[rheos]

Part of adding error tracking to railsbackend, foaf-auth and foaf-protocol-ruby prod. Ships inert — nothing reports until a DSN is set on the production Coolify app.

The filtering is the more important half

config/initializers/filter_parameter_logging.rb did not exist in this repo. The ledger was logging every request parameter verbatim to stdout — including signature, and any private_key / public_key that reached a controller. That was already leaking into container logs before Sentry was ever discussed; adding Sentry without fixing it would have shipped the same values to a third party.

sentry-rails reuses Rails.application.config.filter_parameters, so one list covers both paths.

Deliberately not filtered: addresses, amounts, credit limits, idempotency_key. They're public ledger identifiers and the things that make a ledger exception diagnosable — filtering them leaves an unreadable report. Verified:

signature      -> [FILTERED]
private_key    -> [FILTERED]
seed_phrase    -> [FILTERED]
from_address   -> 0xPUBLICADDR     (kept)
value          -> 100              (kept)

Sentry

Setting	Value	Why
send_default_pii	false	This service signs and settles credit between real people; the default attaches request bodies and headers to every event.
breadcrumbs_logger	[:sentry_logger]	The default includes active_support_logger, whose SQL breadcrumbs would carry balances and addresses into unrelated exceptions.
traces_sample_rate	0.0	Errors only.

Safety

Two independent gates: return unless SENTRY_DSN is set, and enabled_environments is production only.

Verified

Booted in a container with a dummy DSN and read the live config back: Sentry.initialized? true, send_default_pii false, enabled_environments ["production"], breadcrumbs [:sentry_logger], traces 0.0, before_send wired.

Worth stating: the early return means CI never executes Sentry.init, so a green suite proves nothing about this config. That's why it was checked by booting with a DSN rather than by trusting the tests.

Still needed

A DSN (one Sentry project per app under the existing org o4511003692695552), set as SENTRY_DSN on the production Coolify app.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: dd4e757d-3af9-445b-b8f1-05b3590615bc

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}