Monitoring¶
HTTP Stats¶
Publish the stats port on host loopback:
Then query it on the Docker host:
Returns a human-readable summary of active connections, traffic counters, and uptime. The endpoints are on the stats port, not port 443. Public requests outside the configured allowlist return 404 intentionally.
Prometheus Metrics¶
Returns metrics in Prometheus exposition format. Available on the --http-stats port, restricted to private networks (127.0.0.0/8, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16). Set STATS_ALLOW_NET to extend access to additional CIDR ranges (e.g. Tailscale, WireGuard).
Includes per-secret connection metrics when secret labels are configured. See Secrets & Limits for label configuration.
Health Check¶
Docker containers include built-in health monitoring via the stats endpoint. Check container health with:
For a ready-made Grafana dashboard, see Monitoring → Grafana Dashboard.
For CLI monitoring options and detailed metric descriptions, see Monitoring.