[hugoalves-dev]

Purpose

Expose a single unauthenticated application health endpoint for Uptimely, without routing the Actuator management port (8081) to the public internet.

Changes

• Define a Spring Boot Actuator uptime health group including all health contributors, with additional-path: server:/health and show-details: never.
• Permit only GET /health for anonymous callers on the app's existing public port 8080.
• Preserve management port 8081, existing Docker health checks, internal Prometheus, and the existing Actuator access rules.

Security boundaries

• Expected public: GET https://jobapply-api.hugojava.dev/health returning a status-only JSON body and HTTP 200 when healthy (503 when DOWN).
• Not newly published: GET /actuator/health, /actuator/prometheus, /actuator/metrics, or anything else on port 8080. Port 8081 remains private by Docker/ingress topology.
• The broad /actuator/** permit rule remains for the already-private management port; tighten it separately only after identifying internal telemetry consumers.

Verification after deployment

curl -i https://jobapply-api.hugojava.dev/health
curl -i https://jobapply-api.hugojava.dev/actuator/metrics

Confirm the first returns 200 and status UP; the second must not expose actuator data.

Reference: https://docs.spring.io/spring-boot/4.1/reference/actuator/endpoints.html#actuator.endpoints.health-groups

[github-actions]

Qodana for JVM

It seems all right 👌

No new problems were found according to the checks applied

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

• Register at Qodana Cloud and configure the action
• Use GitHub Code Scanning with Qodana
• Host Qodana report at GitHub Pages
• Inspect and use qodana.sarif.json (see the Qodana SARIF format for details)

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/qodana-action@v2025.3.2
        with:
          upload-result: true

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions