dev: leave /healthz outside the basic-auth boundary #113

Merged

admin_emi merged 1 commit from fix/dev-healthz-unauthed into dev

2026-07-26 08:28:19 +00:00

admin_emi commented

2026-07-26 08:27:46 +00:00

Owner

Centralis polls ${appUrl}/healthz to report each environment in fleet_status. With dev's whole site behind basic auth that poll returns 401 and dev reads as permanently down — a monitoring blind spot created in the name of security.

/healthz returns liveness and nothing else: no data, no version, no configuration. Everything else stays authenticated.

Applied and verified live on vps1:

/healthz      no creds  -> 200
/             no creds  -> 401
/api/version  no creds  -> 401
/             with creds -> 200

Centralis polls `${appUrl}/healthz` to report each environment in `fleet_status`. With dev's whole site behind basic auth that poll returns 401 and dev reads as permanently down — a monitoring blind spot created in the name of security. `/healthz` returns liveness and nothing else: no data, no version, no configuration. Everything else stays authenticated. Applied and verified live on vps1: ``` /healthz no creds -> 200 / no creds -> 401 /api/version no creds -> 401 / with creds -> 200 ```

admin_emi added 1 commit 2026-07-26 08:27:47 +00:00

dev: leave /healthz outside the basic-auth boundary

PR build (required check) / changes (pull_request) Successful in 8s

Details

secrets-guard / encrypted (pull_request) Successful in 7s

Details

PR build (required check) / build-backend (pull_request) Has been skipped

Details

shell-lint / shellcheck (pull_request) Successful in 9s

Details

PR build (required check) / build-frontend (pull_request) Has been skipped

Details

PR build (required check) / validate-observability (pull_request) Has been skipped

Details

PR build (required check) / gate (pull_request) Successful in 1s

Details

492f64a581

Centralis polls ${appUrl}/healthz to report each environment in fleet_status.
Behind basic auth that poll returns 401 and dev reads as permanently down --
a monitoring blind spot created in the name of security.

/healthz returns liveness and nothing else: no data, no version, no config.