[SOLVED] log files for use after server moved behind a haProxy

noplan

because it is not cool when u only look at the IP of your HaProxy (most likely an IP frominside your network)
you need to change the log file format.

to see if it is working add / change in

nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
joe /etc/nginx/nginx.conf

log_format realip '$http_x_forwarded_for - $remote_user - [$time_local] '
'"$request" $status $body_bytes_sent '
'"$http_referer" "$http_user_agent"';
access_log /var/log/nginx/access.log realip;

restart nginx

systemctl restart nginx

after that you can see the realIP in /var/log/nginx/access.log

when you add/edit/change

joe /usr/share/grommunio-common/nginx.conf

sill this is not working for

cat /var/log/grommunio/nginx-web-access.log
cat /var/log/grommunio/nginx-admin-access.log
cat /var/log/grommunio/nginx-sync-access.log
cat /var/log/grommunio/nginx-access.log
cat /var/log/grommunio/nginx-autodiscover-access.log

problem also when tryin to set the log format this occurs

"log_format" directive is not allowed here in /usr/share/grommunio-common/nginx.conf

any ideas.
BRnp

mwilliams

The majority of the config can be found (in the appliance) at /usr/share/grommunio-common/nginx/*

There are for example the log file definitions you are referring to. However, please note that any changes there should be taken careful into consideration, as these configurations are deployed automatically by the package grommunio-common. This package is also regularly updated and hence means that your changes there could be overwritten.

The entire configuration is loaded via the major hook at /etc/nginx/conf.d/grommunio.conf (line 4)

If you are intending to replace these defaults, it could be wise to keep your configuration monitored based on updates you make, since they have been placed by grommunio to simplify the installation for the majority of the customers. Of course, by using kubernetes/docker, or similar you'd not be using grommunio-default but instead deploy your own configuration trees based on what we ship.