minimal log format

Author: ashleysmithTTD

tools/reverse-proxy/nginx.conf

@@ -12,21 +12,11 @@ http {
     include       /etc/nginx/mime.types;
     default_type  application/octet-stream;
 
-    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
-                      '$status $body_bytes_sent "$http_referer" '
-                      '"$http_user_agent" "$http_x_forwarded_for"';
-
-    # Debug log format - shows Host header details for troubleshooting routing issues
-    log_format  debug_routing  '$remote_addr [$time_local] "$request" '
-                               'status=$status '
-                               'host="$host" '
-                               'http_host="$http_host" '
-                               'server_name="$server_name" '
-                               'scheme=$scheme '
-                               'x_forwarded_host="$http_x_forwarded_host" '
-                               'x_forwarded_proto="$http_x_forwarded_proto"';
-
-    access_log  /var/log/nginx/access.log  debug_routing;
+    # Minimal log format to avoid logging sensitive headers (e.g., Authorization tokens)
+    # Only logs request URI, status code, and remote address
+    log_format  path_status  '$request_uri $status $remote_addr';
+
+    access_log  /var/log/nginx/access.log  path_status;
 
     sendfile        on;
     #tcp_nopush     on;