noah/dotfiles
1
0
Fork 0
mirror of https://github.com/nmasur/dotfiles synced 2024-11-08 13:36:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

split caddy logging by host and error

Browse Source 
also add debug, admin, and other log
This commit is contained in:
Noah Masur 2024-08-18 15:42:30 +00:00
parent 845fc000b6
commit 9fb7f68b07
No known key found for this signature in database
1 changed files with 120 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

149
modules/nixos/services/caddy.nix
View File

@ -58,38 +58,129 @@
} }
]; ];
services.caddy = { services.caddy =
adapter = "''"; # Required to enable JSON let
configFile = pkgs.writeText "Caddyfile" ( default_logger_name = "other";
builtins.toJSON { roll_size_mb = 10;
apps.http.servers.main = { # Extract list of hostnames (fqdns) from current caddy routes
listen = [ ":443" ]; getHostnameFromMatch = match: if (lib.hasAttr "host" match) then match.host else [ ];
getHostnameFromRoute =
route:
if (lib.hasAttr "match" route) then (lib.concatMap getHostnameFromMatch route.match) else [ ];
hostnames_non_unique = lib.concatMap getHostnameFromRoute config.caddy.routes;
hostnames = lib.unique hostnames_non_unique;
# Create attrset of subdomains to their fqdns
hostname_map = builtins.listToAttrs (
map (hostname: {
name = builtins.head (lib.splitString "." hostname);
value = hostname;
}) hostnames
);
in
{
adapter = "''"; # Required to enable JSON
configFile = pkgs.writeText "Caddyfile" (
builtins.toJSON {
apps.http.servers.main = {
listen = [ ":443" ];
# These routes are pulled from the rest of this repo # These routes are pulled from the rest of this repo
routes = config.caddy.routes; routes = config.caddy.routes;
errors.routes = config.caddy.blocks; errors.routes = config.caddy.blocks;
logs = { }; # Uncommenting collects access logs # Uncommenting collects access logs
}; logs = {
apps.http.servers.metrics = { }; # Enables Prometheus metrics inherit default_logger_name;
apps.tls.automation.policies = config.caddy.tlsPolicies; # Invert hostnames keys and values
logger_names = lib.mapAttrs' (name: value: {
# Setup logging to file name = value;
logging.logs.main = { value = name;
encoder = { }) hostname_map;
format = "console"; };
}; };
writer = { apps.http.servers.metrics = { }; # Enables Prometheus metrics
output = "file"; apps.tls.automation.policies = config.caddy.tlsPolicies;
filename = "${config.services.caddy.logDir}/caddy.log";
roll = true; # Setup logging to journal and files
roll_size_mb = 1; logging.logs =
}; {
level = "INFO"; # System logs and catch-all
}; # Must be called `default` to override Caddy's built-in default logger
} default = {
); level = "INFO";
}; encoder.format = "console";
writer = {
output = "stderr";
};
exclude = map (hostname: "http.log.access.${hostname}") (builtins.attrNames hostname_map);
};
# This is for the default access logs (anything not captured by hostname)
other = {
level = "INFO";
encoder.format = "json";
writer = {
output = "file";
filename = "${config.services.caddy.logDir}/other.log";
roll = true;
inherit roll_size_mb;
};
include = [ "http.log.access.${default_logger_name}" ];
};
# This is for using the Caddy API, which will probably never happen
admin = {
level = "INFO";
encoder.format = "json";
writer = {
output = "file";
filename = "${config.services.caddy.logDir}/admin.log";
roll = true;
inherit roll_size_mb;
};
include = [ "admin.api" ];
};
# This is for debugging
debug = {
level = "DEBUG";
encoder.format = "console";
writer = {
output = "file";
filename = "${config.services.caddy.logDir}/debug.log";
roll = true;
roll_keep = 1;
inherit roll_size_mb;
};
};
}
# These are the access logs for individual hostnames
// (lib.mapAttrs (name: value: {
level = "INFO";
encoder.format = "json";
writer = {
output = "file";
filename = "${config.services.caddy.logDir}/${name}-access.log";
roll = true;
inherit roll_size_mb;
};
include = [ "http.log.access.${name}" ];
}) hostname_map)
# We also capture just the errors separately for easy debugging
// (lib.mapAttrs' (name: value: {
name = "${name}-error";
value = {
level = "ERROR";
encoder.format = "json";
writer = {
output = "file";
filename = "${config.services.caddy.logDir}/${name}-error.log";
roll = true;
inherit roll_size_mb;
};
include = [ "http.log.access.${name}" ];
};
}) hostname_map);
}
);
};
systemd.services.caddy.serviceConfig = { systemd.services.caddy.serviceConfig = {