caddy设置日志并查询日志的方法

设置权限

# 删除并重新创建目录，确保权限正确
sudo rm -rf /var/log/caddy
sudo mkdir -p /var/log/caddy
sudo chown -R caddy:caddy /var/log/caddy
sudo chmod -R 755 /var/log/caddy

# 测试 caddy 用户能否写入
sudo -u caddy touch /var/log/caddy/test.log && echo "权限OK" || echo "权限失败"

错误信息解决方案

open /var/log/caddy/global.log: permission denied

步骤1：

# 创建日志目录
sudo mkdir -p /var/log/caddy

# 设置正确的所有者和权限
sudo chown caddy:caddy /var/log/caddy
sudo chmod 755 /var/log/caddy

步骤2：

重载

# 重新加载systemd配置
sudo systemctl daemon-reload

# 启动Caddy服务
sudo systemctl start caddy

# 检查服务状态
sudo systemctl status caddy

配置

(common_config) {
        tls {
                protocols tls1.2 tls1.3
        }
        header {
                Permissions-Policy interest-cohort=()
                Strict-Transport-Security max-age=31536000;
                X-Content-Type-Options nosniff
                Referrer-Policy strict-origin-when-cross-origin
                X-XSS-Protection "1; mode=block"
                -Via
                -Alt-Svc
                -Server
        }

        log {
                output file /var/log/caddy/global.log {
                        roll_size 50mb
                        roll_keep 5
                }
        }
}

2345.cc {
        redir https://www.2345.cc{uri} permanent
}
www.2345.cc {
        import common_config
        reverse_proxy 3.3.3.3:80
}

查看日志

cat /var/log/caddy/global.log | jq -r '.request.remote_ip' | sort | uniq -c | sort -nr

前20的访问统计

cat /var/log/caddy/global.log | jq -r '.request.remote_ip' | sort | uniq -c | sort -nr | head -20