Best answer
Use Nerve after Alertmanager when a critical alert should reach iPhone or Android without exposing alert text to chat. Alertmanager handles routing; Nerve handles encrypted phone delivery.
Simple bridge pattern
For the CLI path, run a small receiver inside your network, extract only the useful fields from Alertmanager JSON, and pipe the final text into nerve send.
export NERVE_DSN="nerve://TOKEN:[email protected]"
printf 'Alertmanager: %s\n%s\n' "$ALERTNAME" "$GENERATOR_URL" \
| nerve send --severity critical --title "$ALERTNAME"Direct webhook sender
If your setup uses Nerve webhook senders, keep the webhook URL scoped to one pipe and keep the payload short. Treat it like a send-only credential.
What to include
- alertname, severity, environment and service;
- generator URL or Grafana dashboard URL;
- one short summary or runbook URL;
- no secrets, raw logs or huge label dumps.
Actions later
Receiving an Alertmanager event does not require a Nerve agent. Add the agent only when you need signed, bounded runbook actions on a trusted machine.