1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# The composition root: everything environment-dependent (data
# directories, Sentry, the access log) happens here rather than at
# require time, so requiring the app has no side effects.
require "pathname"
require "fileutils"
require "sentry-ruby"

$LOAD_PATH.unshift(Pathname.new(__dir__) / "lib")
require "pro_tacts/web"
require "pro_tacts/sentry_scrubber"

config = ProTacts.config

# A fresh checkout has no contacts dir; an empty address book beats a
# 500 on every request.
FileUtils.mkdir_p(config.contacts_dir)

# A nil DSN initializes Sentry but leaves it inert: capture_message
# returns nil and the rack middleware reports nothing.
Sentry.init do |sentry|
  sentry.dsn = config.sentry_dsn

  # Get breadcrumbs from logs
  sentry.breadcrumbs_logger = [:sentry_logger, :http_logger]

  # On: request bodies are worth having on a 404, and nothing else this
  # sends is sensitive. Hrefs carry opaque contact UIDs, not names, and the
  # IPs are tailnet addresses.
  sentry.send_default_pii = true

  # The one thing that must not leave the machine is card content, which a
  # write path would put directly in a PUT body. Full bodies are kept
  # locally either way, see ProTacts::UnhandledRequests.
  sentry.before_send = ProTacts::SentryScrubber

  # Trace all the things!
  sentry.traces_sample_rate = 1.0
end

ProTacts::Web.plugin :common_logger, $stderr

run ProTacts::Web.freeze.app