1
0
Fork 0
alertmanager-ntfy/main.go
Jaseem Abid cc35ddbe0f Enable basic auth only if username/password is set
Empty password leads to an authorization error, which isn't ideal.

Also log the response in case its an error, I think this would be handy
in case the upstream starts misbehaving. By default won't add to log
noise.

Example:

```
curl -s -u ':' -d "test" ntfy.sh/test  | jq .
{
  "code": 40101,
  "http": 401,
  "error": "unauthorized",
  "link": "https://ntfy.sh/docs/publish/#authentication"
}
```
2023-02-10 19:35:21 +00:00

95 lines
2.4 KiB
Go

package main
import (
"encoding/json"
"fmt"
"log"
"net/http"
"os"
"strings"
"github.com/prometheus/alertmanager/template"
"github.com/prometheus/common/model"
"golang.org/x/exp/maps"
)
func WebhookHandler(w http.ResponseWriter, r *http.Request) {
if r.Method != http.MethodPost {
w.WriteHeader(http.StatusMethodNotAllowed)
return
}
payload := template.Data{}
if err := json.NewDecoder(r.Body).Decode(&payload); err != nil {
log.Println("Parsing alertmanager JSON failed")
w.WriteHeader(http.StatusBadRequest)
return
}
log.Printf("Received valid hook from %v\n", r.RemoteAddr)
for _, alert := range payload.Alerts {
// Skip resolved messages
if alert.Status == string(model.AlertResolved) {
log.Printf("Skipping notification for alert: %v\n", alert)
continue
}
log.Printf("Processing alert: %v\n", alert)
req, err := http.NewRequest("POST", os.Getenv("NTFY_TOPIC"), strings.NewReader(alert.Annotations["description"]))
if err != nil {
log.Printf("Building request to %s failed: %s", req.RemoteAddr, err)
w.WriteHeader(http.StatusBadRequest)
return
}
// Title
req.Header.Set("Title", fmt.Sprintf("[%s] %s", alert.Labels["instance"], alert.Labels["alertname"]))
// Priority (if set)
if priority := os.Getenv("NTFY_PRIORITY"); len(strings.TrimSpace(os.Getenv(priority))) != 0 {
req.Header.Set("Priority", priority)
}
// Tags
req.Header.Set("Tags", strings.Join(maps.Values(alert.Labels), ","))
username, password := os.Getenv("NTFY_USER"), os.Getenv("NTFY_PASS")
if username != "" && password != "" {
req.SetBasicAuth(username, password)
}
log.Printf("Sending request: %v\n", req)
resp, err := http.DefaultClient.Do(req)
if err != nil {
log.Printf("Sending to %s failed: %s\n", req.RemoteAddr, err)
w.WriteHeader(http.StatusBadRequest)
return
}
if resp.StatusCode != 200 {
log.Printf("Failed to send notification: %v\n", resp)
}
}
w.WriteHeader(http.StatusOK)
}
func main() {
for _, v := range []string{"HTTP_ADDRESS", "HTTP_PORT", "NTFY_TOPIC"} {
if len(strings.TrimSpace(os.Getenv(v))) == 0 {
panic("Environment variable " + v + " not set!")
}
}
http.HandleFunc("/", WebhookHandler)
var listenAddr = fmt.Sprintf("%v:%v", os.Getenv("HTTP_ADDRESS"), os.Getenv("HTTP_PORT"))
log.Printf("Listening for HTTP requests (webhooks) on %v\n", listenAddr)
log.Fatal(http.ListenAndServe(listenAddr, nil))
}