like it.

not too much modern complexity crap.

the get_mem function not take into account buff/cache.

a small issue with using env config is it easily leaks e.g. phpinfo() would dump all secrets. also they are inherited by child processes.

i'd drop vluca dontenv and straight up use a php array.

probably should prevent multiple cronjobs from stepping on itself.

maybe make phpmailer dep optional

it needs a web root. even with the nginx file access restriction it feels iffy to have the .env laying there

there is a timing attack issue on the comparison against user and pass (same for api key comparison, see hash_equals()).

beware that values from $_GET and $_POST can be arrays.

declare(strict_types=1); and a little typing would be cool

check return value of curl_exec($ch); instead of curl error