mirror of
https://github.com/bulwarkmail/webmail.git
synced 2026-11-02 16:15:39 +00:00
With `OTEL_EXPORTER_OTLP_ENDPOINT` or `OTEL_EXPORTER_OTLP_TRACES_ENDPOINT` set (and neither `OTEL_SDK_DISABLED=true` nor `OTEL_TRACES_EXPORTER=none`), Bulwark loads the OpenTelemetry SDK at startup and exports Next's own spans plus a client span for every call to Stalwart, WOPI, translation, the plugin proxy and OAuth over OTLP/HTTP. Calls to Stalwart carry a `traceparent` header, so Stalwart's spans join the trace. All other settings come from the standard `OTEL_*` variables. Every span is scrubbed before export: URLs keep their origin only, request paths become their route group, query strings, user agents and client addresses are dropped, and addresses or credentials in other attributes are removed. Without an endpoint the SDK is never loaded. The endpoint is listed under the hosts that stay reachable with no third-party traffic, and System > Monitoring shows whether tracing runs.
38 lines
1.8 KiB
TypeScript
38 lines
1.8 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import { requireAdminAuth } from '@/lib/admin/session';
|
|
import { logger } from '@/lib/logger';
|
|
import { readErrors, summarizeDay, utcDay } from '@/lib/error-reporting/aggregate';
|
|
import { shouldCollectErrors } from '@/lib/error-reporting/settings';
|
|
import { storedDataUnavailableResponse } from '@/lib/stored-data-errors';
|
|
import { metricsEnabled } from '@/lib/metrics';
|
|
import { isTracingActive, tracingEndpoint } from '@/lib/tracing/config';
|
|
|
|
export const dynamic = 'force-dynamic';
|
|
|
|
/**
|
|
* GET /api/admin/monitoring: what System > Monitoring shows besides the
|
|
* config keys (those come from /api/admin/config): whether errors are being
|
|
* counted, today's counts, and whether metrics and tracing are on.
|
|
*/
|
|
export async function GET(request: NextRequest) {
|
|
try {
|
|
const auth = await requireAdminAuth(request);
|
|
if ('error' in auth) return auth.error;
|
|
|
|
const collecting = await shouldCollectErrors();
|
|
const today = utcDay();
|
|
const errorsToday = summarizeDay(await readErrors(), today);
|
|
const metrics = { enabled: metricsEnabled() };
|
|
const endpoint = tracingEndpoint();
|
|
let endpointHost: string | null = null;
|
|
try { endpointHost = endpoint ? new URL(endpoint).host : null; } catch { endpointHost = null; }
|
|
const tracing = { configured: endpoint !== null, active: isTracingActive(), endpointHost };
|
|
return NextResponse.json({ collecting, day: today, errorsToday, metrics, tracing }, { headers: { 'Cache-Control': 'no-store' } });
|
|
} catch (err) {
|
|
logger.error('monitoring GET error', { error: err instanceof Error ? err.message : 'unknown' });
|
|
const unavailable = storedDataUnavailableResponse(err);
|
|
if (unavailable) return unavailable;
|
|
return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
|
|
}
|
|
}
|