CHAT_OUTPUT_BEGIN
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=newfi-stagingedge-canonical-template-cert-cloudflare-readonly
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=d533a9324281348c67be4fa81dff3fc812849ac61bb394bf98a48126e543ac6e
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=067929c922038b7ded9ac4d20fe7ece04f10ac1f162bb29e3ec7a4b945e4e8a6
SANITIZED_OUTPUT_SHA256=067929c922038b7ded9ac4d20fe7ece04f10ac1f162bb29e3ec7a4b945e4e8a6
OUTPUT_BEGIN
CERTCF21_BEGIN=true
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21
MODE=read-only
MUTATIONS_PERFORMED=NO
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
REFERENCE_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
RUNNER_SHA_MATCH=true
TRUSTED_EDGEVM_MARKER=true
PUBLIC_VPS_REJECT_MARKER=true
CANONICAL_LIVE_USERS=debian
POST_REBOOT_USER_CONFIRM=true
CANONICAL_USER_PROOF=true
NETBIRD_STATUS_JSON_RC=0
NETBIRD_STATUS_DETAIL_RC=0
EDGEVM_OVERLAY_IP_COUNT=1
EDGEVM_KNOWN_HOST_RC=0
EDGEVM_KEYSCAN_RC=0
EDGEVM_HOSTKEY_MATCH=true
EDGEVM_HOSTKEY_ALGS=ssh-ed25519
EDGEVM_SUDO_RC=0
OUTER_CERTCF_GATE=true
REMOTE_CERTCF_RC=0
REMOTE_CERTCF_JSON={"euid":0,"mutations_performed":"NO","npmplus_row_count":1,"npmplus_healthy":true,"npmplus_image":"zoeyvid/npmplus:2026-06-17-b1","npmplus_status":"Up 11 days (healthy)","data_mount_count":1,"container_nginx_path":"/usr/local/nginx/sbin/nginx","nginx_test_rc":0,"production_template_count":1,"production_template_files":["998.conf"],"staging_route_hit_count":0,"production_template_file":"998.conf","production_template_sha256":"dd443098bf4452f629597e9dd5cf26f844b2a6a64e6882ee401bb6925a6281b0","production_host_occurrence_count":4,"production_host_occurrences":[{"line":6,"text":"server_name newfi.ru www.newfi.ru;"},{"line":14,"text":"server_name newfi.ru www.newfi.ru;"},{"line":16,"text":"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;"},{"line":17,"text":"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;"}],"template_directives":[{"line":4,"kind":"listen","text":"listen 0.0.0.0:80;"},{"line":5,"kind":"listen","text":"listen [::]:80;"},{"line":6,"kind":"server_name","text":"server_name newfi.ru www.newfi.ru;"},{"line":12,"kind":"listen","text":"listen 0.0.0.0:443 ssl;"},{"line":13,"kind":"listen","text":"listen [::]:443 ssl;"},{"line":14,"kind":"server_name","text":"server_name newfi.ru www.newfi.ru;"},{"line":16,"kind":"ssl_certificate","text":"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;"},{"line":17,"kind":"ssl_certificate_key","text":"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;"},{"line":31,"kind":"proxy_pass","text":"proxy_pass http://[PRIVATE_IP]:80;"}],"template_directives_truncated":false,"cert_path_map_ok":true,"cert_file_exists":true,"key_file_exists":true,"renewal_file_exists":true,"cert_san_exact":true,"cert_san_count":1,"cert_expiry_days":89,"cert_key_match":true,"renew_auth_dns_cloudflare":true,"renew_credential_ref_present":true,"renew_credential_inside_sha256":"2ebc6b02844919c1222d982b801daae09444649043b00a4475774a2a859f8dfd","credential_auth_type":"credential_file_missing","credential_file_safety_ok":false,"credential_auth_supported":false,"cf_zone_lookup_success":false,"cf_zone_count":0,"cf_staging_query_success":false,"cf_staging_record_count":-1,"cf_reference_candidate_count":0,"cf_reference_candidates":[],"CERT_CRYPTO_OK":true,"RENEWAL_DNS_CLOUDFLARE_OK":true,"CREDENTIAL_FILE_SAFETY_OK":false,"CREDENTIAL_AUTH_SUPPORTED":false,"CLOUDFLARE_GET_ONLY_OK":false,"decision":"HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK"}
REMOTE_CERTCF_DECISION=HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK
PRODUCTION_PUBLIC_CURL_RC=0
PRODUCTION_PUBLIC_HTTP=200
CERTCF21_DECISION=HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK
CERTCF21_END=true

OUTPUT_END
CHAT_OUTPUT_END
