dadaloop82
d33b0ca2fe
Block web access to sensitive paths, require API_TOKEN for mutations, encrypt GitHub issue credentials in .env, auto-provision tokens for same-origin clients, and pass api_token in scale relay URLs since EventSource cannot send headers. Co-authored-by: Cursor <cursoragent@cursor.com>
logs/
This directory contains EverShelf runtime log files.
Files are generated automatically by api/logger.php and follow the naming pattern:
evershelf_YYYY-MM-DD_HH.log
The directory is tracked in git (via this README) but .log files are ignored via .gitignore.
Configuration (.env)
| Variable | Default | Description |
|---|---|---|
LOG_LEVEL |
INFO |
Minimum log level: DEBUG, INFO, WARN, ERROR |
LOG_ROTATE_HOURS |
24 |
Hours per file before rotating |
LOG_MAX_FILES |
14 |
Maximum number of rotated files to keep |
Format
[2026-05-18 14:23:11] [INFO ] [rid=a1b2c3d4] [action] Message {"ctx":"value"}
Remote inspection
GET /api/?action=get_logs&lines=100&level=WARN