doc: better explanation for access logs coop-cloud/monitoring-ng#27

.env.sample

@@ -110,11 +110,11 @@ WRITE_TIMEOUT=0s
 
 # Set wildcards = 1, and uncomment compose_file to enable.
 # Create your certs elsewhere and add them like:
-# abra app secret insert traefik.example.coop ssl_cert v1 -f /path/to/fullchain.pem
+# abra app secret insert {myapp.example.coop} ssl_cert v1 "$(cat /path/to/fullchain.pem)"
-# abra app secret insert traefik.example.coop ssl_key v1 -f /path/to/privkey.pem
+# abra app secret insert {myapp.example.coop} ssl_key v1 "$(cat /path/to/privkey.pem)"
 #WILDCARDS_ENABLED=1
-#SECRET_WILDCARD_CERT_VERSION=v1 # generate=false
+#SECRET_WILDCARD_CERT_VERSION=v1
-#SECRET_WILDCARD_KEY_VERSION=v1 # generate=false
+#SECRET_WILDCARD_KEY_VERSION=v1
 #COMPOSE_FILE="$COMPOSE_FILE:compose.wildcard.yml"
 
 #####################################################################

README.md

@@ -84,6 +84,9 @@ Uncomment the line in the config setting `ONION_ENABLED=1`. This will create a n
 ## Access logs
 
 To keep access logs on a volume, uncomment the "Access logs" section.
+Logs will be kept for every app running, unless you opt-out of them.
+Apps supporting this will have an `ACCESS_LOGS` toggle, usually set to
+`false`, so they're already opt-in.
 
 You'll need to setup rotation yourself and send the USR1 signal to
 Traefik for reloading.  For instance, with `logrotate:

compose.yml

@@ -62,7 +62,7 @@ services:
         - "backupbot.backup=${ENABLE_BACKUPS:-true}"
 
   socket-proxy:
-    image: lscr.io/linuxserver/socket-proxy:3.4.5
+    image: lscr.io/linuxserver/socket-proxy:3.4.4
     deploy:
       endpoint_mode: dnsrr
     environment: