posthog icon indicating copy to clipboard operation
posthog copied to clipboard

feat(managed-proxy): Add a new proxy monitor task to check the _actual_ certificate for expiry

Open frankh opened this issue 1 month ago • 1 comments

Problem

We currently check our certificate for expiry, but this is noisy as a bunch of users have wrapped the proxy in e.g. cloudflare, and are happily using an expired certificate (and showing end-users a cloudflare generating certificate)

Check the actual certificate that we send events to and alert on this

we'll correlate this with proxies which are receiving traffic/events and alert accordingly

Changes

add a new check for the actual ssl certificate we see on the URL, not our managed one

How did you test this code?

👉 Stay up-to-date with PostHog coding conventions for a smoother review.

Changelog: (features only) Is this feature complete?

frankh avatar Dec 01 '25 16:12 frankh

This PR hasn't seen activity in a week! Should it be merged, closed, or further worked on? If you want to keep it open, post a comment or remove the stale label – otherwise this will be closed in another week. If you want to permanentely keep it open, use the waiting label.

posthog-bot avatar Dec 10 '25 07:12 posthog-bot