CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-260923-SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=spb-tls-bridge-host-header-rca
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=5e32e44364865ee6e8387da5cec22a8ef4050b188ee09472dab2cc388660124f
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=161813eae378ff04a02fe2bfa14878f20d810692071a0592011b5b9e1b743644
SANITIZED_OUTPUT_SHA256=161813eae378ff04a02fe2bfa14878f20d810692071a0592011b5b9e1b743644
OUTPUT_BEGIN
RCA9199_BEGIN=true
MUTATION_BOUNDARY=READ_ONLY_HOST_HEADER_RCA;NO_VM130_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD
VM130_QGA_TRANSPORT_RC=0
VM130_QGA_STDERR_SHA16=e3b0c44298fc1c14
VM130_QGA_EXITCODE=0
VM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14
RCA9199={"baseline":{"nginx_test_rc":0,"stderr_sha16":"9cb221b6993277a1"},"classification":"OK","configs":{"git.gram1.ru":{"exists":true,"filename":"9.conf","host_token_counts":{"$host":3,"$http_host":0,"$server_name":0,"proxy_pass":2,"proxy_set_header_host":2,"return":2,"rewrite":0,"upstream_decl":1},"live_probe":{"location":"","rc":0,"status_line":"HTTP/2 200 ","stderr_sha16":"e3b0c44298fc1c14"},"relevant_lines":[{"line":7,"text":"upstream upstream_9 {"},{"line":14,"text":"  server_name git.gram1.ru;"},{"line":30,"text":"  if ($scheme = \"http\") {"},{"line":31,"text":"    return 301 https://$host$is_request_port$request_port$request_uri;"},{"line":34,"text":"    return 301 https://$host$is_request_port$request_port$request_uri;"},{"line":38,"text":"  location /.well-known/acme-challenge/ {"},{"line":49,"text":"  location ^~ /.well-known/homelab-runtime/result/ {"},{"line":56,"text":"      proxy_pass http://<IP_REDACTED>:18095;"},{"line":57,"text":"      proxy_set_header Host lookup.internal;"},{"line":58,"text":"      proxy_set_header X-Real-IP $remote_addr;"},{"line":59,"text":"      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;"},{"line":60,"text":"      proxy_set_header X-Forwarded-Proto https;"},{"line":61,"text":"      proxy_set_header Connection \"\";"},{"line":62,"text":"      proxy_set_header Authorization \"\";"},{"line":63,"text":"      proxy_set_header Cookie \"\";"},{"line":64,"text":"      proxy_set_header Accept-Encoding \"\";"},{"line":76,"text":"  location / {"},{"line":84,"text":"    proxy_set_header Host $host$is_request_port$request_port;"},{"line":87,"text":"    proxy_set_header Accept-Encoding \"\";"},{"line":90,"text":"    proxy_pass <URL:upstream_9>;"}],"sha16":"de2b17edce2a5fcf","size":2363},"hbarhub.ru":{"exists":true,"filename":"999.conf","host_token_counts":{"$host":3,"$http_host":0,"$server_name":0,"proxy_pass":1,"proxy_set_header_host":1,"return":2,"rewrite":0,"upstream_decl":1},"live_probe":{"location":"","rc":0,"status_line":"HTTP/2 200 ","stderr_sha16":"e3b0c44298fc1c14"},"relevant_lines":[{"line":7,"text":"upstream upstream_999 {"},{"line":14,"text":"  server_name hbarhub.ru;"},{"line":31,"text":"  if ($scheme = \"http\") {"},{"line":32,"text":"    return 301 https://$host$is_request_port$request_port$request_uri;"},{"line":35,"text":"    return 301 https://$host$is_request_port$request_port$request_uri;"},{"line":39,"text":"  location /.well-known/acme-challenge/ {"},{"line":49,"text":"  location / {"},{"line":55,"text":"    proxy_set_header Host $host$is_request_port$request_port;"},{"line":58,"text":"    proxy_set_header Accept-Encoding \"\";"},{"line":61,"text":"    proxy_pass <URL:upstream_999>;"}],"sha16":"5a619f28b97195ed","size":1397},"newfilya.ru":{"exists":true,"filename":"992.conf","host_token_counts":{"$host":0,"$http_host":0,"$server_name":0,"proxy_pass":0,"proxy_set_header_host":0,"return":2,"rewrite":0,"upstream_decl":0},"live_probe":{"location":"","rc":0,"status_line":"HTTP/2 200 ","stderr_sha16":"e3b0c44298fc1c14"},"relevant_lines":[{"line":7,"text":"    server_name newfilya.ru;"},{"line":10,"text":"    location /.well-known/acme-challenge/ {"},{"line":19,"text":"    location / {"},{"line":20,"text":"        return 301 <URL:newfilya.ru>$request_uri;"},{"line":25,"text":"    server_name newfilya.ru;"},{"line":34,"text":"    location = /ilyusha.jpg {"},{"line":43,"text":"    location / {"},{"line":51,"text":"        return 200 '<!doctype html><html lang=\"ru\"><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><title>\u0418\u043b\u044e\u0448\u0430 \u2014 \u0441\u0430\u0439\u0442 \u0433\u043e\u0442\u043e\u0432\u0438\u0442\u0441\u044f \u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0443</title><style>*{box-sizing:border-box}html,body{min-height:100%;margin:0}body{display:grid;place-items:center;padding:24px;background:radial-gradient(circle at 18% 14%,#dcefe9 0,transparent 35%),radial-gradient(circle at 84% 86%,#eadfce 0,transparent 38%),#f6f5f1;color:#1e2723;font-family:Inter,system-ui,-apple-system,BlinkMacSystemFont,\"Segoe UI\",sans-serif}.card{display:grid;grid-template-columns:minmax(0,.9fr) minmax(0,1.1fr);gap:clamp(28px,5vw,64px);align-items:center;width:min(960px,100%);padding:clamp(18px,3vw,34px);border:1px solid rgba(30,39,35,.12);border-radius:32px;background:rgba(255,255,255,.82);box-shadow:0 24px 80px rgba(32,45,39,.13);backdrop-filter:blur(16px)}.photo{overflow:hidden;aspect-ratio:3/4;border-radius:23px;background:#17201c}.photo img{display:block;width:100%;height:100%;object-fit:cover;object-position:50% 42%}.copy{padding:clamp(8px,3vw,30px) clamp(8px,3vw,34px) clamp(8px,3vw,30px) 0}.mark{display:inline-grid;place-items:center;width:54px;height:54px;margin-bottom:30px;border-radius:50%;background:#203d33;color:#fff;font-size:24px;font-weight:750;letter-spacing:-.04em}.eyebrow{margin-bottom:16px;color:#64736b;font-size:13px;font-weight:750;letter-spacing:.12em;text-transform:uppercase}h1{max-width:560px;margin:0;font-size:clamp(36px,5.7vw,65px);line-height:1;letter-spacing:-.05em}p{max-width:500px;margin:26px 0 0;color:#59665f;font-size:clamp(17px,2vw,20px);lin"}],"sha16":"d517c69091aa4a6f","size":4777}}}
RCA9199_CLASSIFICATION=OK
TASK_COMPLETE=true
TASK_RESULT=PASS_SPB_TLS_BRIDGE_HOST_HEADER_RCA
DECISION=READ_EXACT_9199_AND_FIX_ONLY_PROVEN_HOST_BEHAVIOR
NEXT_GATE=EXACT_9199_PROXY_HOST_BEHAVIOR
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260923-SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}

OUTPUT_END
CHAT_OUTPUT_END
