Common failures and how to resolve them.
Run docker logs ir-mlab-app-1. Most common causes:
SESSION_SECRET — must be at least 32 characters.LICENSE_KEY — the app refuses to boot without one.license: lockedThe instance hasn't been able to contact mlab.sh for 48+ hours. Check outbound HTTPS to mlab.sh:443 from the executor container. Once connectivity restores, the lock clears within one hour automatically.
alerts:write scope.raw request logs under Settings > Audit log.409 deduplicated — an existing alert absorbed it. Look up by external_id.suppressed — an active suppression rule matched. Review under Settings > Suppression.Two likely causes:
RETENTION_ALERTS_DAYS isn't unbounded. Closed alerts older than that are purged nightly.Check Settings > Webhooks > Delivery log. Each attempt records the response code and body. Retries follow exponential backoff up to 24 h before the webhook is auto-paused.
Run the recovery command inside the app container:
docker exec -it ir-mlab-app-1 \ /app_mlab_sh/bin/admin-reset --email admin@localhost
A one-time reset token is printed; use it at /auth/reset?token=....
Email [email protected] with the output of /healthz, your license tier and the relevant docker logs snippet. Paid plans get priority routing.