[mywittyname]

This is one of the aspects of GDPR that gets blown out of proportion. You can keep IP addresses in your server logs if you can demonstrate that it's important to your business.

If you can't demonstrate that it's important to your business, then you can mask the IP addresses. This was a very common thing to do even before GDPR.

In other words, compliance in this respect is dead simple. If you need IP address information for a specific reason, then keep them. If you don't need it, then change your log format to omit them or turn on IP masking.