0b1d4ec3b8
- Notifier: controllerUnreachable, loginNewIp, updateAvailable - Login von neuer IP -> Webhook (Abgleich gegen audit_log) - cron_sync meldet nicht erreichbare Controller; cron_cleanup prüft täglich optional auf Updates und meldet Verfügbarkeit - health.php: Status-Endpoint (DB; optional Controller per ?deep=1&token=)
59 lines
2.1 KiB
PHP
59 lines
2.1 KiB
PHP
<?php
|
||
/**
|
||
* Health-/Status-Endpunkt für Monitoring/Uptime-Checks.
|
||
*
|
||
* GET /health.php – Basis-Status (DB erreichbar), kein Geheimnis
|
||
* GET /health.php?deep=1&token=CRON_TOKEN – zusätzlich Controller-Erreichbarkeit
|
||
*
|
||
* Antwortet HTTP 200 (ok) oder 503 (degraded/fail).
|
||
*/
|
||
error_reporting(E_ALL);
|
||
ini_set('display_errors', 0);
|
||
header('Content-Type: application/json; charset=utf-8');
|
||
|
||
require_once __DIR__ . '/config.php';
|
||
require_once __DIR__ . '/includes/Database.php';
|
||
|
||
$result = ['status' => 'ok', 'time' => date('c'), 'checks' => []];
|
||
$httpStatus = 200;
|
||
|
||
// DB
|
||
try {
|
||
$db = Database::getInstance();
|
||
$db->fetchOne("SELECT 1 AS ok");
|
||
$result['checks']['database'] = 'ok';
|
||
} catch (Throwable $e) {
|
||
$result['checks']['database'] = 'fail';
|
||
$result['status'] = 'fail';
|
||
$httpStatus = 503;
|
||
echo json_encode($result);
|
||
http_response_code($httpStatus);
|
||
exit;
|
||
}
|
||
|
||
$result['checks']['active_sites'] = (int)($db->fetchOne("SELECT COUNT(*) c FROM sites WHERE is_active=1")['c'] ?? 0);
|
||
|
||
// Tiefer Check (Controller) nur mit gültigem Cron-Token
|
||
if (isset($_GET['deep']) && $_GET['deep'] == '1') {
|
||
$token = $db->getSetting('cron_token', '');
|
||
if ($token === '' || !hash_equals($token, (string)($_GET['token'] ?? ''))) {
|
||
http_response_code(403);
|
||
echo json_encode(['status' => 'forbidden', 'message' => 'deep check erfordert gültigen token']);
|
||
exit;
|
||
}
|
||
require_once __DIR__ . '/includes/UniFiController.php';
|
||
$controllers = [];
|
||
foreach ($db->fetchAll("SELECT * FROM sites WHERE is_active=1") as $site) {
|
||
$r = UniFiController::testConnection(
|
||
$site['unifi_controller_url'], $site['unifi_username'],
|
||
Crypto::decrypt($site['unifi_password']), $site['site_id']
|
||
);
|
||
$ok = ($r === true);
|
||
$controllers[$site['name']] = $ok ? 'ok' : 'unreachable';
|
||
if (!$ok) { $result['status'] = 'degraded'; $httpStatus = 503; }
|
||
}
|
||
$result['checks']['controllers'] = $controllers;
|
||
}
|
||
|
||
http_response_code($httpStatus);
|
||
echo json_encode($result, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|