From 36ef86e8b7350bdc8555a384b00f75b39932184e Mon Sep 17 00:00:00 2001
From: f <f@sutty.nl>
Date: Tue, 28 Jul 2026 14:25:23 -0300
Subject: [PATCH] feat: access log coop-cloud/traefik#126

---
 .env.sample            | 6 ++++++
 compose.grafana.yml    | 1 +
 compose.loki.yml       | 1 +
 compose.prometheus.yml | 1 +
 compose.yml            | 1 +
 5 files changed, 10 insertions(+)

diff --git a/.env.sample b/.env.sample
index 981c9c8..2a1e429 100644
--- a/.env.sample
+++ b/.env.sample
@@ -99,3 +99,9 @@ LIVE_DEBUGGING=false
 
 # Node memory usage alert will trigger when memory usage is above the given number in percent
 #ALERT_NODE_MEMORY_USAGE=85
+
+# Tell Traefik to keep access logs (could be very verbose)
+ALLOY_ACCESS_LOGS=false
+PROMETHEUS_ACCESS_LOGS=false
+LOKI_ACCESS_LOGS=false
+GRAFANA_ACCESS_LOGS=false
diff --git a/compose.grafana.yml b/compose.grafana.yml
index f701763..562e0ba 100644
--- a/compose.grafana.yml
+++ b/compose.grafana.yml
@@ -43,6 +43,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}-grafana.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}-grafana.tls=true"
         - "traefik.http.routers.${STACK_NAME}-grafana.tls.certresolver=${LETS_ENCRYPT_ENV}"
+        - "traefik.http.routers.${STACK_NAME}-grafana.observability.accesslogs=${GRAFANA_ACCESS_LOGS:-false}"
     healthcheck:
       test: "wget -q http://localhost:3000/healthz -O/dev/null"
       interval: 5s
diff --git a/compose.loki.yml b/compose.loki.yml
index 8c2aa66..dd5a59b 100644
--- a/compose.loki.yml
+++ b/compose.loki.yml
@@ -34,6 +34,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}-loki.tls=true"
         - "traefik.http.routers.${STACK_NAME}-loki.tls.certresolver=${LETS_ENCRYPT_ENV}"
         - "traefik.http.routers.${STACK_NAME}-loki.middlewares=basicauth@file"
+        - "traefik.http.routers.${STACK_NAME}-loki.observability.accesslogs=${LOKI_ACCESS_LOGS:-false}"
 
 
 configs:
diff --git a/compose.prometheus.yml b/compose.prometheus.yml
index 7600e80..87b63dc 100644
--- a/compose.prometheus.yml
+++ b/compose.prometheus.yml
@@ -32,6 +32,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}-prometheus.tls=true"
         - "traefik.http.routers.${STACK_NAME}-prometheus.tls.certresolver=${LETS_ENCRYPT_ENV}"
         - "traefik.http.routers.${STACK_NAME}-prometheus.middlewares=basicauth@file"
+        - "traefik.http.routers.${STACK_NAME}-prometheus.observability.accesslogs=${PROMETHEUS_ACCESS_LOGS:-false}"
 
 configs:
   prometheus_yml:
diff --git a/compose.yml b/compose.yml
index 60dfa3d..07aff12 100644
--- a/compose.yml
+++ b/compose.yml
@@ -38,6 +38,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}-alloy.tls=true"
         - "traefik.http.routers.${STACK_NAME}-alloy.tls.certresolver=${LETS_ENCRYPT_ENV}"
         - "traefik.http.routers.${STACK_NAME}-alloy.middlewares=basicauth@file"
+        - "traefik.http.routers.${STACK_NAME}-alloy.observability.accesslogs=${ALLOY_ACCESS_LOGS:-false}"
 configs:
   config_alloy:
     template_driver: golang
-- 
2.52.0