Add Spring Boot Actuator for application monitoring

README.md

@@ -51,3 +51,8 @@
 - `DELETE /images/{id}`         Delete my image
 - `GET    /images/my`           My uploaded images
 - `GET    /images`              Home / search images      **_Public_**
+
+
+
+# Spring Boot Actuator
+- `GET    /actuator/health`               

pom.xml

@@ -109,6 +109,12 @@
 			<version>2.0.3</version>
 		</dependency>
 
+		<!--  Spring Boot Actuator  -->
+		<dependency>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-starter-actuator</artifactId>
+		</dependency>
+
 
 	</dependencies>
 

src/main/java/dev/barboud/taglens/configuration/SecurityConfig.java

@@ -22,6 +22,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                 .authorizeHttpRequests(auth -> auth
                         .requestMatchers("/auth/login", "/auth/register").permitAll()   // login & register: public
                         .requestMatchers("/", "/*.html", "/*.css", "/*.js").permitAll()
+                        .requestMatchers("/actuator/**").permitAll()
                         .anyRequest().authenticated()           // everything else: must be logged in
                 )
                 .addFilterBefore(sessionAuthFilter, UsernamePasswordAuthenticationFilter.class);

src/main/resources/application-dev.properties

@@ -1,2 +1,9 @@
 logging.level.root=INFO
-logging.level.org.springframework.jdbc.core=DEBUG
+logging.level.org.springframework.jdbc.core=DEBUG
+
+
+# Expose endpoints (health and metrics)
+management.endpoints.web.exposure.include=health,metrics
+
+# Show full health details (e.g., DB status, disk space)
+management.endpoint.health.show-details=always

src/main/resources/application-prod.properties

@@ -1 +1,11 @@
-logging.level.root=WARN
+logging.level.root=WARN
+
+
+# Expose ONLY the health endpoint for hosting/load balancer health checks
+management.endpoints.web.exposure.include=health
+
+# Show details only when authorized, or set to 'never' to prevent information leakage
+management.endpoint.health.show-details=when-authorized
+
+# Optional: Run actuator on a separate management port for extra security (not publicly accessible)
+# management.server.port=8081