Health check endpoint exists

NIST AU-2 requires that systems generate audit records for events sufficient to support incident investigation, and a health check endpoint is the single most important hook for external monitoring and orchestration systems. Without a dedicated health endpoint, uptime monitors are forced to check your homepage — which may return 200 even when your database is unreachable or your API is broken. Load balancers and container orchestrators (ECS, Kubernetes, Fly.io) also depend on health endpoints to route traffic and restart failed instances. A missing health check means your monitoring tools and infrastructure cannot reliably determine whether your application is actually functional.

Create a health endpoint at a standard path that returns HTTP 200 when the application is operational.

For Next.js App Router, create app/api/health/route.ts:

import { NextResponse } from 'next/server'

export async function GET() {
  // Optional: verify DB connectivity
  // try {
  //   await db.execute('SELECT 1')
  // } catch {
  //   return NextResponse.json({ status: 'error', reason: 'db' }, { status: 503 })
  // }
  return NextResponse.json({
    status: 'ok',
    timestamp: new Date().toISOString()
  })
}

Point your uptime monitor to https://yourapp.com/api/health and configure it to expect HTTP 200. For deeper health checks, add database and cache connectivity probes so the monitor fails fast when dependencies are down rather than when the load balancer times out.