I’m trying to figure out which of these logs contain personal data and how long they are retained. It seems:
- Email logs are retained 90 days by default
- Rails logs contain IPs and are rotated after 7 days (from * logrotate.d )
- For NGINX the same applies
- Staff/Screening may contain personal data and are retained forever
Am I missing anything here?
Can the error logs (discourse.example.com/logs) contain personal data too, if yes are they rotated?
Can container logs contain personal information? (i.e. `./launcher logs app` etc.) I guess these need to manually be configured via docker to rotate.