
2303b29e68
1 changed files with 6 additions and 0 deletions
  1. 6 0
      docs/en/admins/10_ServerConfig.md

+ 6 - 0
docs/en/admins/10_ServerConfig.md

@@ -1,8 +1,13 @@
 # Apache/Nginx Configuration Files
 # Apache/Nginx Configuration Files
 
 
+> ℹ️ For improved security, remove sensitive information in the Web server logs by using our [`sensitive-log.sh` script](https://github.com/FreshRSS/FreshRSS/blob/edge/cli/sensitive-log.sh),
+on the model of our [reference Apache configuration](https://github.com/FreshRSS/FreshRSS/blob/edge/Docker/FreshRSS.Apache.conf) used for our official Docker images
+(see [`CustomLog`](https://httpd.apache.org/docs/current/mod/mod_log_config.html#customlog)).
+
 ## Apache configuration
 ## Apache configuration
 
 
 This is an example Apache virtual hosts configuration file. It covers HTTP and HTTPS configuration.
 This is an example Apache virtual hosts configuration file. It covers HTTP and HTTPS configuration.
+For more details, check our [reference Apache configuration](https://github.com/FreshRSS/FreshRSS/blob/edge/Docker/FreshRSS.Apache.conf) used for our official Docker images.
 
 
 ```apache
 ```apache
 <VirtualHost *:80>
 <VirtualHost *:80>
@@ -24,6 +29,7 @@ This is an example Apache virtual hosts configuration file. It covers HTTP and H
 	</Directory>
 	</Directory>
 
 
 	ErrorLog ${APACHE_LOG_DIR}/freshrss_error.log
 	ErrorLog ${APACHE_LOG_DIR}/freshrss_error.log
+	# Consider piping the logs for cleaning passwords; cf. comment higher up.
 	CustomLog ${APACHE_LOG_DIR}/freshrss_access.log combined
 	CustomLog ${APACHE_LOG_DIR}/freshrss_access.log combined
 
 
 	AllowEncodedSlashes On
 	AllowEncodedSlashes On