Kevin Adametz
d884eb7482
- GlitchTip über die Sentry-SDKs; Datenschutzfilter (nur User-ID, keine
Request-Bodys, Tokens aus URL/Query/Referer, E-Mails aus Meldungen).
Browser-SDK erst beim ersten Fehler nachgeladen.
- ReportErrorSignals: tote interne Links (404 mit eigenem Referrer), 403/429
für Angemeldete, 419 als gedrosselte Warnung.
- /health (Bearer-Token): DB, Cache, Queue-Rückstau, Scheduler-Herzschlag,
Plattenplatz → 200/503; Scheduler und Plattenplatz auch im Systemstatus.
- OperationalAlert zusätzlich per ntfy (JSON-POST), unabhängig von der Mail.
- Verlauf: login_failed (Grund unbekannt/kein Passwort/falsch),
login_lockout, two_factor_failed; IP nur als gekürzter HMAC.
- Umami: Kundenbereich mit eigenem Schalter und identify('user-<id>'),
nie im Admin/bei Impersonation; Query-Filter auch auf den Webseiten
(signierte Links gingen bisher an Umami).
- queue:prune-failed nach 30 Tagen.
- Versionsnummer: config('app.version') aus APP_VERSION oder Datei RELEASE
(git describe --tags), in GlitchTip, /health, Systemstatus, artisan about.
Plan: dev/betrieb/monitoring-plan.md (Entscheidungen M1–M9).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
180 lines
8.5 KiB
PHP
180 lines
8.5 KiB
PHP
<?php
|
|
|
|
use App\Support\Monitoring\ErrorReportScrubber;
|
|
use App\Support\Monitoring\Release;
|
|
|
|
/**
|
|
* Sentry Laravel SDK configuration file.
|
|
*
|
|
* Ziel ist das selbst gehostete GlitchTip (Monitoring-Plan M1), das das
|
|
* Sentry-Protokoll spricht. Ohne DSN ist das SDK ein No-op. Abweichend vom
|
|
* Paket-Standard (M4): kein Personenbezug außer der User-ID, keine
|
|
* Request-Bodys, keine Log-/Cache-Breadcrumbs (Lognachrichten tragen bei uns
|
|
* E-Mail-Adressen), keine Metriken (versteht GlitchTip nicht).
|
|
*
|
|
* @see https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/
|
|
*/
|
|
return [
|
|
|
|
// @see https://docs.sentry.io/concepts/key-terms/dsn-explainer/
|
|
'dsn' => env('SENTRY_LARAVEL_DSN', env('SENTRY_DSN')),
|
|
|
|
// @see https://spotlightjs.com/
|
|
// 'spotlight' => env('SENTRY_SPOTLIGHT', false),
|
|
|
|
// @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#logger
|
|
// 'logger' => Sentry\Logger\DebugFileLogger::class, // By default this will log to `storage_path('logs/sentry.log')`
|
|
|
|
// The release version of your application
|
|
// Example with dynamic git hash: trim(exec('git --git-dir ' . base_path('.git') . ' log --pretty="%h" -n1 HEAD'))
|
|
// Gleiche Kennung wie config('app.version'): SENTRY_RELEASE bzw.
|
|
// APP_VERSION, sonst die beim Deploy geschriebene Datei RELEASE.
|
|
'release' => Release::current(env('SENTRY_RELEASE', env('APP_VERSION'))),
|
|
|
|
// When left empty or `null` the Laravel environment will be used (usually discovered from `APP_ENV` in your `.env`)
|
|
'environment' => env('SENTRY_ENVIRONMENT'),
|
|
|
|
// Override the organization ID used for trace continuation checks.
|
|
'org_id' => env('SENTRY_ORG_ID') === null ? null : (int) env('SENTRY_ORG_ID'),
|
|
|
|
// @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#sample_rate
|
|
'sample_rate' => env('SENTRY_SAMPLE_RATE') === null ? 1.0 : (float) env('SENTRY_SAMPLE_RATE'),
|
|
|
|
// @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#traces_sample_rate
|
|
'traces_sample_rate' => env('SENTRY_TRACES_SAMPLE_RATE') === null ? null : (float) env('SENTRY_TRACES_SAMPLE_RATE'),
|
|
|
|
// @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#profiles_sample_rate
|
|
'profiles_sample_rate' => env('SENTRY_PROFILES_SAMPLE_RATE') === null ? null : (float) env('SENTRY_PROFILES_SAMPLE_RATE'),
|
|
|
|
// Only continue incoming traces when the organization IDs are compatible with this SDK instance.
|
|
'strict_trace_continuation' => env('SENTRY_STRICT_TRACE_CONTINUATION', false),
|
|
|
|
// @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#enable_logs
|
|
'enable_logs' => env('SENTRY_ENABLE_LOGS', false),
|
|
|
|
// @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#enable_metrics
|
|
'enable_metrics' => env('SENTRY_ENABLE_METRICS', false),
|
|
|
|
// @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#log_flush_threshold
|
|
'log_flush_threshold' => env('SENTRY_LOG_FLUSH_THRESHOLD') === null ? null : (int) env('SENTRY_LOG_FLUSH_THRESHOLD'),
|
|
|
|
// The minimum log level that will be sent to Sentry as logs using the `sentry_logs` logging channel
|
|
'logs_channel_level' => env('SENTRY_LOG_LEVEL', env('SENTRY_LOGS_LEVEL', env('LOG_LEVEL', 'debug'))),
|
|
|
|
// @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#send_default_pii
|
|
'send_default_pii' => false,
|
|
|
|
// Formular- und JSON-Inhalte verlassen den Server nie.
|
|
'max_request_body_size' => 'never',
|
|
|
|
// User-ID statt Person, Tokens aus URL/Query/Referer, E-Mails aus Meldungen.
|
|
'before_send' => [ErrorReportScrubber::class, 'beforeSend'],
|
|
|
|
// @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#ignore_exceptions
|
|
// 'ignore_exceptions' => [],
|
|
|
|
// @see: https://docs.sentry.io/platforms/php/guides/laravel/configuration/options/#ignore_transactions
|
|
'ignore_transactions' => [
|
|
// Ignore Laravel's default health URL
|
|
'/up',
|
|
'/health',
|
|
],
|
|
|
|
// Breadcrumb specific configuration
|
|
'breadcrumbs' => [
|
|
// Capture Laravel logs as breadcrumbs
|
|
'logs' => env('SENTRY_BREADCRUMBS_LOGS_ENABLED', false),
|
|
|
|
// Capture Laravel cache events (hits, writes etc.) as breadcrumbs
|
|
'cache' => env('SENTRY_BREADCRUMBS_CACHE_ENABLED', false),
|
|
|
|
// Capture Livewire components like routes as breadcrumbs
|
|
'livewire' => env('SENTRY_BREADCRUMBS_LIVEWIRE_ENABLED', true),
|
|
|
|
// Capture SQL queries as breadcrumbs
|
|
'sql_queries' => env('SENTRY_BREADCRUMBS_SQL_QUERIES_ENABLED', true),
|
|
|
|
// Capture SQL query bindings (parameters) in SQL query breadcrumbs
|
|
'sql_bindings' => env('SENTRY_BREADCRUMBS_SQL_BINDINGS_ENABLED', false),
|
|
|
|
// Capture queue job information as breadcrumbs
|
|
'queue_info' => env('SENTRY_BREADCRUMBS_QUEUE_INFO_ENABLED', true),
|
|
|
|
// Capture command information as breadcrumbs
|
|
'command_info' => env('SENTRY_BREADCRUMBS_COMMAND_JOBS_ENABLED', true),
|
|
|
|
// Capture HTTP client request information as breadcrumbs
|
|
'http_client_requests' => env('SENTRY_BREADCRUMBS_HTTP_CLIENT_REQUESTS_ENABLED', true),
|
|
|
|
// Capture send notifications as breadcrumbs
|
|
'notifications' => env('SENTRY_BREADCRUMBS_NOTIFICATIONS_ENABLED', true),
|
|
],
|
|
|
|
// Performance monitoring specific configuration
|
|
'tracing' => [
|
|
// Trace queue jobs as their own transactions (this enables tracing for queue jobs)
|
|
'queue_job_transactions' => env('SENTRY_TRACE_QUEUE_ENABLED', true),
|
|
|
|
// Capture queue jobs as spans when executed on the sync driver
|
|
'queue_jobs' => env('SENTRY_TRACE_QUEUE_JOBS_ENABLED', true),
|
|
|
|
// Capture SQL queries as spans
|
|
'sql_queries' => env('SENTRY_TRACE_SQL_QUERIES_ENABLED', true),
|
|
|
|
// Capture SQL query bindings (parameters) in SQL query spans
|
|
'sql_bindings' => env('SENTRY_TRACE_SQL_BINDINGS_ENABLED', false),
|
|
|
|
// Capture where the SQL query originated from on the SQL query spans
|
|
'sql_origin' => env('SENTRY_TRACE_SQL_ORIGIN_ENABLED', true),
|
|
|
|
// Define a threshold in milliseconds for SQL queries to resolve their origin
|
|
'sql_origin_threshold_ms' => env('SENTRY_TRACE_SQL_ORIGIN_THRESHOLD_MS', 100),
|
|
|
|
// Capture views rendered as spans
|
|
'views' => env('SENTRY_TRACE_VIEWS_ENABLED', true),
|
|
|
|
// Capture Livewire components as spans
|
|
'livewire' => env('SENTRY_TRACE_LIVEWIRE_ENABLED', true),
|
|
|
|
// Capture HTTP client requests as spans
|
|
'http_client_requests' => env('SENTRY_TRACE_HTTP_CLIENT_REQUESTS_ENABLED', true),
|
|
|
|
// Capture Laravel cache events (hits, writes etc.) as spans
|
|
'cache' => env('SENTRY_TRACE_CACHE_ENABLED', true),
|
|
|
|
// Capture Redis operations as spans (this enables Redis events in Laravel)
|
|
'redis_commands' => env('SENTRY_TRACE_REDIS_COMMANDS', false),
|
|
|
|
// Capture where the Redis command originated from on the Redis command spans
|
|
'redis_origin' => env('SENTRY_TRACE_REDIS_ORIGIN_ENABLED', true),
|
|
|
|
// Capture send notifications as spans
|
|
'notifications' => env('SENTRY_TRACE_NOTIFICATIONS_ENABLED', true),
|
|
|
|
// Enable tracing for requests without a matching route (404's)
|
|
'missing_routes' => env('SENTRY_TRACE_MISSING_ROUTES_ENABLED', false),
|
|
|
|
// Configures if the performance trace should continue after the response has been sent to the user until the application terminates
|
|
// This is required to capture any spans that are created after the response has been sent like queue jobs dispatched using `dispatch(...)->afterResponse()` for example
|
|
'continue_after_response' => env('SENTRY_TRACE_CONTINUE_AFTER_RESPONSE', true),
|
|
|
|
// Capture AI agent interactions as spans (requires laravel/ai)
|
|
'gen_ai' => env('SENTRY_TRACE_GEN_AI_ENABLED', true),
|
|
|
|
// Capture AI invoke_agent spans
|
|
'gen_ai_invoke_agent' => env('SENTRY_TRACE_GEN_AI_INVOKE_AGENT_ENABLED', true),
|
|
|
|
// Capture AI chat spans
|
|
'gen_ai_chat' => env('SENTRY_TRACE_GEN_AI_CHAT_ENABLED', true),
|
|
|
|
// Capture AI execute_tool spans
|
|
'gen_ai_execute_tool' => env('SENTRY_TRACE_GEN_AI_EXECUTE_TOOL_ENABLED', true),
|
|
|
|
// Capture AI embeddings spans
|
|
'gen_ai_embeddings' => env('SENTRY_TRACE_GEN_AI_EMBEDDINGS_ENABLED', true),
|
|
|
|
// Enable the tracing integrations supplied by Sentry (recommended)
|
|
'default_integrations' => env('SENTRY_TRACE_DEFAULT_INTEGRATIONS_ENABLED', true),
|
|
],
|
|
|
|
];
|