M45: authenticate Prometheus scraping

2026-08-21 18:33:23 +02:00
parent acd8b82b09
commit ec02aca0fd
4 changed files with 22 additions and 5 deletions
@@ -31,7 +31,8 @@ OIDC_DEFAULT_ROLE=rental_employee
 # Observability: JSON logs are always enabled. Set a token only if /metrics is exposed
 # outside the private Compose network; Prometheus can send it as a bearer token.
 LOG_LEVEL=INFO
-METRICS_BEARER_TOKEN=
+# Required when the observability profile is enabled. Keep private and high entropy.
+METRICS_BEARER_TOKEN=replace-me-private-metrics-token
 GRAFANA_ADMIN_USER=admin
 GRAFANA_ADMIN_PASSWORD=change-me-before-start
 # Alertmanager sends every firing/resolved alert and the continuous watchdog to this