Skip to content

Commit 14c4d95

Browse files
committed
nginx: use dedicated syslog-ng setup for error logs too
The error log is fairly quiet during regular use but can end up logging one or more lines per request during DDoS attacks. For example, errors are logged for worker_connections depletion and limit_conn rejections. There's also currently an nginx bug with modern TLS and OpenSSL causing some client side TLS errors to be logged as crit instead of info.
1 parent 0e9fe56 commit 14c4d95

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

nginx/nginx.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
load_module modules/ngx_http_brotli_filter_module.so;
22
load_module modules/ngx_http_brotli_static_module.so;
33

4-
error_log syslog:server=unix:/dev/log,nohostname;
4+
error_log syslog:server=unix:/run/nginx-error-log,nohostname;
55
# leave stderr open but minimize duplicate logging to it
66
error_log stderr emerg;
77

0 commit comments

Comments
 (0)