diff --git a/defaults/main/proxy_site_defs.yml b/defaults/main/proxy_site_defs.yml index c52faad..ebcfee9 100644 --- a/defaults/main/proxy_site_defs.yml +++ b/defaults/main/proxy_site_defs.yml @@ -6,8 +6,11 @@ proxy_site_revision : 20200515-172338 - proxy_site_log_path : /proxy_logs - proxy_site_access_log : "{{ proxy_site_log_path }}/zen_proxy.log" + proxy_site_log_path : /proxy_logs + proxy_site_access_log : "{{ proxy_site_log_path }}/zen_proxy.log" + proxy_site_dontlog_ips : + - "10.1.1.*" + - "10.10.10.*" proxy_site_ssl_directory : /etc/nginx/ssl diff --git a/templates/proxy_site.j2 b/templates/proxy_site.j2 index 348c4df..4bca45f 100644 --- a/templates/proxy_site.j2 +++ b/templates/proxy_site.j2 @@ -21,7 +21,18 @@ server { ssl_ciphers {{ proxy_site_ssl_ciphers }}; ssl_prefer_server_ciphers on; - access_log {{ proxy_site_log_path }}/{{ item.key }}.log; + {% if proxy_site_dontlog_ips is defined %} +map $remote_addr $log_ip { + {% for item in proxy_site_dontlog_ips %} + "~{{ item }}" 1; + {% endfor %} + default 0; + } + + access_log {{ proxy_site_log_path }}/{{ item.key }}.log if $log_ip; + {% else %} +access_log {{ proxy_site_log_path }}/{{ item.key }}.log; + {% endif %} {% if proxy_sites[item.key]['max_upload'] is defined %} client_max_body_size {{ proxy_sites[item.key]['max_upload'] }};