CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-260922-SPB-HOME-INGRESS-CERT-SAN-RCA-9119R1
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=spb-home-ingress-cert-san-rca
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=d8045ced2dff397b063d566c3cfeca7c305d9349aa60ed07a7945e5b1042c0b0
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=b1d739a5d7a5c86998d7091abecc8a480e6986eacffc3e5c5a2259fc592e51ef
SANITIZED_OUTPUT_SHA256=ea74e8b95627eb15a745603f2361a7d249767f6999dd253269dc0915b7e480c7
OUTPUT_BEGIN
SPB9119_RCA={"guest":{"ok":true,"data":{"hostname":"edge-vm","root_blocks":{"git.gram1.ru":[{"names":["git.gram1.ru"],"listen":["unix:/run/nginx.sock","0.0.0.0:80","0.0.0.0:443 ssl"],"certs":["/data/tls/certbot/live/npm-29/fullchain.pem"],"keys":["d6e74cf29e41a401"],"proxy":["http://[PRIVATE_IP]:18095","http://upstream_9"],"returns":["301 https://$host$is_request_port$request_port$request_uri","301 https://$host$is_request_port$request_port$request_uri"],"includes":["proxy-headers.conf","/data/custom_nginx/server_http.conf","/data/custom_nginx/server_proxy.conf"]}],"hbarhub.ru":[{"names":["hbarhub.ru"],"listen":["unix:/run/nginx.sock","0.0.0.0:80","0.0.0.0:443 ssl"],"certs":["/data/tls/certbot/live/hbarhub.ru/fullchain.pem"],"keys":["bb408869549c1032"],"proxy":["http://upstream_999"],"returns":["301 https://$host$is_request_port$request_port$request_uri","301 https://$host$is_request_port$request_port$request_uri"],"includes":["proxy-headers.conf","/data/custom_nginx/server_http.conf","/data/custom_nginx/server_proxy.conf"]}],"newfilya.ru":[{"names":["newfilya.ru"],"listen":["0.0.0.0:80"],"certs":[],"keys":[],"proxy":[],"returns":["301 https://newfilya.ru$request_uri"],"includes":[]},{"names":["newfilya.ru"],"listen":["unix:/run/nginx.sock","0.0.0.0:443 ssl"],"certs":["/data/tls/certbot/live/newfilya.ru/fullchain.pem"],"keys":["88811a6e13394274"],"proxy":[],"returns":["200 '<!doctype html><html lang=\"ru\"><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><title>ÐÐ»ÑÑÐ° â ÑÐ°Ð¹Ñ Ð³Ð¾ÑÐ¾Ð²Ð¸ÑÑÑ Ðº Ð·Ð°Ð¿ÑÑÐºÑ</title><style>*{box-sizing:border-box}html,body{min-height:100%"],"includes":["/data/custom_nginx/server_http.conf","/data/custom_nginx/server_proxy.conf"]}]},"certs":{"090b11b4c3515312":{"path_hash":"090b11b4c3515312","readable":true,"sans":["git.gram1.ru"],"not_before":"Aug 13 22:08:59 2026 GMT","not_after":"Nov 11 22:08:58 2026 GMT","serial_hash":"00822ac885ca67b0","subject_hash":"104cdb8281e9572f","issuer_hash":"a482350736c8d93e"},"35c013912b5d7ebe":{"path_hash":"35c013912b5d7ebe","readable":true,"sans":["hbarhub.ru"],"not_before":"Aug  3 12:17:55 2026 GMT","not_after":"Nov  1 12:17:54 2026 GMT","serial_hash":"4fa919c43891067c","subject_hash":"84b916d854aadaaa","issuer_hash":"a482350736c8d93e"},"717b42ede3ab5942":{"path_hash":"717b42ede3ab5942","readable":true,"sans":["newfilya.ru"],"not_before":"Aug  4 20:35:43 2026 GMT","not_after":"Nov  2 20:35:42 2026 GMT","serial_hash":"1f0448f316598086","subject_hash":"0b2dbd47a35c1b57","issuer_hash":"72d6cf3b240ec714"}},"wanted_coverage":{"git-read.gram1.ru":[],"www.hbarhub.ru":[],"www.newfilya.ru":[]},"gitread_location_refs":[{"path_hash":"6d46dff2959962e4","basename":"git-read-location.conf","directives":["location ^~ /.well-known/homelab-git-read/ {","if ($host != \"git.gram1.ru\") { return 404; }","allow all;","limit_except GET HEAD { deny all; }","proxy_pass http://[PRIVATE_IP];","proxy_pass_request_headers off;","proxy_set_header Host git-read.internal;","proxy_set_header X-Forwarded-Proto https;","proxy_set_header Connection \"\";","add_header X-Robots-Tag \"noindex, nofollow, noarchive\" always;","add_header Cache-Control \"no-store\" always;"]}],"renewal_meta":[{"path_hash":"5eaf4f1639a5f5de","basename":"hbarhub.ru.conf","lines":["version = 5.7.0","archive_dir = /data/tls/certbot/archive/hbarhub.ru","cert = /data/tls/certbot/live/hbarhub.ru/cert.pem","key_type = ecdsa","authenticator = webroot","server = https://acme-v02.api.letsencrypt.org/directory"]},{"path_hash":"436d0363a0bddde6","basename":"newfilya.ru.conf","lines":["version = 5.7.0","archive_dir = /data/tls/certbot/archive/newfilya.ru","cert = /data/tls/certbot/live/newfilya.ru/cert.pem","key_type = ecdsa","authenticator = webroot","server = https://acme-v02.api.letsencrypt.org/directory"]}]}}}
TASK_COMPLETE=true
TASK_RESULT=PASS_SPB_HOME_INGRESS_CERT_SAN_RCA
DECISION=READ_EXACT_9119_THEN_CERT_OR_ALIAS_FIX

OUTPUT_END
CHAT_OUTPUT_END
