Docker Log file Encryption #75
Description
Suggestion:
-
Use a logging driver that supports encryption: Docker provides several logging drivers that support encryption, such as GELF, Fluentd, and Syslog.
-
Configure the logging driver to use encryption: Set the logging driver options to enable encryption. For example, when using the GELF logging driver, you can set the gelf-tls option to true to enable TLS encryption.
-
Store logs in a secure location: Store the encrypted logs in a secure location that is only accessible to authorized users. This can be a cloud storage service such as AWS S3 or a private server. - Dont think we need to do this. There might be a flux drive option, but not really needed, i havent looked at the logs at all. I can download them if needed. Would there be an option for me to download them and unencrypt?
-
Rotate encryption keys regularly: Rotate the encryption keys used to encrypt the logs regularly to ensure that they remain secure.
Implementation
Could it be possible to implement it in such a way that the encryption can be toggled on and off in the code if required. Thus if we really want to have a look at the log files we need to spin up a docker container with the encryption turned off. In such a way no one really can see log file unless its a dev looking to troubleshoot. Idea here is dont really want to have access. Would love the flag in the .env.production and .env.development files as a flag.