clawbot 81d4153e78 Serve Prometheus metrics at /metrics behind basic auth (closes #94) ...

With METRICS_USERNAME and METRICS_PASSWORD both set, the backend
records request metrics through go-http-metrics in a registry of its
own, with Go's runtime and process metrics, and serves them at
GET /metrics behind basic auth; nginx passes /metrics to it. With
neither set there is no such route; one alone, or a METRICS_USERNAME
containing ":", stops the start with an error naming the setting.

Only requests that reach the health check or POST /api/v1/reports are
recorded, as the labels are path and method, which clients could
otherwise make up without end; POST /api/v1/reports is registered by
its full path for that.

Deviation: go get and go mod tidy ran directly; no entrypoint added a Go
dependency yet (issue #45).

Model: opus-5-5

2026-10-04 04:58:47 +02:00

..

export_test.go

nginx: trust X-Forwarded-For only from TRUSTED_PROXIES (closes #64)

2026-09-29 08:55:47 +02:00

middleware_test.go

fix(backend): cut request log fields to the log bound (closes #60)

2026-09-29 09:39:11 +02:00

middleware.go

Serve Prometheus metrics at /metrics behind basic auth (closes #94)

2026-10-04 04:58:47 +02:00