From 728fe1c6151a486e239c6e6934110f7de0dcf10d Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Thu, 23 Jul 2026 05:47:09 +0000 Subject: [PATCH] runtime: publish CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338 --- ...NTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.json | 30 +++ ...ONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.txt | 193 +++++++++++++++ runtime/latest.json | 14 +- runtime/latest.txt | 231 ++++++++++++------ 4 files changed, 391 insertions(+), 77 deletions(-) create mode 100644 runtime/history/CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.json create mode 100644 runtime/history/CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.txt diff --git a/runtime/history/CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.json b/runtime/history/CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.json new file mode 100644 index 0000000..0da375c --- /dev/null +++ b/runtime/history/CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.json @@ -0,0 +1,30 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "cluster-audit", + "started_at_utc": "2026-07-23T05:46:56Z", + "finished_at_utc": "2026-07-23T05:47:08Z", + "reference_register_checked": true, + "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", + "error_register_checked": true, + "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752", + "command_sha256": "906328b1fceafc4108862b5eae76ca72697a13a745626bbd7f00c9c7d6efb8a2", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "changes_made": false, + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "cf8f33bc79d9fe507e093d044903aeb2fa8d01a4d062e086d03a7bf6a2a8a329", + "sanitized_output_sha256": "cd6b68e90d1f6bc04a7763ffacc1cee5fdb2982d254d4eb441499eb1808db33e", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sed\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/grep\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/wc\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/curl\nDETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275\nDETAIL=VM130_EXEC_INTEGRITY=PASS\nDETAIL=NGINX_HELPER_SHA256=f900b15bfdd19a1b543037cf8b9c1583e71dc8115bbb5812cf74d474e3e7859b\nDETAIL=NGINX_HELPER_INTEGRITY=PASS\nDETAIL=NGINX_DUMP_LINE_COUNT=4793\nDETAIL=GIT_SERVER_NAME_LINE=4540\nDETAIL=GIT_SERVER_BLOCK_WINDOW=4520-4640\nDETAIL=GIT_SERVER_BLOCK_BEGIN\n # Custom\n include /data/custom_nginx/server_http.conf;\n include /data/custom_nginx/server_proxy.conf;\n}\n\n\n# configuration file /data/nginx/proxy_host/9.conf:\n# ----------------------------------------------------------------------\n# git.gram1.ru\n# DO NOT EDIT THIS FILE DIRECTLY, CHANGES WILL BE LOST WHEN UPDATING!\n# ----------------------------------------------------------------------\n\n\nupstream upstream_9 {\n zone upstream_9 128k;\n server [PRIVATE_IP]:3002;\n}\n\n\nserver {\n server_name git.gram1.ru;\n\n listen unix:/run/nginx.sock;\n\n\n listen 0.0.0.0:80;\n\n\n listen 0.0.0.0:443 ssl;\n\n\n # Certbot TLS\n ssl_certificate /data/tls/certbot/live/npm-29/fullchain.pem;\n ssl_certificate_key /data/tls/certbot/live/npm-29/privkey.pem;\n\n\n if ($scheme = \"http\") {\n return 301 https://$host$is_request_port$request_port$request_uri;\n }\n if ($http_x_forwarded_proto = \"http\") {\n return 301 https://$host$is_request_port$request_port$request_uri;\n }\n\n\n location /.well-known/acme-challenge/ {\n root /data/tls/certbot/acme-challenge;\n fancyindex off;\n index off;\n allow all;\n auth_basic off;\n auth_request off;\n }\n\n\n location / {\n\n\n\n\n more_set_headers \"X-Frame-Options: SAMEORIGIN\";\n\n\n proxy_set_header Host $host$is_request_port$request_port;\n\n include proxy-headers.conf;\n proxy_set_header Accept-Encoding \"\";\n\n\n proxy_pass http://upstream_9;\n\n\n }\n\n\n # custom locations\n # Custom\n include /data/custom_nginx/server_http.conf;\n include /data/custom_nginx/server_proxy.conf;\n}\n\n\n# configuration file /data/nginx/proxy_host/993.conf:\n# TAFTAUTO_ROUTER_WG_MANAGED=yes\n# TAFTAUTO_ROUTE_PHASE=stage-taftauto-edge-wg\nserver {\n listen 0.0.0.0:80;\n listen [::]:80;\n server_name taftauto.ru www.taftauto.ru;\n location / { return 301 https://$host$request_uri; }\n}\nserver {\n listen 0.0.0.0:443 ssl;\n listen [::]:443 ssl;\n server_name taftauto.ru www.taftauto.ru;\n ssl_certificate /data/tls/router-certs/taftauto.ru/fullchain.pem;\n ssl_certificate_key /data/tls/router-certs/taftauto.ru/privkey.pem;\n ssl_protocols TLSv1.2 TLSv1.3;\n add_header X-TAFTAUTO-Router managed always;\n location / {\n proxy_http_version 1.1;\n proxy_set_header Host $host;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto https;\n proxy_set_header X-Forwarded-Scheme https;\n proxy_set_header X-Forwarded-Ssl on;\n proxy_pass http://[PRIVATE_IP]:80;\n }\n}\n\n# configuration file /data/nginx/proxy_host/994.conf:\n# PVEPRO_LANDING_MANAGED=yes\n# PVEPRO_LANDING_PHASE=stage22\nserver {\n listen 0.0.0.0:80;\n listen [::]:80;\n server_name pvepro.ru www.pvepro.ru;\n location / {\n return 301 https://$host$request_uri;\n }\n}\nDETAIL=GIT_SERVER_BLOCK_END\nDETAIL=GIT_SERVER_PROXY_PASS_COUNT=2\nDETAIL=GIT_SERVER_LOCATION_COUNT=5\nDETAIL=GIT_SERVER_STATIC_DIRECTIVE_COUNT=1\nDETAIL=BOOTSTRAP_HTTP_STATUS=200\nDETAIL=BOOTSTRAP_SAFE_HEADERS_BEGIN\nHTTP/2 200 \ncontent-type: application/json\ncontent-length: 3097\ncache-control: max-age=0, private, must-revalidate, no-transform\nlast-modified: Tue, 21 Jul 2026 09:31:10 GMT\nDETAIL=BOOTSTRAP_SAFE_HEADERS_END\nDETAIL=VM130_DOCKER=PASS:/usr/bin/docker\nDETAIL=VM130_RUNNING_CONTAINER_COUNT=11\nDETAIL=VM130_RUNNING_CONTAINERS_BEGIN\n32fe4b81458c|homelab-registry-cache|registry:2|Up 6 days|\n2f18b3d7f386|npmplus|zoeyvid/npmplus:2026-06-17-b1|Up 6 days (healthy)|\n022c10d05f9a|dockge|louislam/dockge:1|Up 6 days (healthy)|127.0.0.1:5001->5001/tcp\n7418a69d796c|crowdsec|crowdsecurity/crowdsec:v1.7.8-slim|Up 6 days|127.0.0.1:7422->7422/tcp, 127.0.0.1:8088->8080/tcp\n2ae500cf90ec|dozzle|2e14180fa14c|Up 2 hours|127.0.0.1:9999->8080/tcp\nc94dc7e48b04|cadvisor|gcr.io/cadvisor/cadvisor:latest|Up 6 days (healthy)|127.0.0.1:8081->8080/tcp\ndf7d2d861c0d|alloy|grafana/alloy:v1.17.0|Up 6 days|127.0.0.1:12345->12345/tcp\ndf8678f48721|diun|crazymax/diun:latest|Up 6 days|\nbe5a2016099c|socket-proxy|lscr.io/linuxserver/socket-proxy:latest|Up 6 days|127.0.0.1:2375->2375/tcp\n11f407a23623|kopia|kopia/kopia:latest|Up 6 days|\ndcade174cf88|loki|grafana/loki:3.7.2|Up 6 days|127.0.0.1:3100->3100/tcp\nDETAIL=VM130_RUNNING_CONTAINERS_END\nDETAIL=VM130_GIT_SERVICE_CANDIDATE_COUNT=0\nDETAIL=VM130_GIT_SERVICE_CANDIDATES_BEGIN\n\nDETAIL=VM130_GIT_SERVICE_CANDIDATES_END\nDETAIL=BOOTSTRAP_BACKEND_DISCOVERY=PASS\nCHANGES_MADE=NO\n" +} diff --git a/runtime/history/CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.txt b/runtime/history/CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.txt new file mode 100644 index 0000000..ce8ca5a --- /dev/null +++ b/runtime/history/CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.txt @@ -0,0 +1,193 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=cluster-audit +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752 +COMMAND_SHA256=906328b1fceafc4108862b5eae76ca72697a13a745626bbd7f00c9c7d6efb8a2 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGES_MADE=false +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=cf8f33bc79d9fe507e093d044903aeb2fa8d01a4d062e086d03a7bf6a2a8a329 +SANITIZED_OUTPUT_SHA256=cd6b68e90d1f6bc04a7763ffacc1cee5fdb2982d254d4eb441499eb1808db33e +OUTPUT_BEGIN +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sed +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/grep +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/wc +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/curl +DETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275 +DETAIL=VM130_EXEC_INTEGRITY=PASS +DETAIL=NGINX_HELPER_SHA256=f900b15bfdd19a1b543037cf8b9c1583e71dc8115bbb5812cf74d474e3e7859b +DETAIL=NGINX_HELPER_INTEGRITY=PASS +DETAIL=NGINX_DUMP_LINE_COUNT=4793 +DETAIL=GIT_SERVER_NAME_LINE=4540 +DETAIL=GIT_SERVER_BLOCK_WINDOW=4520-4640 +DETAIL=GIT_SERVER_BLOCK_BEGIN + # Custom + include /data/custom_nginx/server_http.conf; + include /data/custom_nginx/server_proxy.conf; +} + + +# configuration file /data/nginx/proxy_host/9.conf: +# ---------------------------------------------------------------------- +# git.gram1.ru +# DO NOT EDIT THIS FILE DIRECTLY, CHANGES WILL BE LOST WHEN UPDATING! +# ---------------------------------------------------------------------- + + +upstream upstream_9 { + zone upstream_9 128k; + server [PRIVATE_IP]:3002; +} + + +server { + server_name git.gram1.ru; + + listen unix:/run/nginx.sock; + + + listen 0.0.0.0:80; + + + listen 0.0.0.0:443 ssl; + + + # Certbot TLS + ssl_certificate /data/tls/certbot/live/npm-29/fullchain.pem; + ssl_certificate_key /data/tls/certbot/live/npm-29/privkey.pem; + + + if ($scheme = "http") { + return 301 https://$host$is_request_port$request_port$request_uri; + } + if ($http_x_forwarded_proto = "http") { + return 301 https://$host$is_request_port$request_port$request_uri; + } + + + location /.well-known/acme-challenge/ { + root /data/tls/certbot/acme-challenge; + fancyindex off; + index off; + allow all; + auth_basic off; + auth_request off; + } + + + location / { + + + + + more_set_headers "X-Frame-Options: SAMEORIGIN"; + + + proxy_set_header Host $host$is_request_port$request_port; + + include proxy-headers.conf; + proxy_set_header Accept-Encoding ""; + + + proxy_pass http://upstream_9; + + + } + + + # custom locations + # Custom + include /data/custom_nginx/server_http.conf; + include /data/custom_nginx/server_proxy.conf; +} + + +# configuration file /data/nginx/proxy_host/993.conf: +# TAFTAUTO_ROUTER_WG_MANAGED=yes +# TAFTAUTO_ROUTE_PHASE=stage-taftauto-edge-wg +server { + listen 0.0.0.0:80; + listen [::]:80; + server_name taftauto.ru www.taftauto.ru; + location / { return 301 https://$host$request_uri; } +} +server { + listen 0.0.0.0:443 ssl; + listen [::]:443 ssl; + server_name taftauto.ru www.taftauto.ru; + ssl_certificate /data/tls/router-certs/taftauto.ru/fullchain.pem; + ssl_certificate_key /data/tls/router-certs/taftauto.ru/privkey.pem; + ssl_protocols TLSv1.2 TLSv1.3; + add_header X-TAFTAUTO-Router managed always; + location / { + proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto https; + proxy_set_header X-Forwarded-Scheme https; + proxy_set_header X-Forwarded-Ssl on; + proxy_pass http://[PRIVATE_IP]:80; + } +} + +# configuration file /data/nginx/proxy_host/994.conf: +# PVEPRO_LANDING_MANAGED=yes +# PVEPRO_LANDING_PHASE=stage22 +server { + listen 0.0.0.0:80; + listen [::]:80; + server_name pvepro.ru www.pvepro.ru; + location / { + return 301 https://$host$request_uri; + } +} +DETAIL=GIT_SERVER_BLOCK_END +DETAIL=GIT_SERVER_PROXY_PASS_COUNT=2 +DETAIL=GIT_SERVER_LOCATION_COUNT=5 +DETAIL=GIT_SERVER_STATIC_DIRECTIVE_COUNT=1 +DETAIL=BOOTSTRAP_HTTP_STATUS=200 +DETAIL=BOOTSTRAP_SAFE_HEADERS_BEGIN +HTTP/2 200 +content-type: application/json +content-length: 3097 +cache-control: max-age=0, private, must-revalidate, no-transform +last-modified: Tue, 21 Jul 2026 09:31:10 GMT +DETAIL=BOOTSTRAP_SAFE_HEADERS_END +DETAIL=VM130_DOCKER=PASS:/usr/bin/docker +DETAIL=VM130_RUNNING_CONTAINER_COUNT=11 +DETAIL=VM130_RUNNING_CONTAINERS_BEGIN +32fe4b81458c|homelab-registry-cache|registry:2|Up 6 days| +2f18b3d7f386|npmplus|zoeyvid/npmplus:2026-06-17-b1|Up 6 days (healthy)| +022c10d05f9a|dockge|louislam/dockge:1|Up 6 days (healthy)|127.0.0.1:5001->5001/tcp +7418a69d796c|crowdsec|crowdsecurity/crowdsec:v1.7.8-slim|Up 6 days|127.0.0.1:7422->7422/tcp, 127.0.0.1:8088->8080/tcp +2ae500cf90ec|dozzle|2e14180fa14c|Up 2 hours|127.0.0.1:9999->8080/tcp +c94dc7e48b04|cadvisor|gcr.io/cadvisor/cadvisor:latest|Up 6 days (healthy)|127.0.0.1:8081->8080/tcp +df7d2d861c0d|alloy|grafana/alloy:v1.17.0|Up 6 days|127.0.0.1:12345->12345/tcp +df8678f48721|diun|crazymax/diun:latest|Up 6 days| +be5a2016099c|socket-proxy|lscr.io/linuxserver/socket-proxy:latest|Up 6 days|127.0.0.1:2375->2375/tcp +11f407a23623|kopia|kopia/kopia:latest|Up 6 days| +dcade174cf88|loki|grafana/loki:3.7.2|Up 6 days|127.0.0.1:3100->3100/tcp +DETAIL=VM130_RUNNING_CONTAINERS_END +DETAIL=VM130_GIT_SERVICE_CANDIDATE_COUNT=0 +DETAIL=VM130_GIT_SERVICE_CANDIDATES_BEGIN + +DETAIL=VM130_GIT_SERVICE_CANDIDATES_END +DETAIL=BOOTSTRAP_BACKEND_DISCOVERY=PASS +CHANGES_MADE=NO + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 4f50c84..0da375c 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "CONTEXT-BOOTSTRAP-SERVICE-ROUTE-AUDIT-337", + "command_id": "CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338", "status": "OK", "rc": 0, "host": "pve01", "mode": "read-only", "component": "cluster-audit", - "started_at_utc": "2026-07-23T05:41:42Z", - "finished_at_utc": "2026-07-23T05:41:52Z", + "started_at_utc": "2026-07-23T05:46:56Z", + "finished_at_utc": "2026-07-23T05:47:08Z", "reference_register_checked": true, "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", "error_register_checked": true, "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752", - "command_sha256": "9ff2fd18b5d241843db8193a569fd7534ad28f5fa90e6e818575b89b8b7deea9", + "command_sha256": "906328b1fceafc4108862b5eae76ca72697a13a745626bbd7f00c9c7d6efb8a2", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -22,9 +22,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "32fad5aa820b8dae3284ae996ca7a44670d0a83c0af065d8537d0de8b430fce5", - "sanitized_output_sha256": "32fad5aa820b8dae3284ae996ca7a44670d0a83c0af065d8537d0de8b430fce5", + "raw_evidence_sha256": "cf8f33bc79d9fe507e093d044903aeb2fa8d01a4d062e086d03a7bf6a2a8a329", + "sanitized_output_sha256": "cd6b68e90d1f6bc04a7763ffacc1cee5fdb2982d254d4eb441499eb1808db33e", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/curl\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/grep\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/jq\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/wc\nDETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275\nDETAIL=VM130_EXEC_INTEGRITY=PASS\nDETAIL=NGINX_HELPER_SHA256=f900b15bfdd19a1b543037cf8b9c1583e71dc8115bbb5812cf74d474e3e7859b\nDETAIL=NGINX_HELPER_INTEGRITY=PASS\nDETAIL=BOOTSTRAP_HTTP_STATUS=200\nDETAIL=BOOTSTRAP_BODY_SIZE=3096\nDETAIL=BOOTSTRAP_BODY_SHA256=f676adbe6e4eca49054f8b7982eb4e29d7d9ade0d6e90fc27e2b5bea8086c554\nDETAIL=BOOTSTRAP_GENERATED_AT_UTC=2026-07-21T07:02:17Z\nDETAIL=LATEST_JSON_AUTHORITATIVE=NO\nDETAIL=NGINX_ACTIVE_ROUTE_SCAN_BEGIN\nDETAIL=NGINX_CONTAINER_TOOL=PASS:nginx|/usr/local/bin/nginx\nDETAIL=NGINX_CONTAINER_TOOL=PASS:grep|/bin/grep\nDETAIL=NGINX_CONTAINER_TOOL=PASS:wc|/usr/bin/wc\n558: location /.well-known/acme-challenge/ {\n707: location /.well-known/acme-challenge/ {\n799: location /.well-known/acme-challenge/ {\n887: location /.well-known/acme-challenge/ {\n975: location /.well-known/acme-challenge/ {\n1063: location /.well-known/acme-challenge/ {\n1151: location /.well-known/acme-challenge/ {\n1239: location /.well-known/acme-challenge/ {\n1296: location ^~ /.well-known/acme-challenge/ {\n1336: location ^~ /.well-known/acme-challenge/ {\n1376: location ^~ /.well-known/acme-challenge/ {\n1416: location ^~ /.well-known/acme-challenge/ {\n1456: location ^~ /.well-known/acme-challenge/ {\n1527: location /.well-known/acme-challenge/ {\n1603: location /.well-known/acme-challenge/ {\n1700: location /.well-known/acme-challenge/ {\n1791: location /.well-known/acme-challenge/ {\n1882: location /.well-known/acme-challenge/ {\n1973: location /.well-known/acme-challenge/ {\n2064: location /.well-known/acme-challenge/ {\n2155: location /.well-known/acme-challenge/ {\n2246: location /.well-known/acme-challenge/ {\n2337: location /.well-known/acme-challenge/ {\n2428: location /.well-known/acme-challenge/ {\n2519: location /.well-known/acme-challenge/ {\n2607: location /.well-known/acme-challenge/ {\n2698: location /.well-known/acme-challenge/ {\n2789: location /.well-known/acme-challenge/ {\n2880: location /.well-known/acme-challenge/ {\n2971: location /.well-known/acme-challenge/ {\n3062: location /.well-known/acme-challenge/ {\n3153: location /.well-known/acme-challenge/ {\n3244: location /.well-known/acme-challenge/ {\n3335: location /.well-known/acme-challenge/ {\n3408: location /.well-known/acme-challenge/ {\n3481: location /.well-known/acme-challenge/ {\n3569: location /.well-known/acme-challenge/ {\n3642: location /.well-known/acme-challenge/ {\n3715: location /.well-known/acme-challenge/ {\n3791: location /.well-known/acme-challenge/ {\n3864: location /.well-known/acme-challenge/ {\n3937: location /.well-known/acme-challenge/ {\n4010: location /.well-known/acme-challenge/ {\n4083: location /.well-known/acme-challenge/ {\n4156: location /.well-known/acme-challenge/ {\n4229: location /.well-known/acme-challenge/ {\n4302: location /.well-known/acme-challenge/ {\n4390: location /.well-known/acme-challenge/ {\n4478: location /.well-known/acme-challenge/ {\n4530:# git.gram1.ru\n4542: server_name git.gram1.ru;\n4566: location /.well-known/acme-challenge/ {\nDETAIL=NGINX_ACTIVE_ROUTE_MATCH_COUNT=52\nDETAIL=NGINX_ACTIVE_ROUTE_SCAN_END\nDETAIL=VM130_DOCKER=PASS:/usr/bin/docker\nDETAIL=GITEA_CONTAINER_CANDIDATE_COUNT=0\nDETAIL=BOOTSTRAP_SERVICE_ROUTE_AUDIT=PASS\nCHANGES_MADE=NO\n" + "output": "DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sed\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/grep\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/wc\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/curl\nDETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275\nDETAIL=VM130_EXEC_INTEGRITY=PASS\nDETAIL=NGINX_HELPER_SHA256=f900b15bfdd19a1b543037cf8b9c1583e71dc8115bbb5812cf74d474e3e7859b\nDETAIL=NGINX_HELPER_INTEGRITY=PASS\nDETAIL=NGINX_DUMP_LINE_COUNT=4793\nDETAIL=GIT_SERVER_NAME_LINE=4540\nDETAIL=GIT_SERVER_BLOCK_WINDOW=4520-4640\nDETAIL=GIT_SERVER_BLOCK_BEGIN\n # Custom\n include /data/custom_nginx/server_http.conf;\n include /data/custom_nginx/server_proxy.conf;\n}\n\n\n# configuration file /data/nginx/proxy_host/9.conf:\n# ----------------------------------------------------------------------\n# git.gram1.ru\n# DO NOT EDIT THIS FILE DIRECTLY, CHANGES WILL BE LOST WHEN UPDATING!\n# ----------------------------------------------------------------------\n\n\nupstream upstream_9 {\n zone upstream_9 128k;\n server [PRIVATE_IP]:3002;\n}\n\n\nserver {\n server_name git.gram1.ru;\n\n listen unix:/run/nginx.sock;\n\n\n listen 0.0.0.0:80;\n\n\n listen 0.0.0.0:443 ssl;\n\n\n # Certbot TLS\n ssl_certificate /data/tls/certbot/live/npm-29/fullchain.pem;\n ssl_certificate_key /data/tls/certbot/live/npm-29/privkey.pem;\n\n\n if ($scheme = \"http\") {\n return 301 https://$host$is_request_port$request_port$request_uri;\n }\n if ($http_x_forwarded_proto = \"http\") {\n return 301 https://$host$is_request_port$request_port$request_uri;\n }\n\n\n location /.well-known/acme-challenge/ {\n root /data/tls/certbot/acme-challenge;\n fancyindex off;\n index off;\n allow all;\n auth_basic off;\n auth_request off;\n }\n\n\n location / {\n\n\n\n\n more_set_headers \"X-Frame-Options: SAMEORIGIN\";\n\n\n proxy_set_header Host $host$is_request_port$request_port;\n\n include proxy-headers.conf;\n proxy_set_header Accept-Encoding \"\";\n\n\n proxy_pass http://upstream_9;\n\n\n }\n\n\n # custom locations\n # Custom\n include /data/custom_nginx/server_http.conf;\n include /data/custom_nginx/server_proxy.conf;\n}\n\n\n# configuration file /data/nginx/proxy_host/993.conf:\n# TAFTAUTO_ROUTER_WG_MANAGED=yes\n# TAFTAUTO_ROUTE_PHASE=stage-taftauto-edge-wg\nserver {\n listen 0.0.0.0:80;\n listen [::]:80;\n server_name taftauto.ru www.taftauto.ru;\n location / { return 301 https://$host$request_uri; }\n}\nserver {\n listen 0.0.0.0:443 ssl;\n listen [::]:443 ssl;\n server_name taftauto.ru www.taftauto.ru;\n ssl_certificate /data/tls/router-certs/taftauto.ru/fullchain.pem;\n ssl_certificate_key /data/tls/router-certs/taftauto.ru/privkey.pem;\n ssl_protocols TLSv1.2 TLSv1.3;\n add_header X-TAFTAUTO-Router managed always;\n location / {\n proxy_http_version 1.1;\n proxy_set_header Host $host;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto https;\n proxy_set_header X-Forwarded-Scheme https;\n proxy_set_header X-Forwarded-Ssl on;\n proxy_pass http://[PRIVATE_IP]:80;\n }\n}\n\n# configuration file /data/nginx/proxy_host/994.conf:\n# PVEPRO_LANDING_MANAGED=yes\n# PVEPRO_LANDING_PHASE=stage22\nserver {\n listen 0.0.0.0:80;\n listen [::]:80;\n server_name pvepro.ru www.pvepro.ru;\n location / {\n return 301 https://$host$request_uri;\n }\n}\nDETAIL=GIT_SERVER_BLOCK_END\nDETAIL=GIT_SERVER_PROXY_PASS_COUNT=2\nDETAIL=GIT_SERVER_LOCATION_COUNT=5\nDETAIL=GIT_SERVER_STATIC_DIRECTIVE_COUNT=1\nDETAIL=BOOTSTRAP_HTTP_STATUS=200\nDETAIL=BOOTSTRAP_SAFE_HEADERS_BEGIN\nHTTP/2 200 \ncontent-type: application/json\ncontent-length: 3097\ncache-control: max-age=0, private, must-revalidate, no-transform\nlast-modified: Tue, 21 Jul 2026 09:31:10 GMT\nDETAIL=BOOTSTRAP_SAFE_HEADERS_END\nDETAIL=VM130_DOCKER=PASS:/usr/bin/docker\nDETAIL=VM130_RUNNING_CONTAINER_COUNT=11\nDETAIL=VM130_RUNNING_CONTAINERS_BEGIN\n32fe4b81458c|homelab-registry-cache|registry:2|Up 6 days|\n2f18b3d7f386|npmplus|zoeyvid/npmplus:2026-06-17-b1|Up 6 days (healthy)|\n022c10d05f9a|dockge|louislam/dockge:1|Up 6 days (healthy)|127.0.0.1:5001->5001/tcp\n7418a69d796c|crowdsec|crowdsecurity/crowdsec:v1.7.8-slim|Up 6 days|127.0.0.1:7422->7422/tcp, 127.0.0.1:8088->8080/tcp\n2ae500cf90ec|dozzle|2e14180fa14c|Up 2 hours|127.0.0.1:9999->8080/tcp\nc94dc7e48b04|cadvisor|gcr.io/cadvisor/cadvisor:latest|Up 6 days (healthy)|127.0.0.1:8081->8080/tcp\ndf7d2d861c0d|alloy|grafana/alloy:v1.17.0|Up 6 days|127.0.0.1:12345->12345/tcp\ndf8678f48721|diun|crazymax/diun:latest|Up 6 days|\nbe5a2016099c|socket-proxy|lscr.io/linuxserver/socket-proxy:latest|Up 6 days|127.0.0.1:2375->2375/tcp\n11f407a23623|kopia|kopia/kopia:latest|Up 6 days|\ndcade174cf88|loki|grafana/loki:3.7.2|Up 6 days|127.0.0.1:3100->3100/tcp\nDETAIL=VM130_RUNNING_CONTAINERS_END\nDETAIL=VM130_GIT_SERVICE_CANDIDATE_COUNT=0\nDETAIL=VM130_GIT_SERVICE_CANDIDATES_BEGIN\n\nDETAIL=VM130_GIT_SERVICE_CANDIDATES_END\nDETAIL=BOOTSTRAP_BACKEND_DISCOVERY=PASS\nCHANGES_MADE=NO\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index a639e1d..ce8ca5a 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,5 +1,5 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=CONTEXT-BOOTSTRAP-SERVICE-ROUTE-AUDIT-337 +COMMAND_ID=CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338 STATUS=OK RC=0 HOST=pve01 @@ -9,93 +9,184 @@ REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752 -COMMAND_SHA256=9ff2fd18b5d241843db8193a569fd7534ad28f5fa90e6e818575b89b8b7deea9 +COMMAND_SHA256=906328b1fceafc4108862b5eae76ca72697a13a745626bbd7f00c9c7d6efb8a2 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGES_MADE=false SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=32fad5aa820b8dae3284ae996ca7a44670d0a83c0af065d8537d0de8b430fce5 -SANITIZED_OUTPUT_SHA256=32fad5aa820b8dae3284ae996ca7a44670d0a83c0af065d8537d0de8b430fce5 +RAW_EVIDENCE_SHA256=cf8f33bc79d9fe507e093d044903aeb2fa8d01a4d062e086d03a7bf6a2a8a329 +SANITIZED_OUTPUT_SHA256=cd6b68e90d1f6bc04a7763ffacc1cee5fdb2982d254d4eb441499eb1808db33e OUTPUT_BEGIN DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk -DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/curl +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sed DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/grep -DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/jq DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/wc +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/curl DETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275 DETAIL=VM130_EXEC_INTEGRITY=PASS DETAIL=NGINX_HELPER_SHA256=f900b15bfdd19a1b543037cf8b9c1583e71dc8115bbb5812cf74d474e3e7859b DETAIL=NGINX_HELPER_INTEGRITY=PASS +DETAIL=NGINX_DUMP_LINE_COUNT=4793 +DETAIL=GIT_SERVER_NAME_LINE=4540 +DETAIL=GIT_SERVER_BLOCK_WINDOW=4520-4640 +DETAIL=GIT_SERVER_BLOCK_BEGIN + # Custom + include /data/custom_nginx/server_http.conf; + include /data/custom_nginx/server_proxy.conf; +} + + +# configuration file /data/nginx/proxy_host/9.conf: +# ---------------------------------------------------------------------- +# git.gram1.ru +# DO NOT EDIT THIS FILE DIRECTLY, CHANGES WILL BE LOST WHEN UPDATING! +# ---------------------------------------------------------------------- + + +upstream upstream_9 { + zone upstream_9 128k; + server [PRIVATE_IP]:3002; +} + + +server { + server_name git.gram1.ru; + + listen unix:/run/nginx.sock; + + + listen 0.0.0.0:80; + + + listen 0.0.0.0:443 ssl; + + + # Certbot TLS + ssl_certificate /data/tls/certbot/live/npm-29/fullchain.pem; + ssl_certificate_key /data/tls/certbot/live/npm-29/privkey.pem; + + + if ($scheme = "http") { + return 301 https://$host$is_request_port$request_port$request_uri; + } + if ($http_x_forwarded_proto = "http") { + return 301 https://$host$is_request_port$request_port$request_uri; + } + + + location /.well-known/acme-challenge/ { + root /data/tls/certbot/acme-challenge; + fancyindex off; + index off; + allow all; + auth_basic off; + auth_request off; + } + + + location / { + + + + + more_set_headers "X-Frame-Options: SAMEORIGIN"; + + + proxy_set_header Host $host$is_request_port$request_port; + + include proxy-headers.conf; + proxy_set_header Accept-Encoding ""; + + + proxy_pass http://upstream_9; + + + } + + + # custom locations + # Custom + include /data/custom_nginx/server_http.conf; + include /data/custom_nginx/server_proxy.conf; +} + + +# configuration file /data/nginx/proxy_host/993.conf: +# TAFTAUTO_ROUTER_WG_MANAGED=yes +# TAFTAUTO_ROUTE_PHASE=stage-taftauto-edge-wg +server { + listen 0.0.0.0:80; + listen [::]:80; + server_name taftauto.ru www.taftauto.ru; + location / { return 301 https://$host$request_uri; } +} +server { + listen 0.0.0.0:443 ssl; + listen [::]:443 ssl; + server_name taftauto.ru www.taftauto.ru; + ssl_certificate /data/tls/router-certs/taftauto.ru/fullchain.pem; + ssl_certificate_key /data/tls/router-certs/taftauto.ru/privkey.pem; + ssl_protocols TLSv1.2 TLSv1.3; + add_header X-TAFTAUTO-Router managed always; + location / { + proxy_http_version 1.1; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto https; + proxy_set_header X-Forwarded-Scheme https; + proxy_set_header X-Forwarded-Ssl on; + proxy_pass http://[PRIVATE_IP]:80; + } +} + +# configuration file /data/nginx/proxy_host/994.conf: +# PVEPRO_LANDING_MANAGED=yes +# PVEPRO_LANDING_PHASE=stage22 +server { + listen 0.0.0.0:80; + listen [::]:80; + server_name pvepro.ru www.pvepro.ru; + location / { + return 301 https://$host$request_uri; + } +} +DETAIL=GIT_SERVER_BLOCK_END +DETAIL=GIT_SERVER_PROXY_PASS_COUNT=2 +DETAIL=GIT_SERVER_LOCATION_COUNT=5 +DETAIL=GIT_SERVER_STATIC_DIRECTIVE_COUNT=1 DETAIL=BOOTSTRAP_HTTP_STATUS=200 -DETAIL=BOOTSTRAP_BODY_SIZE=3096 -DETAIL=BOOTSTRAP_BODY_SHA256=f676adbe6e4eca49054f8b7982eb4e29d7d9ade0d6e90fc27e2b5bea8086c554 -DETAIL=BOOTSTRAP_GENERATED_AT_UTC=2026-07-21T07:02:17Z -DETAIL=LATEST_JSON_AUTHORITATIVE=NO -DETAIL=NGINX_ACTIVE_ROUTE_SCAN_BEGIN -DETAIL=NGINX_CONTAINER_TOOL=PASS:nginx|/usr/local/bin/nginx -DETAIL=NGINX_CONTAINER_TOOL=PASS:grep|/bin/grep -DETAIL=NGINX_CONTAINER_TOOL=PASS:wc|/usr/bin/wc -558: location /.well-known/acme-challenge/ { -707: location /.well-known/acme-challenge/ { -799: location /.well-known/acme-challenge/ { -887: location /.well-known/acme-challenge/ { -975: location /.well-known/acme-challenge/ { -1063: location /.well-known/acme-challenge/ { -1151: location /.well-known/acme-challenge/ { -1239: location /.well-known/acme-challenge/ { -1296: location ^~ /.well-known/acme-challenge/ { -1336: location ^~ /.well-known/acme-challenge/ { -1376: location ^~ /.well-known/acme-challenge/ { -1416: location ^~ /.well-known/acme-challenge/ { -1456: location ^~ /.well-known/acme-challenge/ { -1527: location /.well-known/acme-challenge/ { -1603: location /.well-known/acme-challenge/ { -1700: location /.well-known/acme-challenge/ { -1791: location /.well-known/acme-challenge/ { -1882: location /.well-known/acme-challenge/ { -1973: location /.well-known/acme-challenge/ { -2064: location /.well-known/acme-challenge/ { -2155: location /.well-known/acme-challenge/ { -2246: location /.well-known/acme-challenge/ { -2337: location /.well-known/acme-challenge/ { -2428: location /.well-known/acme-challenge/ { -2519: location /.well-known/acme-challenge/ { -2607: location /.well-known/acme-challenge/ { -2698: location /.well-known/acme-challenge/ { -2789: location /.well-known/acme-challenge/ { -2880: location /.well-known/acme-challenge/ { -2971: location /.well-known/acme-challenge/ { -3062: location /.well-known/acme-challenge/ { -3153: location /.well-known/acme-challenge/ { -3244: location /.well-known/acme-challenge/ { -3335: location /.well-known/acme-challenge/ { -3408: location /.well-known/acme-challenge/ { -3481: location /.well-known/acme-challenge/ { -3569: location /.well-known/acme-challenge/ { -3642: location /.well-known/acme-challenge/ { -3715: location /.well-known/acme-challenge/ { -3791: location /.well-known/acme-challenge/ { -3864: location /.well-known/acme-challenge/ { -3937: location /.well-known/acme-challenge/ { -4010: location /.well-known/acme-challenge/ { -4083: location /.well-known/acme-challenge/ { -4156: location /.well-known/acme-challenge/ { -4229: location /.well-known/acme-challenge/ { -4302: location /.well-known/acme-challenge/ { -4390: location /.well-known/acme-challenge/ { -4478: location /.well-known/acme-challenge/ { -4530:# git.gram1.ru -4542: server_name git.gram1.ru; -4566: location /.well-known/acme-challenge/ { -DETAIL=NGINX_ACTIVE_ROUTE_MATCH_COUNT=52 -DETAIL=NGINX_ACTIVE_ROUTE_SCAN_END +DETAIL=BOOTSTRAP_SAFE_HEADERS_BEGIN +HTTP/2 200 +content-type: application/json +content-length: 3097 +cache-control: max-age=0, private, must-revalidate, no-transform +last-modified: Tue, 21 Jul 2026 09:31:10 GMT +DETAIL=BOOTSTRAP_SAFE_HEADERS_END DETAIL=VM130_DOCKER=PASS:/usr/bin/docker -DETAIL=GITEA_CONTAINER_CANDIDATE_COUNT=0 -DETAIL=BOOTSTRAP_SERVICE_ROUTE_AUDIT=PASS +DETAIL=VM130_RUNNING_CONTAINER_COUNT=11 +DETAIL=VM130_RUNNING_CONTAINERS_BEGIN +32fe4b81458c|homelab-registry-cache|registry:2|Up 6 days| +2f18b3d7f386|npmplus|zoeyvid/npmplus:2026-06-17-b1|Up 6 days (healthy)| +022c10d05f9a|dockge|louislam/dockge:1|Up 6 days (healthy)|127.0.0.1:5001->5001/tcp +7418a69d796c|crowdsec|crowdsecurity/crowdsec:v1.7.8-slim|Up 6 days|127.0.0.1:7422->7422/tcp, 127.0.0.1:8088->8080/tcp +2ae500cf90ec|dozzle|2e14180fa14c|Up 2 hours|127.0.0.1:9999->8080/tcp +c94dc7e48b04|cadvisor|gcr.io/cadvisor/cadvisor:latest|Up 6 days (healthy)|127.0.0.1:8081->8080/tcp +df7d2d861c0d|alloy|grafana/alloy:v1.17.0|Up 6 days|127.0.0.1:12345->12345/tcp +df8678f48721|diun|crazymax/diun:latest|Up 6 days| +be5a2016099c|socket-proxy|lscr.io/linuxserver/socket-proxy:latest|Up 6 days|127.0.0.1:2375->2375/tcp +11f407a23623|kopia|kopia/kopia:latest|Up 6 days| +dcade174cf88|loki|grafana/loki:3.7.2|Up 6 days|127.0.0.1:3100->3100/tcp +DETAIL=VM130_RUNNING_CONTAINERS_END +DETAIL=VM130_GIT_SERVICE_CANDIDATE_COUNT=0 +DETAIL=VM130_GIT_SERVICE_CANDIDATES_BEGIN + +DETAIL=VM130_GIT_SERVICE_CANDIDATES_END +DETAIL=BOOTSTRAP_BACKEND_DISCOVERY=PASS CHANGES_MADE=NO OUTPUT_END