runtime: publish CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338

runtime/history/CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338.txt

@@ -0,0 +1,193 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=cluster-audit
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
+COMMAND_SHA256=906328b1fceafc4108862b5eae76ca72697a13a745626bbd7f00c9c7d6efb8a2
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGES_MADE=false
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=cf8f33bc79d9fe507e093d044903aeb2fa8d01a4d062e086d03a7bf6a2a8a329
+SANITIZED_OUTPUT_SHA256=cd6b68e90d1f6bc04a7763ffacc1cee5fdb2982d254d4eb441499eb1808db33e
+OUTPUT_BEGIN
+DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test
+DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum
+DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk
+DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sed
+DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/grep
+DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/wc
+DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/curl
+DETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275
+DETAIL=VM130_EXEC_INTEGRITY=PASS
+DETAIL=NGINX_HELPER_SHA256=f900b15bfdd19a1b543037cf8b9c1583e71dc8115bbb5812cf74d474e3e7859b
+DETAIL=NGINX_HELPER_INTEGRITY=PASS
+DETAIL=NGINX_DUMP_LINE_COUNT=4793
+DETAIL=GIT_SERVER_NAME_LINE=4540
+DETAIL=GIT_SERVER_BLOCK_WINDOW=4520-4640
+DETAIL=GIT_SERVER_BLOCK_BEGIN
+  # Custom
+  include /data/custom_nginx/server_http.conf;
+  include /data/custom_nginx/server_proxy.conf;
+}
+
+
+# configuration file /data/nginx/proxy_host/9.conf:
+# ----------------------------------------------------------------------
+# git.gram1.ru
+# DO NOT EDIT THIS FILE DIRECTLY, CHANGES WILL BE LOST WHEN UPDATING!
+# ----------------------------------------------------------------------
+
+
+upstream upstream_9 {
+  zone upstream_9 128k;
+  server [PRIVATE_IP]:3002;
+}
+
+
+server {
+  server_name git.gram1.ru;
+
+  listen unix:/run/nginx.sock;
+
+
+  listen 0.0.0.0:80;
+
+
+  listen 0.0.0.0:443 ssl;
+
+
+  # Certbot TLS
+  ssl_certificate /data/tls/certbot/live/npm-29/fullchain.pem;
+  ssl_certificate_key /data/tls/certbot/live/npm-29/privkey.pem;
+
+
+  if ($scheme = "http") {
+    return 301 https://$host$is_request_port$request_port$request_uri;
+  }
+  if ($http_x_forwarded_proto = "http") {
+    return 301 https://$host$is_request_port$request_port$request_uri;
+  }
+
+
+  location /.well-known/acme-challenge/ {
+    root /data/tls/certbot/acme-challenge;
+    fancyindex off;
+    index off;
+    allow all;
+    auth_basic off;
+    auth_request off;
+  }
+
+
+  location / {
+
+
+
+
+    more_set_headers "X-Frame-Options: SAMEORIGIN";
+
+
+    proxy_set_header Host $host$is_request_port$request_port;
+
+    include proxy-headers.conf;
+    proxy_set_header Accept-Encoding "";
+
+
+    proxy_pass http://upstream_9;
+
+
+  }
+
+
+  # custom locations
+  # Custom
+  include /data/custom_nginx/server_http.conf;
+  include /data/custom_nginx/server_proxy.conf;
+}
+
+
+# configuration file /data/nginx/proxy_host/993.conf:
+# TAFTAUTO_ROUTER_WG_MANAGED=yes
+# TAFTAUTO_ROUTE_PHASE=stage-taftauto-edge-wg
+server {
+    listen 0.0.0.0:80;
+    listen [::]:80;
+    server_name taftauto.ru www.taftauto.ru;
+    location / { return 301 https://$host$request_uri; }
+}
+server {
+    listen 0.0.0.0:443 ssl;
+    listen [::]:443 ssl;
+    server_name taftauto.ru www.taftauto.ru;
+    ssl_certificate /data/tls/router-certs/taftauto.ru/fullchain.pem;
+    ssl_certificate_key /data/tls/router-certs/taftauto.ru/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    add_header X-TAFTAUTO-Router managed always;
+    location / {
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header X-Forwarded-Scheme https;
+        proxy_set_header X-Forwarded-Ssl on;
+        proxy_pass http://[PRIVATE_IP]:80;
+    }
+}
+
+# configuration file /data/nginx/proxy_host/994.conf:
+# PVEPRO_LANDING_MANAGED=yes
+# PVEPRO_LANDING_PHASE=stage22
+server {
+    listen 0.0.0.0:80;
+    listen [::]:80;
+    server_name pvepro.ru www.pvepro.ru;
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+DETAIL=GIT_SERVER_BLOCK_END
+DETAIL=GIT_SERVER_PROXY_PASS_COUNT=2
+DETAIL=GIT_SERVER_LOCATION_COUNT=5
+DETAIL=GIT_SERVER_STATIC_DIRECTIVE_COUNT=1
+DETAIL=BOOTSTRAP_HTTP_STATUS=200
+DETAIL=BOOTSTRAP_SAFE_HEADERS_BEGIN
+HTTP/2 200 
+content-type: application/json
+content-length: 3097
+cache-control: max-age=0, private, must-revalidate, no-transform
+last-modified: Tue, 21 Jul 2026 09:31:10 GMT
+DETAIL=BOOTSTRAP_SAFE_HEADERS_END
+DETAIL=VM130_DOCKER=PASS:/usr/bin/docker
+DETAIL=VM130_RUNNING_CONTAINER_COUNT=11
+DETAIL=VM130_RUNNING_CONTAINERS_BEGIN
+32fe4b81458c|homelab-registry-cache|registry:2|Up 6 days|
+2f18b3d7f386|npmplus|zoeyvid/npmplus:2026-06-17-b1|Up 6 days (healthy)|
+022c10d05f9a|dockge|louislam/dockge:1|Up 6 days (healthy)|127.0.0.1:5001->5001/tcp
+7418a69d796c|crowdsec|crowdsecurity/crowdsec:v1.7.8-slim|Up 6 days|127.0.0.1:7422->7422/tcp, 127.0.0.1:8088->8080/tcp
+2ae500cf90ec|dozzle|2e14180fa14c|Up 2 hours|127.0.0.1:9999->8080/tcp
+c94dc7e48b04|cadvisor|gcr.io/cadvisor/cadvisor:latest|Up 6 days (healthy)|127.0.0.1:8081->8080/tcp
+df7d2d861c0d|alloy|grafana/alloy:v1.17.0|Up 6 days|127.0.0.1:12345->12345/tcp
+df8678f48721|diun|crazymax/diun:latest|Up 6 days|
+be5a2016099c|socket-proxy|lscr.io/linuxserver/socket-proxy:latest|Up 6 days|127.0.0.1:2375->2375/tcp
+11f407a23623|kopia|kopia/kopia:latest|Up 6 days|
+dcade174cf88|loki|grafana/loki:3.7.2|Up 6 days|127.0.0.1:3100->3100/tcp
+DETAIL=VM130_RUNNING_CONTAINERS_END
+DETAIL=VM130_GIT_SERVICE_CANDIDATE_COUNT=0
+DETAIL=VM130_GIT_SERVICE_CANDIDATES_BEGIN
+
+DETAIL=VM130_GIT_SERVICE_CANDIDATES_END
+DETAIL=BOOTSTRAP_BACKEND_DISCOVERY=PASS
+CHANGES_MADE=NO
+
+OUTPUT_END
+CHAT_OUTPUT_END

runtime/latest.txt

@@ -1,5 +1,5 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=CONTEXT-BOOTSTRAP-SERVICE-ROUTE-AUDIT-337
+COMMAND_ID=CONTEXT-BOOTSTRAP-BACKEND-DISCOVERY-338
 STATUS=OK
 RC=0
 HOST=pve01
@@ -9,93 +9,184 @@ REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
-COMMAND_SHA256=9ff2fd18b5d241843db8193a569fd7534ad28f5fa90e6e818575b89b8b7deea9
+COMMAND_SHA256=906328b1fceafc4108862b5eae76ca72697a13a745626bbd7f00c9c7d6efb8a2
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGES_MADE=false
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=32fad5aa820b8dae3284ae996ca7a44670d0a83c0af065d8537d0de8b430fce5
+RAW_EVIDENCE_SHA256=cf8f33bc79d9fe507e093d044903aeb2fa8d01a4d062e086d03a7bf6a2a8a329
-SANITIZED_OUTPUT_SHA256=32fad5aa820b8dae3284ae996ca7a44670d0a83c0af065d8537d0de8b430fce5
+SANITIZED_OUTPUT_SHA256=cd6b68e90d1f6bc04a7763ffacc1cee5fdb2982d254d4eb441499eb1808db33e
 OUTPUT_BEGIN
 DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test
 DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum
 DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk
-DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/curl
+DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sed
 DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/grep
-DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/jq
 DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/wc
+DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/curl
 DETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275
 DETAIL=VM130_EXEC_INTEGRITY=PASS
 DETAIL=NGINX_HELPER_SHA256=f900b15bfdd19a1b543037cf8b9c1583e71dc8115bbb5812cf74d474e3e7859b
 DETAIL=NGINX_HELPER_INTEGRITY=PASS
+DETAIL=NGINX_DUMP_LINE_COUNT=4793
+DETAIL=GIT_SERVER_NAME_LINE=4540
+DETAIL=GIT_SERVER_BLOCK_WINDOW=4520-4640
+DETAIL=GIT_SERVER_BLOCK_BEGIN
+  # Custom
+  include /data/custom_nginx/server_http.conf;
+  include /data/custom_nginx/server_proxy.conf;
+}
+
+
+# configuration file /data/nginx/proxy_host/9.conf:
+# ----------------------------------------------------------------------
+# git.gram1.ru
+# DO NOT EDIT THIS FILE DIRECTLY, CHANGES WILL BE LOST WHEN UPDATING!
+# ----------------------------------------------------------------------
+
+
+upstream upstream_9 {
+  zone upstream_9 128k;
+  server [PRIVATE_IP]:3002;
+}
+
+
+server {
+  server_name git.gram1.ru;
+
+  listen unix:/run/nginx.sock;
+
+
+  listen 0.0.0.0:80;
+
+
+  listen 0.0.0.0:443 ssl;
+
+
+  # Certbot TLS
+  ssl_certificate /data/tls/certbot/live/npm-29/fullchain.pem;
+  ssl_certificate_key /data/tls/certbot/live/npm-29/privkey.pem;
+
+
+  if ($scheme = "http") {
+    return 301 https://$host$is_request_port$request_port$request_uri;
+  }
+  if ($http_x_forwarded_proto = "http") {
+    return 301 https://$host$is_request_port$request_port$request_uri;
+  }
+
+
+  location /.well-known/acme-challenge/ {
+    root /data/tls/certbot/acme-challenge;
+    fancyindex off;
+    index off;
+    allow all;
+    auth_basic off;
+    auth_request off;
+  }
+
+
+  location / {
+
+
+
+
+    more_set_headers "X-Frame-Options: SAMEORIGIN";
+
+
+    proxy_set_header Host $host$is_request_port$request_port;
+
+    include proxy-headers.conf;
+    proxy_set_header Accept-Encoding "";
+
+
+    proxy_pass http://upstream_9;
+
+
+  }
+
+
+  # custom locations
+  # Custom
+  include /data/custom_nginx/server_http.conf;
+  include /data/custom_nginx/server_proxy.conf;
+}
+
+
+# configuration file /data/nginx/proxy_host/993.conf:
+# TAFTAUTO_ROUTER_WG_MANAGED=yes
+# TAFTAUTO_ROUTE_PHASE=stage-taftauto-edge-wg
+server {
+    listen 0.0.0.0:80;
+    listen [::]:80;
+    server_name taftauto.ru www.taftauto.ru;
+    location / { return 301 https://$host$request_uri; }
+}
+server {
+    listen 0.0.0.0:443 ssl;
+    listen [::]:443 ssl;
+    server_name taftauto.ru www.taftauto.ru;
+    ssl_certificate /data/tls/router-certs/taftauto.ru/fullchain.pem;
+    ssl_certificate_key /data/tls/router-certs/taftauto.ru/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    add_header X-TAFTAUTO-Router managed always;
+    location / {
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header X-Forwarded-Scheme https;
+        proxy_set_header X-Forwarded-Ssl on;
+        proxy_pass http://[PRIVATE_IP]:80;
+    }
+}
+
+# configuration file /data/nginx/proxy_host/994.conf:
+# PVEPRO_LANDING_MANAGED=yes
+# PVEPRO_LANDING_PHASE=stage22
+server {
+    listen 0.0.0.0:80;
+    listen [::]:80;
+    server_name pvepro.ru www.pvepro.ru;
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+DETAIL=GIT_SERVER_BLOCK_END
+DETAIL=GIT_SERVER_PROXY_PASS_COUNT=2
+DETAIL=GIT_SERVER_LOCATION_COUNT=5
+DETAIL=GIT_SERVER_STATIC_DIRECTIVE_COUNT=1
 DETAIL=BOOTSTRAP_HTTP_STATUS=200
-DETAIL=BOOTSTRAP_BODY_SIZE=3096
+DETAIL=BOOTSTRAP_SAFE_HEADERS_BEGIN
-DETAIL=BOOTSTRAP_BODY_SHA256=f676adbe6e4eca49054f8b7982eb4e29d7d9ade0d6e90fc27e2b5bea8086c554
+HTTP/2 200 
-DETAIL=BOOTSTRAP_GENERATED_AT_UTC=2026-07-21T07:02:17Z
+content-type: application/json
-DETAIL=LATEST_JSON_AUTHORITATIVE=NO
+content-length: 3097
-DETAIL=NGINX_ACTIVE_ROUTE_SCAN_BEGIN
+cache-control: max-age=0, private, must-revalidate, no-transform
-DETAIL=NGINX_CONTAINER_TOOL=PASS:nginx|/usr/local/bin/nginx
+last-modified: Tue, 21 Jul 2026 09:31:10 GMT
-DETAIL=NGINX_CONTAINER_TOOL=PASS:grep|/bin/grep
+DETAIL=BOOTSTRAP_SAFE_HEADERS_END
-DETAIL=NGINX_CONTAINER_TOOL=PASS:wc|/usr/bin/wc
-558:  location /.well-known/acme-challenge/ {
-707:  location /.well-known/acme-challenge/ {
-799:  location /.well-known/acme-challenge/ {
-887:  location /.well-known/acme-challenge/ {
-975:  location /.well-known/acme-challenge/ {
-1063:  location /.well-known/acme-challenge/ {
-1151:  location /.well-known/acme-challenge/ {
-1239:  location /.well-known/acme-challenge/ {
-1296:  location ^~ /.well-known/acme-challenge/ {
-1336:  location ^~ /.well-known/acme-challenge/ {
-1376:  location ^~ /.well-known/acme-challenge/ {
-1416:  location ^~ /.well-known/acme-challenge/ {
-1456:  location ^~ /.well-known/acme-challenge/ {
-1527:  location /.well-known/acme-challenge/ {
-1603:  location /.well-known/acme-challenge/ {
-1700:  location /.well-known/acme-challenge/ {
-1791:  location /.well-known/acme-challenge/ {
-1882:  location /.well-known/acme-challenge/ {
-1973:  location /.well-known/acme-challenge/ {
-2064:  location /.well-known/acme-challenge/ {
-2155:  location /.well-known/acme-challenge/ {
-2246:  location /.well-known/acme-challenge/ {
-2337:  location /.well-known/acme-challenge/ {
-2428:  location /.well-known/acme-challenge/ {
-2519:  location /.well-known/acme-challenge/ {
-2607:  location /.well-known/acme-challenge/ {
-2698:  location /.well-known/acme-challenge/ {
-2789:  location /.well-known/acme-challenge/ {
-2880:  location /.well-known/acme-challenge/ {
-2971:  location /.well-known/acme-challenge/ {
-3062:  location /.well-known/acme-challenge/ {
-3153:  location /.well-known/acme-challenge/ {
-3244:  location /.well-known/acme-challenge/ {
-3335:  location /.well-known/acme-challenge/ {
-3408:  location /.well-known/acme-challenge/ {
-3481:  location /.well-known/acme-challenge/ {
-3569:  location /.well-known/acme-challenge/ {
-3642:  location /.well-known/acme-challenge/ {
-3715:  location /.well-known/acme-challenge/ {
-3791:  location /.well-known/acme-challenge/ {
-3864:  location /.well-known/acme-challenge/ {
-3937:  location /.well-known/acme-challenge/ {
-4010:  location /.well-known/acme-challenge/ {
-4083:  location /.well-known/acme-challenge/ {
-4156:  location /.well-known/acme-challenge/ {
-4229:  location /.well-known/acme-challenge/ {
-4302:  location /.well-known/acme-challenge/ {
-4390:  location /.well-known/acme-challenge/ {
-4478:  location /.well-known/acme-challenge/ {
-4530:# git.gram1.ru
-4542:  server_name git.gram1.ru;
-4566:  location /.well-known/acme-challenge/ {
-DETAIL=NGINX_ACTIVE_ROUTE_MATCH_COUNT=52
-DETAIL=NGINX_ACTIVE_ROUTE_SCAN_END
 DETAIL=VM130_DOCKER=PASS:/usr/bin/docker
-DETAIL=GITEA_CONTAINER_CANDIDATE_COUNT=0
+DETAIL=VM130_RUNNING_CONTAINER_COUNT=11
-DETAIL=BOOTSTRAP_SERVICE_ROUTE_AUDIT=PASS
+DETAIL=VM130_RUNNING_CONTAINERS_BEGIN
+32fe4b81458c|homelab-registry-cache|registry:2|Up 6 days|
+2f18b3d7f386|npmplus|zoeyvid/npmplus:2026-06-17-b1|Up 6 days (healthy)|
+022c10d05f9a|dockge|louislam/dockge:1|Up 6 days (healthy)|127.0.0.1:5001->5001/tcp
+7418a69d796c|crowdsec|crowdsecurity/crowdsec:v1.7.8-slim|Up 6 days|127.0.0.1:7422->7422/tcp, 127.0.0.1:8088->8080/tcp
+2ae500cf90ec|dozzle|2e14180fa14c|Up 2 hours|127.0.0.1:9999->8080/tcp
+c94dc7e48b04|cadvisor|gcr.io/cadvisor/cadvisor:latest|Up 6 days (healthy)|127.0.0.1:8081->8080/tcp
+df7d2d861c0d|alloy|grafana/alloy:v1.17.0|Up 6 days|127.0.0.1:12345->12345/tcp
+df8678f48721|diun|crazymax/diun:latest|Up 6 days|
+be5a2016099c|socket-proxy|lscr.io/linuxserver/socket-proxy:latest|Up 6 days|127.0.0.1:2375->2375/tcp
+11f407a23623|kopia|kopia/kopia:latest|Up 6 days|
+dcade174cf88|loki|grafana/loki:3.7.2|Up 6 days|127.0.0.1:3100->3100/tcp
+DETAIL=VM130_RUNNING_CONTAINERS_END
+DETAIL=VM130_GIT_SERVICE_CANDIDATE_COUNT=0
+DETAIL=VM130_GIT_SERVICE_CANDIDATES_BEGIN
+
+DETAIL=VM130_GIT_SERVICE_CANDIDATES_END
+DETAIL=BOOTSTRAP_BACKEND_DISCOVERY=PASS
 CHANGES_MADE=NO
 
 OUTPUT_END