feat(ops/www): Write JSON access log to journald r/3711

This means it will end up in journaldriver.

Change-Id: I66f781085b5dac9946b3b9a2bf30e447863e1213
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5122
Reviewed-by: lukegb <lukegb@tvl.fyi>
Tested-by: BuildkiteCI
Autosubmit: tazjin <tazjin@tvl.su>

1 files changed, 18 insertions, 0 deletions

diff --git a/ops/modules/www/base.nix b/ops/modules/www/base.nix
index cfa9bf0bc6a8..fbf0514161ab 100644
--- a/ops/modules/www/base.nix
+++ b/ops/modules/www/base.nix
@@ -10,6 +10,24 @@
       recommendedGzipSettings = true;
       recommendedProxySettings = true;
 
+      commonHttpConfig = ''
+        log_format json_combined escape=json
+        '{'
+            '"remote_addr":"$remote_addr",'
+            '"method":"$request_method",'
+            '"host":"$host",'
+            '"uri":"$request_uri",'
+            '"status":$status,'
+            '"request_size":$request_length,'
+            '"response_size":$body_bytes_sent,'
+            '"response_time":$request_time,'
+            '"referrer":"$http_referer",'
+            '"user_agent":"$http_user_agent"'
+        '}';
+
+        access_log syslog:server=unix:/dev/log,nohostname json_combined;
+      '';
+
       appendHttpConfig = ''
         add_header Permissions-Policy "interest-cohort=()";
       '';