fix(otel): accept full https:// URL in OTEL_EXPORTER_OTLP_ENDPOINT

WithEndpoint expects host[:port] with no scheme. When Doppler has
https://otel.libnovel.cc the backend was crashing with 'invalid port'.
Now strip the scheme and enable TLS when prefix is https://.

backend/internal/otelsetup/otelsetup.go

@@ -2,7 +2,10 @@
 //
 // It reads two environment variables:
 //
-//	OTEL_EXPORTER_OTLP_ENDPOINT  — OTLP/HTTP endpoint, e.g. http://otel-collector:4318
+//	OTEL_EXPORTER_OTLP_ENDPOINT  — OTLP/HTTP endpoint; accepts either a full
+//	                               URL ("https://otel.example.com") or a bare
+//	                               host[:port] ("otel-collector:4318").
+//	                               TLS is used when the value starts with "https://".
 //	OTEL_SERVICE_NAME            — service name reported in traces (default: "backend")
 //
 // When OTEL_EXPORTER_OTLP_ENDPOINT is empty the function is a no-op: it
@@ -21,6 +24,7 @@ import (
 	"fmt"
 	"log/slog"
 	"os"
+	"strings"
 	"time"
 
 	"go.opentelemetry.io/contrib/bridges/otelslog"
@@ -41,11 +45,17 @@ import (
 //   - logger:   an slog.Logger bridged to OTel logs (falls back to default when disabled).
 //   - err:      non-nil only on SDK initialisation failure.
 func Init(ctx context.Context, version string) (shutdown func(), logger *slog.Logger, err error) {
-	endpoint := os.Getenv("OTEL_EXPORTER_OTLP_ENDPOINT")
-	if endpoint == "" {
+	rawEndpoint := os.Getenv("OTEL_EXPORTER_OTLP_ENDPOINT")
+	if rawEndpoint == "" {
 		return nil, slog.Default(), nil // OTel disabled — not an error
 	}
 
+	// WithEndpoint expects a host[:port] value — no scheme.
+	// Support both "https://otel.example.com" and "otel-collector:4318".
+	useTLS := strings.HasPrefix(rawEndpoint, "https://")
+	endpoint := strings.TrimPrefix(rawEndpoint, "https://")
+	endpoint = strings.TrimPrefix(endpoint, "http://")
+
 	serviceName := os.Getenv("OTEL_SERVICE_NAME")
 	if serviceName == "" {
 		serviceName = "backend"
@@ -63,10 +73,11 @@ func Init(ctx context.Context, version string) (shutdown func(), logger *slog.Lo
 	}
 
 	// ── Trace provider ────────────────────────────────────────────────────────
-	traceExp, err := otlptracehttp.New(ctx,
-		otlptracehttp.WithEndpoint(endpoint),
-		otlptracehttp.WithInsecure(), // collector is on the internal Docker network
-	)
+	traceOpts := []otlptracehttp.Option{otlptracehttp.WithEndpoint(endpoint)}
+	if !useTLS {
+		traceOpts = append(traceOpts, otlptracehttp.WithInsecure())
+	}
+	traceExp, err := otlptracehttp.New(ctx, traceOpts...)
 	if err != nil {
 		return nil, slog.Default(), fmt.Errorf("otelsetup: create OTLP trace exporter: %w", err)
 	}
@@ -79,10 +90,11 @@ func Init(ctx context.Context, version string) (shutdown func(), logger *slog.Lo
 	otel.SetTracerProvider(tp)
 
 	// ── Log provider ──────────────────────────────────────────────────────────
-	logExp, err := otlploghttp.New(ctx,
-		otlploghttp.WithEndpoint(endpoint),
-		otlploghttp.WithInsecure(),
-	)
+	logOpts := []otlploghttp.Option{otlploghttp.WithEndpoint(endpoint)}
+	if !useTLS {
+		logOpts = append(logOpts, otlploghttp.WithInsecure())
+	}
+	logExp, err := otlploghttp.New(ctx, logOpts...)
 	if err != nil {
 		return nil, slog.Default(), fmt.Errorf("otelsetup: create OTLP log exporter: %w", err)
 	}

homelab/docker-compose.yml

@@ -414,21 +414,27 @@ services:
 
   # ── pocket-tts (CPU TTS) ────────────────────────────────────────────────────
   # Lightweight CPU-only TTS using kyutai-labs/pocket-tts.
-  # OpenAI-compatible: POST /v1/audio/speech on port 8000.
-  # Voices: alba, marius, javert, jean, fantine, cosette, eponine, azelma.
+  # Image is built locally on homelab from https://github.com/kyutai-labs/pocket-tts
+  # (no prebuilt image published): cd /tmp && git clone --depth=1 https://github.com/kyutai-labs/pocket-tts.git && docker build -t pocket-tts:latest /tmp/pocket-tts
+  # OpenAI-compatible: POST /tts (multipart form) on port 8000.
+  # Voices: alba, marius, javert, jean, fantine, cosette, eponine, azelma, etc.
   # Not currently used by the runner (runner uses kokoro-fastapi), but available
   # for experimentation / fallback.
   pocket-tts:
-    image: ghcr.io/kyutai-labs/pocket-tts:latest
+    image: pocket-tts:latest
     restart: unless-stopped
+    command: ["uv", "run", "pocket-tts", "serve", "--host", "0.0.0.0"]
     expose:
       - "8000"
+    volumes:
+      - pocket_tts_cache:/root/.cache/pocket_tts
+      - hf_cache:/root/.cache/huggingface
     healthcheck:
       test: ["CMD", "curl", "-sf", "http://localhost:8000/health"]
       interval: 30s
       timeout: 10s
       retries: 5
-      start_period: 60s
+      start_period: 120s
 
   # ── Watchtower ──────────────────────────────────────────────────────────────
   # Auto-updates runner image when CI pushes a new tag.
@@ -453,3 +459,5 @@ volumes:
   prometheus_data:
   loki_data:
   grafana_data:
+  pocket_tts_cache:
+  hf_cache: