fix: expand try-catch to include kernel boot and request creation

Include all pre-output bootstrap steps in the try-catch so that
kernel boot failures (e.g. misconfigured bundles) also return 503
instead of a PHP error page with HTTP 200.

Author: kayjoosten

public/index.php

@@ -17,6 +17,25 @@
     if ($_ENV['APP_ENV'] === 'prod' && strlen($_ENV['APP_SECRET']) < 32) {
         throw new \RuntimeException('APP_SECRET must be at least 32 characters long in production.');
     }
+
+    $debug = filter_var($_ENV['APP_DEBUG'], FILTER_VALIDATE_BOOLEAN);
+
+    if ($debug) {
+        umask(0000);
+
+        Debug::enable();
+    }
+
+    if ($trustedProxies = $_ENV['TRUSTED_PROXIES'] ?? false) {
+        Request::setTrustedProxies(explode(',', $trustedProxies), Request::HEADER_X_FORWARDED_ALL ^ Request::HEADER_X_FORWARDED_HOST);
+    }
+
+    if ($trustedHosts = $_ENV['TRUSTED_HOSTS'] ?? false) {
+        Request::setTrustedHosts(explode(',', $trustedHosts));
+    }
+
+    $kernel = new Kernel($_ENV['APP_ENV'], $debug);
+    $request = Request::createFromGlobals();
 } catch (\Throwable $e) {
     http_response_code(503);
     header('Content-Type: application/json');
@@ -28,25 +47,6 @@
     echo json_encode($body) ?: '{"status":"DOWN"}';
     exit;
 }
-
-$debug = filter_var($_ENV['APP_DEBUG'], FILTER_VALIDATE_BOOLEAN);
-
-if ($debug) {
-    umask(0000);
-
-    Debug::enable();
-}
-
-if ($trustedProxies = $_ENV['TRUSTED_PROXIES'] ?? false) {
-    Request::setTrustedProxies(explode(',', $trustedProxies), Request::HEADER_X_FORWARDED_ALL ^ Request::HEADER_X_FORWARDED_HOST);
-}
-
-if ($trustedHosts = $_ENV['TRUSTED_HOSTS'] ?? false) {
-    Request::setTrustedHosts(explode(',', $trustedHosts));
-}
-
-$kernel = new Kernel($_ENV['APP_ENV'], $debug);
-$request = Request::createFromGlobals();
 $response = $kernel->handle($request);
 $response->send();
 $kernel->terminate($request, $response);

src/OpenConext/EngineBlockBundle/EventListener/FallbackExceptionListener.php

@@ -80,7 +80,7 @@ public function onKernelException(ExceptionEvent $event)
         $path = $event->getRequest()->getPathInfo();
         if (in_array($path, ['/health', '/internal/health', '/info', '/internal/info'], true)) {
             $event->setResponse(new JsonResponse(
-                ['status' => 'DOWN', 'message' => $exception->getMessage()],
+                ['status' => 'DOWN'],
                 JsonResponse::HTTP_SERVICE_UNAVAILABLE
             ));
             return;