4 ms·
Such solutions don’t work if your server is behind a proxy like Cloudflare, since most requests will be served from cache. And btw, this implies that you’re ke
by bad_user 8y ago
Such solutions don’t work if your server is behind a proxy like Cloudflare, since most requests will be served from cache.
And btw, this implies that you’re keeping logs on your visitors for other purposes than security. Under GDPR that’s not OK.
A good analytics solution will anonymize the data. Including Google Analytics if you configure it properly.
- SahAssar 8y agoThe GDPR question depends on what the logs include. If you don't include IP (or anonymize it) and don't include sensitive data (like userids/cookies or POST data) then it should be okay under GDPR. You can for example have one log for security (fail2ban and so on) that includes IP and one for GoAccess that does not.
- joshyi 8y agogoaccess has the option to anonymize its data using --anonymize-ip.