Self-healing deploys

It's on by default for every app, including new ones. You don't have to set anything up.

After each deploy or config change, Aloof watches the new release for 5 minutes and compares it with the previous one. If the new release is clearly worse (many more 5xx errors, or much slower), it goes back to the previous release automatically. The reason and numbers are saved on the release. The full thresholds and safeguards are in Releases & rollback.

Check or change it

aloof self-heal my-app          # show on/off, and which release is being watched
aloof self-heal my-app off      # turn it off for this app
aloof self-heal my-app on       # turn it back on

The same is available over the API: GET or PUT /v1/apps/<app>/self-heal with {"enabled": false}. Turning it off only affects that app, and each change is written to the audit log.

When it does nothing

A release isn't watched when the previous release didn't serve enough traffic to compare against (at least 100 requests are needed), and rollbacks are never rolled back. A very quiet app can still deploy a bad release, so keep a health check configured too.