homelab-public-context/runtime/history/HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z.txt

CHAT_OUTPUT_BEGIN
COMMAND_ID=HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z
STATUS=FAIL
RC=1
HOST=pve01
MODE=verify
COMPONENT=homepage-newfilya-public-tls-read-only-plan-fix1-v10
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
COMMAND_SHA256=eb8cae611596457796446a6f7e06c46315bdbaf5b72d87a9b3371ae67da603b5
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=1
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e
SANITIZED_OUTPUT_SHA256=f03ab62f3c66920f27ac5aa0b8ad278bac481236138ff8167c3ea0bd4c3f410e
OUTPUT_BEGIN
HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z","mutation_outcome":"NO_MUTATION","rollback_restored":null,"rollback_started":false,"status":"FAIL","version":1}
{"PLAN_SHA256":null,"action":null,"blockers":["CERTBOT_ACCOUNT_MISSING","CERTBOT_METADATA_NOT_READY","CERTBOT_NOT_READY","CERTBOT_PERSISTENT_WEBROOT_NOT_SELECTED","CURRENT_SELF_SIGNED_CERTIFICATE_NOT_VALID_NOW","EDGE_EFFECTIVE_ACME_ROUTE_NOT_PROVEN","EDGE_PRIVATE_KEY_PRIVACY_INVALID","EDGE_ROUTE_PRIVACY_CONTRACT_INVALID","NEWFILYA_EDGE_CERTIFICATE_NOT_IDENTIFIED","NEWFILYA_EDGE_PRIVATE_KEY_MISSING","NEWFILYA_PROXY_ACME_ROUTE_NOT_READY","NEWFILYA_PROXY_ROUTE_NOT_UNIQUE","NEWFILYA_PROXY_ROUTE_RISKY_DIRECTIVES","NEWFILYA_PUBLIC_RESPONSE_INVALID","NEWFILYA_UPSTREAM_NOT_CONFIGURED","NEWFILYA_UPSTREAM_SHAPE_INVALID","NPMPLUS_CONFIG_NOT_READY","NPMPLUS_NOT_HEALTHY","PUBLIC_EDGE_CERTIFICATE_MISMATCH","PUBLIC_TLS_HTTP_LEAF_MISMATCH"],"body_returned":false,"certificate_changed":false,"certificate_contents_returned":false,"changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-FIX1-V10-20260804T092000Z","container_restarted":false,"control_plane_error":null,"desired_state_changed":false,"diagnosis":"NEWFILYA_PUBLIC_TLS_PLAN_BLOCKED","dns_changed":false,"duration_ms":3028,"edge":{"certbot_account_count":null,"certbot_account_path_set_sha256":null,"certbot_available":null,"certbot_config_metadata_exact":null,"certbot_config_stat_sha256":null,"certbot_root_kind":null,"certbot_selected_webroot":null,"certbot_selected_webroot_sha256":null,"certbot_strategy":null,"certbot_webroot_metadata_exact":null,"certificate_config_path_sha256":null,"certificate_configured":null,"certificate_covers_domain":null,"certificate_path_sha256":null,"certificate_private_key_read":null,"certificate_remaining_seconds_bucket":null,"certificate_sha256":null,"certificate_valid_now":null,"domain_match_count":null,"effective_nginx_bytes":null,"effective_nginx_sha256":null,"failed_checks":[],"failed_checks_allowlisted":true,"key_content_read":null,"key_exists":null,"key_path_sha256":null,"nginx_test_rc":null,"npmplus_container_id_sha256":null,"npmplus_data_mount_exact":null,"npmplus_health":null,"npmplus_image_sha256":null,"npmplus_running":null,"npmplus_started_at_sha256":null,"ok":false,"persistent_acme_http_route_count":null,"persistent_acme_http_route_present":null,"primary_certificate_path_states":{},"primary_certificate_paths_absent":null,"private_addresses_included":false,"proxy_file_count":null,"proxy_tree_sha256":null,"route_bytes":null,"route_content_returned":null,"route_domain_exact":null,"route_filename":null,"route_persistent_acme_root_count":null,"route_private_addresses_returned":null,"route_risky_directives":null,"route_safe_acme_allow":null,"route_sha256":null,"secret_files_read":false,"secrets_included":false,"status":"FAIL","upstream_host_configured":null,"upstream_host_sha256":null,"upstream_port":null,"upstream_proxy_pass_present":null,"upstream_scheme":null,"upstream_style":null},"gate":"BLOCKED","gitea_changed":false,"homepage":{"backup_bytes":12005,"backup_mode":"0o600","backup_sha256":"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c","card_count":65,"contains_private_dispatch_material":false,"failed_checks":[],"group_count":7,"hbarhub_card_exact":true,"homepage_api_sha256":"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d","homepage_api_target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1},"homepage_image_id_sha256":"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79","homepage_image_reference_sha256":"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808","homepage_mount_exact":true,"homepage_restart_count":0,"newfilya_card_exact":true,"newfilya_monitor_enabled":false,"ok":true,"secret_file_read":false,"secrets_included":false,"services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","source_contents_returned":false,"status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"homepage_changed":false,"mutation_outcome":"NO_MUTATION","next_stage":"NEWFILYA_PUBLIC_TLS_PLAN_FIX","npmplus_reloaded":false,"parent_v8_evidence":{"capsule_bytes":119374,"capsule_sha256":"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418","card_count":65,"changes_made":true,"command_id":"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z","gate":"APPLIED_AND_VERIFIED","group_count":7,"hbarhub_monitor_enabled":true,"mutation_outcome":"MUTATED","newfilya_monitor_enabled":false,"output_sha256":"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706","rc":0,"rollback_restored":null,"rollback_started":false,"runner_command_sha256":"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1","services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"parent_v9_failure_evidence":{"capsule_bytes":90705,"capsule_sha256":"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z","command_sha256":"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059","diagnosis":"CONTROL_PLANE_EXCEPTION","failure_type":"TypeError","mutation_outcome":"NO_MUTATION","output_sha256":"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16","rc":1,"rollback_restored":null,"rollback_started":false,"status":"FAIL"},"plan":{"action":null,"apply_scope":{"certificate_domain_count":1,"certificate_strategy":"PRIMARY_NAME_IF_ABSENT_ELSE_NEW_ISOLATED_LINEAGE","desired_state_changes":false,"dns_changes":false,"edge_vm_restart_forbidden":true,"first_mutation":"HOMEPAGE_MONITOR_ONLY","gitea_changes":false,"homepage_restart_forbidden":true,"homepage_site_monitor_lines_added_eventually":1,"nginx_config_test_required":true,"nginx_reload_allowed":false,"npmplus_restart_forbidden":true,"other_homepage_cards_changed":0,"private_addresses_in_output":false,"private_keys_read":false,"proxy_directives_allowed":["ssl_certificate","ssl_certificate_key"],"selected_proxy_file_count":1},"domain":"newfilya.ru","edge_lock":{"certbot_account_count":null,"certbot_account_path_set_sha256":null,"certbot_available":null,"certbot_config_metadata_exact":null,"certbot_config_stat_sha256":null,"certbot_root_kind":null,"certbot_selected_webroot":null,"certbot_selected_webroot_sha256":null,"certbot_strategy":null,"certbot_webroot_metadata_exact":null,"certificate_config_path_sha256":null,"certificate_configured":null,"certificate_covers_domain":null,"certificate_path_sha256":null,"certificate_private_key_read":null,"certificate_remaining_seconds_bucket":null,"certificate_sha256":null,"certificate_valid_now":null,"domain_match_count":null,"effective_nginx_bytes":null,"effective_nginx_sha256":null,"failed_checks":[],"failed_checks_allowlisted":true,"key_content_read":null,"key_exists":null,"key_path_sha256":null,"nginx_test_rc":null,"npmplus_container_id_sha256":null,"npmplus_data_mount_exact":null,"npmplus_health":null,"npmplus_image_sha256":null,"npmplus_running":null,"npmplus_started_at_sha256":null,"ok":false,"persistent_acme_http_route_count":null,"persistent_acme_http_route_present":null,"primary_certificate_path_states":{},"primary_certificate_paths_absent":null,"private_addresses_included":false,"proxy_file_count":null,"proxy_tree_sha256":null,"route_bytes":null,"route_content_returned":null,"route_domain_exact":null,"route_filename":null,"route_persistent_acme_root_count":null,"route_private_addresses_returned":null,"route_risky_directives":null,"route_safe_acme_allow":null,"route_sha256":null,"secret_files_read":false,"secrets_included":false,"status":"FAIL","upstream_host_configured":null,"upstream_host_sha256":null,"upstream_port":null,"upstream_proxy_pass_present":null,"upstream_scheme":null,"upstream_style":null},"homepage_lock":{"backup_bytes":12005,"backup_mode":"0o600","backup_sha256":"6468974ef09b3d9899bae5df4d8a7fa711d6cf16edda00b116747192277dcb2c","card_count":65,"contains_private_dispatch_material":false,"failed_checks":[],"group_count":7,"hbarhub_card_exact":true,"homepage_api_sha256":"a1ece968406ec5ce5ba02197d5270d1e3ce34da451a69cc3cc5f38b6081ada0d","homepage_api_target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1},"homepage_image_id_sha256":"242e6332e372aaffcf7c821cff66dcbc12c42b2cd4ae282db9533b640892ac79","homepage_image_reference_sha256":"b0c046cffbc1a48af0e6b240575c63b6f405debba0b2c50fa190616b5ea62808","homepage_mount_exact":true,"homepage_restart_count":0,"newfilya_card_exact":true,"newfilya_monitor_enabled":false,"ok":true,"secret_file_read":false,"secrets_included":false,"services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","source_contents_returned":false,"status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"next_stage":"NEWFILYA_PUBLIC_TLS_PLAN_FIX","operation":"NEWFILYA_PUBLIC_TLS_THEN_HOMEPAGE_MONITOR","parent_v8_evidence":{"capsule_bytes":119374,"capsule_sha256":"e5689bf4a8cfd99f2b0b7427936018d7c4f82ef535ca3b2046f87311fd829418","card_count":65,"changes_made":true,"command_id":"HOMEPAGE-ADD-NEWFILYA-HBARHUB-ATOMIC-LIVE-APPLY-INDENT-FIX1-V8-20260804T083000Z","gate":"APPLIED_AND_VERIFIED","group_count":7,"hbarhub_monitor_enabled":true,"mutation_outcome":"MUTATED","newfilya_monitor_enabled":false,"output_sha256":"0b8fccd5235c8a460a5c477a1747b03299c0f908310f029e728afe9cd6c2e706","rc":0,"rollback_restored":null,"rollback_started":false,"runner_command_sha256":"a253ded2c86ff0445c7317080bc94c7138dc71ad20bd7bf9452e161aff8efbb1","services_bytes":12308,"services_sha256":"0b7360dc34b9bd3e25073eae449f3c0c5a6609f7eb9f4bb2feca72b6e04fc928","services_structure_sha256":"eff9a7e610218ffdd092d704d2fcfad357db5d3b75ee0cc584c606ae4ee61f82","status":"OK","target_href_counts":{"hbarhub.ru":1,"newfilya.ru":1}},"predecessor_v9_failure_evidence":{"capsule_bytes":90705,"capsule_sha256":"8e3918d06c8dda6e27c54836d71f1bcfed9b51bb5b006ae8525815cd287841e7","changes_made":false,"command_id":"HOMEPAGE-NEWFILYA-PUBLIC-TLS-READ-ONLY-PLAN-V9-20260804T090000Z","command_sha256":"214195c7f7e365f8d2d20e31115a8d17b8fded41ef72c9c8a5d6e1f478d98059","diagnosis":"CONTROL_PLANE_EXCEPTION","failure_type":"TypeError","mutation_outcome":"NO_MUTATION","output_sha256":"8e9abfc55dc183e11da09fa973e9b1cd121b991eab0294aa10471911bf7c6a16","rc":1,"rollback_restored":null,"rollback_started":false,"status":"FAIL"},"public_lock":{"acme_http":{"completed":true,"final_hop":{"body_bytes":124,"body_sha256":"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892","certificate_validation_disabled":true,"completed":true,"header_values_returned":false,"location_present":false,"status":404},"first_hop":{"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"header_values_returned":false,"location_matches_expected_https":true,"location_present":true,"status":301},"header_values_returned":false,"path_sha256":"ed6e9adfc140318caddce708b4f384413cc9e7ac1c1e9dff3a0d7eecdf1edc88","redirect_count":1,"route_model":"HTTP_TO_HTTPS_404","route_proven":true},"addresses_returned":false,"anchor_dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"public_target_count":1,"record_count":1,"resolved":true},"body_returned":false,"certificate_contents_returned":false,"dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"families":["IPv4"],"public_target_count":1,"record_count":1,"rejected_non_public_count":0,"resolved":true},"dns_matches_hbarhub_anchor":true,"http":{"bad_gateway":false,"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"connection_mode":"PINNED_GLOBAL_TARGET","header_values_returned":false,"npmplus_default":false,"redirects_to_expected_https":true,"status":301},"https_unverified":{"bad_gateway":false,"body_bytes":2056,"body_returned":false,"body_sha256":"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879","certificate_validation_disabled":true,"completed":true,"connection_mode":"PINNED_GLOBAL_TARGET_WITH_SNI","leaf_certificate_sha256":null,"npmplus_default":true,"status":200},"tcp_443":{"addresses_returned":false,"attempt_count":1,"error_types":{},"reachable":true,"success_count":1},"tls_443":{"addresses_returned":false,"attempt_count":1,"certificate_contents_returned":false,"unverified":{"certificate_contents_returned":false,"certificate_validation_disabled":true,"completed":true,"error_types":{},"leaf_certificate_count":1,"leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","leaf_set_sha256":"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b","protocols":["TLSv1.3"],"success_count":1},"verified":false,"verified_leaf_certificate_sha256":null,"verified_protocol":null,"verified_success_count":0,"verify_codes":{"18":1}}},"rollback_requirements":["backup selected proxy config before TLS path swap","remove only newly created certbot lineage when apply fails","restore proxy config byte-for-byte and validate nginx before reload","enable Homepage monitoring only after trusted public TLS is verified"],"schema":1},"private_addresses_included":false,"private_keys_read":false,"production_site_changed":false,"public":{"acme_http":{"completed":true,"final_hop":{"body_bytes":124,"body_sha256":"8cdc5c9588e8cc315d89a7c73f1bea4d41f8d68ae165756df0ec4a7db6a49892","certificate_validation_disabled":true,"completed":true,"header_values_returned":false,"location_present":false,"status":404},"first_hop":{"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"header_values_returned":false,"location_matches_expected_https":true,"location_present":true,"status":301},"header_values_returned":false,"path_sha256":"ed6e9adfc140318caddce708b4f384413cc9e7ac1c1e9dff3a0d7eecdf1edc88","redirect_count":1,"route_model":"HTTP_TO_HTTPS_404","route_proven":true},"addresses_returned":false,"anchor_dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"public_target_count":1,"record_count":1,"resolved":true},"body_returned":false,"certificate_contents_returned":false,"dns":{"address_set_sha256":"c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13","addresses_returned":false,"families":["IPv4"],"public_target_count":1,"record_count":1,"rejected_non_public_count":0,"resolved":true},"dns_matches_hbarhub_anchor":true,"http":{"bad_gateway":false,"body_bytes":140,"body_sha256":"367cbd2bd4bb3ccdbff9b81ad94e4c1d9c66ee80e9df3ffcd7080f2000cbac6a","completed":true,"connection_mode":"PINNED_GLOBAL_TARGET","header_values_returned":false,"npmplus_default":false,"redirects_to_expected_https":true,"status":301},"https_unverified":{"bad_gateway":false,"body_bytes":2056,"body_returned":false,"body_sha256":"808dfeea0cf787d85e03645e62ab18b97ab8138924420966413edcfe22ef4879","certificate_validation_disabled":true,"completed":true,"connection_mode":"PINNED_GLOBAL_TARGET_WITH_SNI","leaf_certificate_sha256":null,"npmplus_default":true,"status":200},"tcp_443":{"addresses_returned":false,"attempt_count":1,"error_types":{},"reachable":true,"success_count":1},"tls_443":{"addresses_returned":false,"attempt_count":1,"certificate_contents_returned":false,"unverified":{"certificate_contents_returned":false,"certificate_validation_disabled":true,"completed":true,"error_types":{},"leaf_certificate_count":1,"leaf_certificate_sha256":"c14d6f3eda27dcd7e8c8a44c18844f8009b4f23a74ab82d49475f138ddef0b93","leaf_set_sha256":"620f5c3147455134d92b987f4f0c17c97663931b52966c15d089b43e1e452c1b","protocols":["TLSv1.3"],"success_count":1},"verified":false,"verified_leaf_certificate_sha256":null,"verified_protocol":null,"verified_success_count":0,"verify_codes":{"18":1}}},"public_proxy_changed":false,"rc":1,"read_only":true,"ready_for_apply":false,"rollback_restored":null,"rollback_started":false,"sanitized":true,"schema":1,"secret_files_read":false,"secrets_included":false,"source_contents_returned":false,"status":"FAIL","tls_state":"SELF_SIGNED","transport":{"core":{"config_view":"service-view","mode":"DIRECT_QGA","private_addresses_returned":false,"qga_step_count":6,"qga_step_set_sha256":"a6de7376a5c2b8f65e8c36707819b76c729470e9894c1d635d759048c55e154b","remote_rc":0,"remote_stdout_bytes":2807,"remote_stdout_sha256":"51eca8f40d23e6b44f0836dfa95e6b8ab9d0fe358729f64c053a8515484d2267","socket_view":"service-view","vm_name":"core-apps","vmid":170},"edge":{"config_view":"service-view","mode":"STRICT_SSH_TO_OWNING_NODE_THEN_DIRECT_QGA","node":"pve03","private_addresses_returned":false,"qga_step_count":10,"qga_step_set_sha256":"3ce254f32a54702dfffe8d7506f32d5b7fef3671afd76280c1cb5ccd1e85c96e","remote_rc":1,"remote_stdout_bytes":4825,"remote_stdout_sha256":"a46985e99ba1160268e81e1f6c920fb294d68491f014d29a084ef9674daae8aa","socket_view":"service-view","ssh_rc":0,"vm_name":"edge-vm","vmid":130}}}

OUTPUT_END
CHAT_OUTPUT_END