# Privacy-enhanced authentication log filtering
# WARNING: Use with caution - this reduces security logging
# Only enable if you understand the security implications
# Generated by Algo VPN privacy role

{% if privacy_log_filtering.exclude_auth_logs %}
# Filter successful authentication messages (reduces audit trail)
:msg, contains, "authentication success" stop
:msg, contains, "session opened" stop
:msg, contains, "session closed" stop

# Filter sudo success messages (keep failures for security)
:msg, regex, "sudo.*COMMAND" stop

# Filter cron messages
:msg, contains, "CRON" stop
{% endif %}

# Continue processing other auth messages
