observability

Logs, metrics and traces.

observability.access_log

Type: object · Default: {"format":"json","redact":["authorization","proxy-authorization","cookie","set-cookie"]}

Access log.

observability.access_log.format

Type: json · text · off · Default: json

Output format.

• json: One JSON object per line.
• text: Human-readable text.
• off: No access log.

observability.access_log.redact

Type: list of string · Default: ["authorization","proxy-authorization","cookie","set-cookie"]

Header names whose values are replaced by ***.

observability.alerts

Type: object · Default: {"webhook":null}

Where certificate alerts (renewal failures, near expiry) are sent besides the log, the metrics and rdock status.

observability.alerts.webhook

Type: object

Receives each alert as a JSON POST.

observability.alerts.webhook.timeout

Type: Duration · Default: 10s

Time allowed for each request.

observability.alerts.webhook.token

Type: string

Bearer token sent in Authorization. Write it as a ${file:…} or ${env:…} reference.

observability.alerts.webhook.url

Type: HttpUrl · Required

https:// URL (http:// only for loopback addresses).

observability.metrics

Type: object · Default: {"prometheus":true}

Metrics.

observability.metrics.prometheus

Type: boolean · Default: true

Serve Prometheus metrics at /metrics on the admin listener.

observability.tracing planned for v0.4

Type: object

Distributed tracing.

observability.tracing.otlp

Type: HttpUrl · Required

OTLP/HTTP collector endpoint, e.g. http://tempo:4318.

observability.tracing.sample_ratio

Type: number · Default: 1

Share of requests traced, from 0 to 1.