Skip to content
This repository was archived by the owner on Jul 31, 2025. It is now read-only.

Fix: Better anonymization #49

Closed
Squidly271 wants to merge 1 commit into from
Closed

Fix: Better anonymization #49

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 12 additions & 7 deletions src/usr/local/emhttp/plugins/tailscale/diagnostics.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,13 @@
"title": "Tailscale",
"filters": [
"s/\\.[^\\.]*\\.myunraid\\.net/\\.hash\\.myunraid\\.net/g",
"s/\\.[^\\.]*\\.ts\\.net/\\.magicdns\\.ts\\.net/g"
"s/\\.[^\\.]*\\.ts\\.net/\\.magicdns\\.ts\\.net/g",
"s/[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}/[email protected]/g",
"s/([0-9A-Fa-f]{2})[:-]([0-9A-Fa-f]{2}[:-]){3}([0-9A-Fa-f]{2})/\\1:XX:XX:XX:\\3/g",
"s/([0-9A-Fa-f]{1,4}):([0-9A-Fa-f]{1,4}:){1,}([0-9A-Fa-f]{1,4})(\\/[0-9]{1,3})?([%][a-zA-Z0-9]+)?/\\1:XX:XX:XX:XX:XX:XX:\\3\\4\\5/g",
"s/\\[([0-9A-Fa-f]{1,4}):([0-9A-Fa-f]{1,4}:){1,}([0-9A-Fa-f]{1,4})(\\/[0-9]{1,3})?([%][a-zA-Z0-9]+)?\\]/[\\1:XX:XX:XX:XX:XX:XX:\\3\\4\\5]/g",
"s/([0-9A-Fa-f]{1,4}):([0-9A-Fa-f]{1,4}:)?::([0-9A-Fa-f]{1,4}:)?([0-9A-Fa-f]{1,4})(\\/[0-9]{1,3})?([%][a-zA-Z0-9]+)?/\\1:XX:XX:XX:XX:XX:XX:\\4\\5\\6/g",
"s/\\[([0-9A-Fa-f]{1,4}):([0-9A-Fa-f]{1,4}:)?::([0-9A-Fa-f]{1,4}:)?([0-9A-Fa-f]{1,4})(\\/[0-9]{1,3})?([%][a-zA-Z0-9]+)?\\]/[\\1:XX:XX:XX:XX:XX:XX:\\4\\5\\6]/g"
],
"commands": [
{
Expand All @@ -19,7 +25,7 @@
"file": "tailscale-debug-prefs.txt"
},
{
"command": "tailscale lock status",
Copy link
Copy Markdown
Collaborator

@dkaser dkaser Jun 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tailscale lock status doesn't contain any sensitive information (public keys, but nothing more than that), and this removes valuable information (specifically, nodes that are currently locked out).

If the public keys are really a concern, then it would be better to apply a command-specific filter to substitute just the ID part of the keys.

"command": "tailscale lock status | head -1",
"file": "tailscale-lock-status.txt"
},
{
Expand Down Expand Up @@ -66,10 +72,9 @@
"files": [
"/boot/config/plugins/tailscale/tailscale.cfg",
"/etc/resolv.conf",
"/etc/ssh/sshd_config",
"/etc/nginx/conf.d/servers.conf",
"/etc/samba/smb-names.conf",
"/var/log/tailscale*"
Copy link
Copy Markdown
Collaborator

@dkaser dkaser Jun 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Did you check to see if the .gz files were anonymized? plugin-diagnostics is smarter than I think you gave it credit for :)

https://github.com/dkaser/unraid-plugin-diagnostics/blob/89db27fee3c70ce9be3cef3af8423e681c09fb63/src/usr/local/php/unraid-plugin-diagnostics/unraid-plugin-diagnostics/Utils.php#L104

],
"/var/log/tailscale.log",
"/var/log/tailscale-utils.log",
"/var/log/tailscale-error.log"],
"system_diagnostics": true
}
}
Loading