HealthLog/src/app/api/monitoring/umami-script/route.ts

import { NextResponse } from "next/server";
import { apiHandler } from "@/lib/api-handler";
import { annotate } from "@/lib/logging/context";
import { getPublicMonitoringSettings } from "@/lib/monitoring-settings";
import { safeFetch } from "@/lib/safe-fetch";

export const dynamic = "force-dynamic";

const NOOP_SCRIPT = "/* umami disabled */";

export const GET = apiHandler(async () => {
  annotate({ action: { name: "monitoring.umami-script" } });

  const settings = await getPublicMonitoringSettings();
  if (
    !settings.umamiEnabled ||
    !settings.umamiScriptUrl ||
    !settings.umamiWebsiteId
  ) {
    return new NextResponse(NOOP_SCRIPT, {
      status: 200,
      headers: {
        "Content-Type": "application/javascript; charset=utf-8",
        "Cache-Control": "public, max-age=60",
      },
    });
  }

  const response = await safeFetch(
    settings.umamiScriptUrl,
    {
      next: { revalidate: 3600 },
    },
    // Operator-configured host — pin the connect-time IP so a low-TTL
    // DNS record cannot rebind the fetch at an internal range between
    // the input-time `isPublicUrl` accept and the socket connect.
    { requirePublicHost: true },
  );
  if (!response.ok) {
    return new NextResponse(NOOP_SCRIPT, {
      status: 200,
      headers: {
        "Content-Type": "application/javascript; charset=utf-8",
        "Cache-Control": "public, max-age=60",
      },
    });
  }

  const script = await response.text();
  return new NextResponse(script, {
    status: 200,
    headers: {
      "Content-Type": "application/javascript; charset=utf-8",
      "Cache-Control": "public, max-age=1800",
    },
  });
});