diff --git a/nginx/nginx.conf b/nginx/nginx.conf index eb733b9..dbdc242 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -133,124 +133,119 @@ http { # Define um formato de log rico que pode ser chamado por qualquer site. log_format detailed_proxy escape=json '{' - # Timestamps e Identificadores - '"@timestamp":"$time_iso8601",' - '"time_local":"$time_local",' - '"msec":"$msec",' - '"request_id":"$request_id",' - '"hostname":"$hostname",' - '"worker_pid":$pid,' + # Timestamps e Identificadores + '"@timestamp":"$time_iso8601",' + '"time_local":"$time_local",' + '"msec":"$msec",' + '"request_id":"$request_id",' + '"hostname":"$hostname",' + '"worker_pid":$pid,' - # Informações de Conexão e Cliente - '"remote_addr":"$remote_addr",' - '"remote_port":$remote_port,' - '"server_addr":"$server_addr",' - '"server_port":"$server_port",' - '"real_ip":"$http_x_forwarded_for",' - '"http_x_real_ip":"$http_x_real_ip",' - '"remote_user":"$remote_user",' + # Informações de Conexão e Cliente + '"remote_addr":"$remote_addr",' + '"remote_port":$remote_port,' + '"server_addr":"$server_addr",' + '"server_port":"$server_port",' + '"real_ip":"$http_x_forwarded_for",' + '"http_x_real_ip":"$http_x_real_ip",' + '"remote_user":"$remote_user",' + + # Detalhes da Requisição HTTP + '"request":"$request",' + '"request_method":"$request_method",' + '"scheme":"$scheme",' + '"server_protocol":"$server_protocol",' + '"host_header":"$host",' + '"request_uri":"$request_uri",' + '"uri":"$uri",' + '"document_uri":"$document_uri",' + '"args":"$args",' + '"query_string":"$query_string",' + '"request_length":$request_length,' + + # Caminhos de Arquivo no Servidor + '"document_root":"$document_root",' + '"realpath_root":"$realpath_root",' + '"request_filename":"$request_filename",' + + # Headers da Requisição + '"http_referer":"$http_referer",' + '"http_user_agent":"$http_user_agent",' + '"http_cookie":"$http_cookie",' + '"http_accept_encoding":"$http_accept_encoding",' + '"http_accept_language":"$http_accept_language",' + + # Detalhes da Resposta + '"status":$status,' + '"body_bytes_sent":$body_bytes_sent,' + '"bytes_sent":$bytes_sent,' + '"sent_http_server":"$sent_http_server",' + '"sent_http_date":"$sent_http_date",' + '"sent_http_location":"$sent_http_location",' + '"sent_http_content_type":"$sent_http_content_type",' + '"sent_http_content_encoding":"$sent_http_content_encoding",' + '"sent_http_cache_control":"$sent_http_cache_control",' + '"sent_http_content_security_policy":"$sent_http_content_security_policy",' + '"sent_http_x_frame_options":"$sent_http_x_frame_options",' + + # Performance e Conexão + '"request_time":$request_time,' + '"pipe":"$pipe",' + '"connection":"$connection",' + '"connection_requests":$connection_requests,' + '"limit_rate":"$limit_rate",' + + # SSL/TLS + '"ssl_protocol":"$ssl_protocol",' + '"ssl_cipher":"$ssl_cipher",' + '"ssl_session_id":"$ssl_session_id",' + '"ssl_server_name":"$ssl_server_name",' + '"ssl_session_reused":"$ssl_session_reused",' + '"ssl_client_verify":"$ssl_client_verify",' + + # Upstream (versão compatível) + '"upstream_addr":"$upstream_addr",' + '"upstream_status":"$upstream_status",' + '"upstream_connect_time":"$upstream_connect_time",' + '"upstream_header_time":"$upstream_header_time",' + '"upstream_response_time":"$upstream_response_time",' + '"upstream_response_length":$upstream_response_length,' + '"upstream_cache_status":"$upstream_cache_status",' + '"upstream_cache_key":"$upstream_cache_key",' + + # Compressão + '"compression_ratio":"$gzip_ratio",' + + # Variáveis Customizadas (do seu nginx.conf) + '"is_bad_bot":"$is_bad_bot",' + '"is_suspicious_uri":"$is_suspicious_uri",' + '"block_request":"$block_request",' + '"is_internal_ip":"$is_internal",' + '"rate_limit_key":"$limit_key",' + '"bad_bot_rate_limit_key":"$bad_bot_key",' + '"cacheable_asset_ttl":"$cache_asset",' + + # Módulo ModSecurity + '"modsec_tx_msg":"$modsec_tx_msg",' + '"modsec_tx_score":"$modsec_tx_score",' + '"modsec_rule_id":"$modsec_rule_id",' + + # Módulo GeoIP2 (Expandido) + '"geoip_continent_code":"$geoip2_continent_code",' + '"geoip_country_code":"$geoip2_country_code",' + '"geoip_country_name":"$geoip2_country_name",' + '"geoip_state_code":"$geoip2_state_code",' + '"geoip_state_name":"$geoip2_state_name",' + '"geoip_city_name":"$geoip2_city_name",' + '"geoip_postal_code":"$geoip2_postal_code",' + '"geoip_latitude":$geoip2_latitude,' + '"geoip_longitude":$geoip2_longitude,' + '"geoip_timezone":"$geoip2_timezone",' + '"geoip_asn":$geoip2_asn,' + '"geoip_isp":"$geoip2_isp"' +'}'; - # Detalhes da Requisição HTTP - '"request":"$request",' - '"request_method":"$request_method",' - '"scheme":"$scheme",' - '"server_protocol":"$server_protocol",' - '"host_header":"$host",' - '"request_uri":"$request_uri",' - '"uri":"$uri",' - '"document_uri":"$document_uri",' - '"args":"$args",' - '"query_string":"$query_string",' - '"request_length":$request_length,' - - # Caminhos de Arquivo no Servidor - '"document_root":"$document_root",' - '"realpath_root":"$realpath_root",' - '"request_filename":"$request_filename",' - # Headers da Requisição - '"http_referer":"$http_referer",' - '"http_user_agent":"$http_user_agent",' - '"http_cookie":"$http_cookie",' - '"http_accept_encoding":"$http_accept_encoding",' - '"http_accept_language":"$http_accept_language",' - - # Detalhes da Resposta - '"status":$status,' - '"body_bytes_sent":$body_bytes_sent,' - '"bytes_sent":$bytes_sent,' - '"sent_http_server":"$sent_http_server",' - '"sent_http_date":"$sent_http_date",' - '"sent_http_location":"$sent_http_location",' - '"sent_http_content_type":"$sent_http_content_type",' - '"sent_http_content_encoding":"$sent_http_content_encoding",' - '"sent_http_cache_control":"$sent_http_cache_control",' - '"sent_http_content_security_policy":"$sent_http_content_security_policy",' - '"sent_http_x_frame_options":"$sent_http_x_frame_options",' - - # Performance e Conexão - '"request_time":$request_time,' - '"pipe":"$pipe",' - '"connection":"$connection",' - '"connection_requests":$connection_requests,' - '"connections_waiting":$connections_waiting,' - '"connections_active":$connections_active,' - '"connections_reading":$connections_reading,' - '"connections_writing":$connections_writing,' - '"limit_rate":"$limit_rate",' - - # SSL/TLS - '"ssl_protocol":"$ssl_protocol",' - '"ssl_cipher":"$ssl_cipher",' - '"ssl_session_id":"$ssl_session_id",' - '"ssl_server_name":"$ssl_server_name",' - '"ssl_session_reused":"$ssl_session_reused",' - '"ssl_client_verify":"$ssl_client_verify",' - - # Upstream - '"upstream_addr":"$upstream_addr",' - '"upstream_status":"$upstream_status",' - '"upstream_connect_time":"$upstream_connect_time",' - '"upstream_header_time":"$upstream_header_time",' - '"upstream_response_time":"$upstream_response_time",' - '"upstream_response_length":$upstream_response_length,' - '"upstream_bytes_received":$upstream_bytes_received,' - '"upstream_bytes_sent":$upstream_bytes_sent,' - '"upstream_tries":$upstream_tries,' - '"upstream_cache_status":"$upstream_cache_status",' - '"upstream_cache_key":"$upstream_cache_key",' - - # Compressão - '"compression_ratio":"$gzip_ratio",' - - # Variáveis Customizadas (do seu nginx.conf) - '"is_bad_bot":"$is_bad_bot",' - '"is_suspicious_uri":"$is_suspicious_uri",' - '"block_request":"$block_request",' - '"is_internal_ip":"$is_internal",' - '"rate_limit_key":"$limit_key",' - '"bad_bot_rate_limit_key":"$bad_bot_key",' - '"cacheable_asset_ttl":"$cache_asset",' - - # Módulo ModSecurity - '"modsec_tx_msg":"$modsec_tx_msg",' - '"modsec_tx_score":"$modsec_tx_score",' - '"modsec_rule_id":"$modsec_rule_id",' - - # Módulo GeoIP2 (Expandido) - '"geoip_continent_code":"$geoip2_continent_code",' - '"geoip_country_code":"$geoip2_country_code",' - '"geoip_country_name":"$geoip2_country_name",' - '"geoip_state_code":"$geoip2_state_code",' - '"geoip_state_name":"$geoip2_state_name",' - '"geoip_city_name":"$geoip2_city_name",' - '"geoip_postal_code":"$geoip2_postal_code",' - '"geoip_latitude":$geoip2_latitude,' - '"geoip_longitude":$geoip2_longitude,' - '"geoip_timezone":"$geoip2_timezone",' - '"geoip_asn":$geoip2_asn,' - '"geoip_isp":"$geoip2_isp"' - '}'; log_format suspicious_bot 'SUSPICIOUS_BOT: $remote_addr - "$http_user_agent" - "$request"';