System Health
One screen that tells you whether email, kiosks, the licence and the database are happy. Super-admins only.
What this does
A health check for the moving parts behind TempClock.
TempClock runs a lot of background machinery you can’t see from the day-to-day pages: an outbound email queue, a kiosk fleet sending heartbeats every minute, scheduled cron jobs that sweep timesheets and send digest reports, a database keeping the lights on. System Health rolls all of that up into one screen so you can tell at a glance whether anything needs attention — before customers tell you it does.
Every panel shows a coloured status pill: green for fine, amber for worth a look, red for “please act now”. The page auto-refreshes itself every 60 seconds.
Admin sidebar > System health
Super-admin only — admins / managers / portal users do not see it
Every 60 seconds
Yes — the layout collapses on phones so you can check from anywhere
System Health is also the page our alert emails point to. When something turns amber or red overnight you get a heads-up by email; the link in the email takes you straight here.
Who Sees the Page
And why it’s gated.
System Health surfaces low-level operational information — mail server queue depth, database connection counts, cron job last-run timestamps — that is not relevant to most admins and would confuse client-portal users. We restrict it to super-admin accounts (the role used for technical / IT contacts within the organisation that hosts the TempClock instance).
If you can’t see the “System health” link in the sidebar, you don’t have super-admin permission. Ask an existing super-admin to promote you from Settings > User roles.
Promote sparingly. Super-admin can also reset other admins’ 2FA and dump kiosk diagnostics — powerful tools that benefit from a tight access list.
What the Page Actually Checks
A panel-by-panel tour.
Mail subsystem
Looks for an email actually leaving the box in the last 24 hours by combining the notifications table (real deliveries) and the audit log fallback. Green if at least one mail went out; amber if zero; red if the SMTP relay has been refusing connections. Click Send test email at the bottom of the panel to verify routing without waiting for the next digest.
Kiosk fleet
Counts how many kiosks have sent a heartbeat in the last 5 minutes vs the total registered. A missing kiosk is usually flat battery / unplugged charger / disconnected wifi. Click through to Kiosks > Fleet view to see which specific kiosk has gone quiet, and use the remote tools panel to dump its state.
Cron jobs
Last-run timestamps for the four scheduled jobs: the daily timesheet sweep, the document expiry checker, the webhook retry runner, and the 2FA backup-code purge. Anything not run in the last 24 hours goes red. Usually means the host’s cron has been disabled — check crontab -l on the server.
Licence & APK
Days remaining on the TempClock licence and on the current kiosk APK’s signing certificate. Amber 60 days out, red at 14 days. Renew through your account manager well in advance of red — an expired kiosk APK signing cert means new kiosks can’t install the app.
Database
A round-trip latency check (write, read, delete a marker row) and a quick free-space estimate based on the hosting provider’s quota. Slow round-trips usually mean the shared host is under load. Sustained >500ms is worth raising with the host.
Webhook outbox
Count of webhook deliveries pending retry. A handful is normal — the retry schedule backs off to 2 hours by attempt 5. A persistent backlog usually means an integrator’s endpoint has been failing all day; click through to Settings > Webhooks to inspect.
Each panel has a small Test now button. Use it to force the check immediately rather than waiting for the next 60-second tick — useful right after you’ve fixed something and want to confirm it stuck.
Automatic Email Alerts
You don’t need to sit on this page all day.
Whenever a panel flips to red, TempClock emails every super-admin on the account. The email has a one-line summary (“Kiosk fleet: 3 of 4 kiosks offline for 18 minutes”) and a deep link to the System Health page so you can drill in immediately.
We don’t spam — once the panel goes red we send one alert, then nothing more until the issue resolves and re-occurs. Recovery emails (“Mail subsystem: back to green”) are sent too, so you know it’s safe to stop looking.
The email address configured for your TempClock account
Every super-admin in admin_users
One on red, one on recovery. No repeats while a panel stays red
Not currently — if you need quiet hours, mute the inbound filter on your mail client
We never hardcode an email address into the alert path — recipients are always the actual super-admins on your account. If alerts start going to the wrong person, check the Email column under Settings > User roles.
Fixing the Common Reds
What to do when a panel goes red.
Mail subsystem — red
Usually a typo'd SMTP password or a host blocking port 587. Click Send test email — the error message is usually self-explanatory. If you see “authentication failed”, reset the SMTP password in config/config.php and try again.
Kiosk fleet — red
A single offline kiosk is almost always a power / wifi issue at the site — ask whoever is on site to plug it back in. If the whole fleet goes dark at once, it’s usually a network outage at your end (the kiosks check our domain). Use the Test this kiosk button on the fleet view to confirm before you escalate.
Cron jobs — red
Almost always cron disabled on the host. SSH in, run crontab -l; if it’s empty, restore the TempClock cron entries from deploy/cron.sh in your install bundle.
Licence — red
Email your account manager. Renewal is usually same-day if you’re a paying customer. Until renewed, login still works but new kiosks can’t activate.
Most other reds you can self-serve from the link inside the panel. The exception is Database red — that almost always needs the hosting provider. Open a ticket; do not retry repeatedly.
Companion: Remote Kiosk Tools
For debugging individual kiosks.
System Health tells you that something is wrong. The Remote tools panel on Kiosks > Fleet view tells you what on a specific kiosk. Open the fleet view, click a kiosk, and use the side panel to:
All four remote tools route through a signed command queue and can’t be triggered by anyone but a logged-in admin. Every action lands in the audit log too — you always know who ran what when.
Know who turned up — and pay every hour right.
Face-verified clock-ins, live geofencing and payroll-ready timesheets in one system. Tell us how your shifts run and we will show you how it fits.
UK-hosted · Set up in under an hour · No app for your staff