Obfuscate PII Data in nginx Configuration File

PII data can be obfuscated in nginx.conf in App Volumes Manager.

To obfuscate PII data in App Volumes Manager logs, you can use the PII Logging toggle in App Volumes Manager. For more information about this toggle, see App Volumes Manager Configuration Settings Page.

1. Log in as administrator in the machine where App Volumes Manager is installed.

2. Navigate to C:\Program Files (x86)\CloudVolumes\Manager\nginx\conf and take a backup of the existing Nginx configuration file, nginx.conf.

3. Open nginx.conf.

   1. In the http section, add the following block of text:

      log_format secure '[$time_local] addr=[FILTERED] request="$request_method $uri" ' '$status sent=$body_bytes_sent ' 'uri="$uri" us="$upstream_addr [$upstream_status] ($upstream_response_time)"';
      

      as follows:

          http 
              {
                  include mime.types; 
      
                  default_type application/octet-stream; 
      
                  log_format main '[$time_local] addr=$remote_addr request="$request" ' '$status sent=$body_bytes_sent ' 'uri="$request_uri" us="$upstream_addr [$upstream_status] ($upstream_response_time)"'; 
      
                  log_format secure '[$time_local] addr=[FILTERED] request="$request_method $uri" ' '$status sent=$body_bytes_sent ' 'uri="$uri" us="$upstream_addr [$upstream_status] ($upstream_response_time)"';
      
                  .....................................................
                  .....................................................
      
              }
      

   2. In the following sections, change access_log logs/access_http.log main to access_log logs/access_http.log secure:

          http 
      
              {
                  .......
                  #access_log  off;
                  access_log  logs/access.log  secure;
      
                  .............
      
              }
      

          server 
      
              {
                  server_name  0.0.0.0;
                  listen       80;
                  listen       [::]:80;
      
                  root   ../public;
                  rewrite ^/(.*)/$ /$1 permanent;
      
                  access_log  logs/access_http.log  secure;
                  error_log   logs/error_http.log  info;
      
              }
      

          server
      
              {
      
                      server_name  0.0.0.0;
                      listen       3443 ssl;
                      listen       443 ssl;
                      listen       [::]:443 ssl;
      
                      ssl_certificate      app_volumes_self.crt;
                      ssl_certificate_key  app_volumes_self.key;
                      ssl_session_cache    builtin:1000;
                      ssl_session_timeout  5m;
      
                      root   ../public;
                      rewrite ^/(.*)/$ /$1 permanent;
      
                      access_log  logs/access_https.log  secure;
                      error_log   logs/error_https.log  info;
              }
      
      

4. Save the nginx.conf file.

5. Restart the App Volumes Manager service.