@@ -78,0 +96,4 @@
+				scheme.eq_ignore_ascii_case("bearer") && constant_time_eq(provided, token)
+			});
+
+		if !authorized {

@@ -154,0 +161,4 @@
+					.metrics
+					.instruments
+					.federation_incoming_pdus
+					.add(1, &[KeyValue::new("outcome", "unparsable")]);

@@ -0,0 +133,4 @@
+fn size_buckets() -> Vec<f64> { (0..11).map(|i| 1024.0 * f64::from(4_u32.pow(i))).collect() }
+
+fn register_process(meter: &Meter) {
+	let started = SystemTime::now();

@@ -0,0 +245,4 @@
+
+	let busy_metrics = metrics.clone();
+	meter
+		.f64_observable_counter("continuwuity.tokio.worker.busy_time")

@@ -0,0 +35,4 @@
+
+#[cfg(target_os = "linux")]
+pub(super) fn open_fds() -> Option<u64> {
+	let count = std::fs::read_dir("/proc/self/fd").ok()?.count();

@@ -90,3 +89,3 @@
 					.build()
 					.expect("Failed to create OTLP gRPC exporter"),
-				| "http" => opentelemetry_otlp::SpanExporter::builder()
+				| _ => opentelemetry_otlp::SpanExporter::builder()

@@ -0,0 +103,4 @@
+			"RocksDB block cache usage by column family",
+			"By",
+			|services, observer| {
+				let Ok(usage) = services.db.db.memory_usage_stats() else {

@@ -0,0 +153,4 @@
+		self.server.runtime().spawn(async move {
+			let mut interval = tokio::time::interval(COUNT_INTERVAL);
+			loop {
+				interval.tick().await;

@@ -0,0 +162,4 @@
+				}
+
+				let local = services.users.count().await;
+				let remote = services.users.stream_remote_users().count().await;

@@ -213,1 +177,16 @@
-	media_files: AtomicU64,
+struct MemoryUsageCache(Mutex<Option<(Instant, Arc<MemoryUsage>)>>);
+
+impl MemoryUsageCache {
+	fn get(&self, services: &Services) -> Option<Arc<MemoryUsage>> {
+		let mut cached = self.0.lock().expect("locked");
+		if let Some((at, usage)) = &*cached {
+			if at.elapsed() < MEMORY_USAGE_TTL {
+				return Some(usage.clone());
+			}
+		}
+
+		let usage = Arc::new(services.db.db.memory_usage_stats().ok()?);
+		*cached = Some((Instant::now(), usage.clone()));
+		Some(usage)
+	}
+}

@@ -0,0 +33,4 @@
+```toml
+[global]
+allow_otlp_metrics = true
+otlp_protocol = "http" # or "grpc"