feat(docker): exclude /healthcheck from access logs (#279)

dvsa · Aug 30, 2024 · f2b889e · f2b889e
1 parent 9f316af
commit f2b889e
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 0 deletions.
diff --git a/infra/docker/api/api.conf b/infra/docker/api/api.conf
@@ -1,3 +1,9 @@
+map $request_uri $should_log {
+  default 1;
+  # The security group healthcheck endpoint.
+  ~^/healthcheck 0;
+}
+
 server {
   listen 8080;
   listen [::]:8080;
@@ -6,6 +12,8 @@ server {
 
   root /var/www/html/public;
 
+  access_log /dev/stdout main if=$should_log;
+
   # Prevent some browsers from MIME-sniffing the response.
   #
   # This reduces exposure to drive-by download attacks and cross-origin data

diff --git a/infra/docker/internal/internal.conf b/infra/docker/internal/internal.conf
@@ -1,3 +1,9 @@
+map $request_uri $should_log {
+  default 1;
+  # The security group healthcheck endpoint.
+  ~^/healthcheck 0;
+}
+
 # Add Access-Control-Allow-Origin.
 map $sent_http_content_type $cors {
   # Images
@@ -31,6 +37,8 @@ server {
 
   root /var/www/html/public;
 
+  access_log /dev/stdout main if=$should_log;
+
   # Protect website against clickjacking.
   #
   # The example below sends the `X-Frame-Options` response header with the value

diff --git a/infra/docker/selfserve/selfserve.conf b/infra/docker/selfserve/selfserve.conf
@@ -1,3 +1,9 @@
+map $request_uri $should_log {
+  default 1;
+  # The security group healthcheck endpoint.
+  ~^/healthcheck 0;
+}
+
 # Add Access-Control-Allow-Origin.
 map $sent_http_content_type $cors {
   # Images
@@ -31,6 +37,8 @@ server {
 
   root /var/www/html/public;
 
+  access_log /dev/stdout main if=$should_log;
+
   # Protect website against clickjacking.
   #
   # The example below sends the `X-Frame-Options` response header with the value