homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity

runtime: publish SUPPORT-260922-SPB-HOME-INGRESS-CERT-SAN-RCA-9119R1

Browse Source
This commit is contained in:
homelab-runtime-publisher
2026-09-22 13:28:23 +00:00
parent 1455710457
commit 29a702de08
4 changed files with 91 additions and 113 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runtime/history/SUPPORT-260922-SPB-HOME-INGRESS-CERT-SAN-RCA-9119R1.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "SUPPORT-260922-SPB-HOME-INGRESS-CERT-SAN-RCA-9119R1",
"status": "OK",
"rc": 0,
"host": "pve01",
"mode": "read-only",
"component": "spb-home-ingress-cert-san-rca",
"started_at_utc": "2026-09-22T13:28:19Z",
"finished_at_utc": "2026-09-22T13:28:22Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "d8045ced2dff397b063d566c3cfeca7c305d9349aa60ed07a7945e5b1042c0b0",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": false,
"result_contract_valid": true,
"result_contract_status": null,
"result_contract_error": null,
"command_rc": 0,
"changes_made": false,
"rollback_started": false,
"rollback_restored": null,
"mutation_outcome": "NO_MUTATION",
"sanitized": true,
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "b1d739a5d7a5c86998d7091abecc8a480e6986eacffc3e5c5a2259fc592e51ef",
"sanitized_output_sha256": "ea74e8b95627eb15a745603f2361a7d249767f6999dd253269dc0915b7e480c7",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "SPB9119_RCA={\"guest\":{\"ok\":true,\"data\":{\"hostname\":\"edge-vm\",\"root_blocks\":{\"git.gram1.ru\":[{\"names\":[\"git.gram1.ru\"],\"listen\":[\"unix:/run/nginx.sock\",\"0.0.0.0:80\",\"0.0.0.0:443 ssl\"],\"certs\":[\"/data/tls/certbot/live/npm-29/fullchain.pem\"],\"keys\":[\"d6e74cf29e41a401\"],\"proxy\":[\"http://[PRIVATE_IP]:18095\",\"http://upstream_9\"],\"returns\":[\"301 https://$host$is_request_port$request_port$request_uri\",\"301 https://$host$is_request_port$request_port$request_uri\"],\"includes\":[\"proxy-headers.conf\",\"/data/custom_nginx/server_http.conf\",\"/data/custom_nginx/server_proxy.conf\"]}],\"hbarhub.ru\":[{\"names\":[\"hbarhub.ru\"],\"listen\":[\"unix:/run/nginx.sock\",\"0.0.0.0:80\",\"0.0.0.0:443 ssl\"],\"certs\":[\"/data/tls/certbot/live/hbarhub.ru/fullchain.pem\"],\"keys\":[\"bb408869549c1032\"],\"proxy\":[\"http://upstream_999\"],\"returns\":[\"301 https://$host$is_request_port$request_port$request_uri\",\"301 https://$host$is_request_port$request_port$request_uri\"],\"includes\":[\"proxy-headers.conf\",\"/data/custom_nginx/server_http.conf\",\"/data/custom_nginx/server_proxy.conf\"]}],\"newfilya.ru\":[{\"names\":[\"newfilya.ru\"],\"listen\":[\"0.0.0.0:80\"],\"certs\":[],\"keys\":[],\"proxy\":[],\"returns\":[\"301 https://newfilya.ru$request_uri\"],\"includes\":[]},{\"names\":[\"newfilya.ru\"],\"listen\":[\"unix:/run/nginx.sock\",\"0.0.0.0:443 ssl\"],\"certs\":[\"/data/tls/certbot/live/newfilya.ru/fullchain.pem\"],\"keys\":[\"88811a6e13394274\"],\"proxy\":[],\"returns\":[\"200 '<!doctype html><html lang=\\\"ru\\\"><head><meta charset=\\\"utf-8\\\"><meta name=\\\"viewport\\\" content=\\\"width=device-width,initial-scale=1\\\"><title>Илюша — сайт готовится к запуску</title><style>*{box-sizing:border-box}html,body{min-height:100%\"],\"includes\":[\"/data/custom_nginx/server_http.conf\",\"/data/custom_nginx/server_proxy.conf\"]}]},\"certs\":{\"090b11b4c3515312\":{\"path_hash\":\"090b11b4c3515312\",\"readable\":true,\"sans\":[\"git.gram1.ru\"],\"not_before\":\"Aug 13 22:08:59 2026 GMT\",\"not_after\":\"Nov 11 22:08:58 2026 GMT\",\"serial_hash\":\"00822ac885ca67b0\",\"subject_hash\":\"104cdb8281e9572f\",\"issuer_hash\":\"a482350736c8d93e\"},\"35c013912b5d7ebe\":{\"path_hash\":\"35c013912b5d7ebe\",\"readable\":true,\"sans\":[\"hbarhub.ru\"],\"not_before\":\"Aug 3 12:17:55 2026 GMT\",\"not_after\":\"Nov 1 12:17:54 2026 GMT\",\"serial_hash\":\"4fa919c43891067c\",\"subject_hash\":\"84b916d854aadaaa\",\"issuer_hash\":\"a482350736c8d93e\"},\"717b42ede3ab5942\":{\"path_hash\":\"717b42ede3ab5942\",\"readable\":true,\"sans\":[\"newfilya.ru\"],\"not_before\":\"Aug 4 20:35:43 2026 GMT\",\"not_after\":\"Nov 2 20:35:42 2026 GMT\",\"serial_hash\":\"1f0448f316598086\",\"subject_hash\":\"0b2dbd47a35c1b57\",\"issuer_hash\":\"72d6cf3b240ec714\"}},\"wanted_coverage\":{\"git-read.gram1.ru\":[],\"www.hbarhub.ru\":[],\"www.newfilya.ru\":[]},\"gitread_location_refs\":[{\"path_hash\":\"6d46dff2959962e4\",\"basename\":\"git-read-location.conf\",\"directives\":[\"location ^~ /.well-known/homelab-git-read/ {\",\"if ($host != \\\"git.gram1.ru\\\") { return 404; }\",\"allow all;\",\"limit_except GET HEAD { deny all; }\",\"proxy_pass http://[PRIVATE_IP];\",\"proxy_pass_request_headers off;\",\"proxy_set_header Host git-read.internal;\",\"proxy_set_header X-Forwarded-Proto https;\",\"proxy_set_header Connection \\\"\\\";\",\"add_header X-Robots-Tag \\\"noindex, nofollow, noarchive\\\" always;\",\"add_header Cache-Control \\\"no-store\\\" always;\"]}],\"renewal_meta\":[{\"path_hash\":\"5eaf4f1639a5f5de\",\"basename\":\"hbarhub.ru.conf\",\"lines\":[\"version = 5.7.0\",\"archive_dir = /data/tls/certbot/archive/hbarhub.ru\",\"cert = /data/tls/certbot/live/hbarhub.ru/cert.pem\",\"key_type = ecdsa\",\"authenticator = webroot\",\"server = https://acme-v02.api.letsencrypt.org/directory\"]},{\"path_hash\":\"436d0363a0bddde6\",\"basename\":\"newfilya.ru.conf\",\"lines\":[\"version = 5.7.0\",\"archive_dir = /data/tls/certbot/archive/newfilya.ru\",\"cert = /data/tls/certbot/live/newfilya.ru/cert.pem\",\"key_type = ecdsa\",\"authenticator = webroot\",\"server = https://acme-v02.api.letsencrypt.org/directory\"]}]}}}\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_HOME_INGRESS_CERT_SAN_RCA\nDECISION=READ_EXACT_9119_THEN_CERT_OR_ALIAS_FIX\n"
}
runtime/history/SUPPORT-260922-SPB-HOME-INGRESS-CERT-SAN-RCA-9119R1.txt
+36
View File
@@ -0,0 +1,36 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-260922-SPB-HOME-INGRESS-CERT-SAN-RCA-9119R1
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=spb-home-ingress-cert-san-rca
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=d8045ced2dff397b063d566c3cfeca7c305d9349aa60ed07a7945e5b1042c0b0
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=b1d739a5d7a5c86998d7091abecc8a480e6986eacffc3e5c5a2259fc592e51ef
SANITIZED_OUTPUT_SHA256=ea74e8b95627eb15a745603f2361a7d249767f6999dd253269dc0915b7e480c7
OUTPUT_BEGIN
SPB9119_RCA={"guest":{"ok":true,"data":{"hostname":"edge-vm","root_blocks":{"git.gram1.ru":[{"names":["git.gram1.ru"],"listen":["unix:/run/nginx.sock","0.0.0.0:80","0.0.0.0:443 ssl"],"certs":["/data/tls/certbot/live/npm-29/fullchain.pem"],"keys":["d6e74cf29e41a401"],"proxy":["http://[PRIVATE_IP]:18095","http://upstream_9"],"returns":["301 https://$host$is_request_port$request_port$request_uri","301 https://$host$is_request_port$request_port$request_uri"],"includes":["proxy-headers.conf","/data/custom_nginx/server_http.conf","/data/custom_nginx/server_proxy.conf"]}],"hbarhub.ru":[{"names":["hbarhub.ru"],"listen":["unix:/run/nginx.sock","0.0.0.0:80","0.0.0.0:443 ssl"],"certs":["/data/tls/certbot/live/hbarhub.ru/fullchain.pem"],"keys":["bb408869549c1032"],"proxy":["http://upstream_999"],"returns":["301 https://$host$is_request_port$request_port$request_uri","301 https://$host$is_request_port$request_port$request_uri"],"includes":["proxy-headers.conf","/data/custom_nginx/server_http.conf","/data/custom_nginx/server_proxy.conf"]}],"newfilya.ru":[{"names":["newfilya.ru"],"listen":["0.0.0.0:80"],"certs":[],"keys":[],"proxy":[],"returns":["301 https://newfilya.ru$request_uri"],"includes":[]},{"names":["newfilya.ru"],"listen":["unix:/run/nginx.sock","0.0.0.0:443 ssl"],"certs":["/data/tls/certbot/live/newfilya.ru/fullchain.pem"],"keys":["88811a6e13394274"],"proxy":[],"returns":["200 '<!doctype html><html lang=\"ru\"><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><title>Илюша — сайт готовится к запуску</title><style>*{box-sizing:border-box}html,body{min-height:100%"],"includes":["/data/custom_nginx/server_http.conf","/data/custom_nginx/server_proxy.conf"]}]},"certs":{"090b11b4c3515312":{"path_hash":"090b11b4c3515312","readable":true,"sans":["git.gram1.ru"],"not_before":"Aug 13 22:08:59 2026 GMT","not_after":"Nov 11 22:08:58 2026 GMT","serial_hash":"00822ac885ca67b0","subject_hash":"104cdb8281e9572f","issuer_hash":"a482350736c8d93e"},"35c013912b5d7ebe":{"path_hash":"35c013912b5d7ebe","readable":true,"sans":["hbarhub.ru"],"not_before":"Aug 3 12:17:55 2026 GMT","not_after":"Nov 1 12:17:54 2026 GMT","serial_hash":"4fa919c43891067c","subject_hash":"84b916d854aadaaa","issuer_hash":"a482350736c8d93e"},"717b42ede3ab5942":{"path_hash":"717b42ede3ab5942","readable":true,"sans":["newfilya.ru"],"not_before":"Aug 4 20:35:43 2026 GMT","not_after":"Nov 2 20:35:42 2026 GMT","serial_hash":"1f0448f316598086","subject_hash":"0b2dbd47a35c1b57","issuer_hash":"72d6cf3b240ec714"}},"wanted_coverage":{"git-read.gram1.ru":[],"www.hbarhub.ru":[],"www.newfilya.ru":[]},"gitread_location_refs":[{"path_hash":"6d46dff2959962e4","basename":"git-read-location.conf","directives":["location ^~ /.well-known/homelab-git-read/ {","if ($host != \"git.gram1.ru\") { return 404; }","allow all;","limit_except GET HEAD { deny all; }","proxy_pass http://[PRIVATE_IP];","proxy_pass_request_headers off;","proxy_set_header Host git-read.internal;","proxy_set_header X-Forwarded-Proto https;","proxy_set_header Connection \"\";","add_header X-Robots-Tag \"noindex, nofollow, noarchive\" always;","add_header Cache-Control \"no-store\" always;"]}],"renewal_meta":[{"path_hash":"5eaf4f1639a5f5de","basename":"hbarhub.ru.conf","lines":["version = 5.7.0","archive_dir = /data/tls/certbot/archive/hbarhub.ru","cert = /data/tls/certbot/live/hbarhub.ru/cert.pem","key_type = ecdsa","authenticator = webroot","server = https://acme-v02.api.letsencrypt.org/directory"]},{"path_hash":"436d0363a0bddde6","basename":"newfilya.ru.conf","lines":["version = 5.7.0","archive_dir = /data/tls/certbot/archive/newfilya.ru","cert = /data/tls/certbot/live/newfilya.ru/cert.pem","key_type = ecdsa","authenticator = webroot","server = https://acme-v02.api.letsencrypt.org/directory"]}]}}}
TASK_COMPLETE=true
TASK_RESULT=PASS_SPB_HOME_INGRESS_CERT_SAN_RCA
DECISION=READ_EXACT_9119_THEN_CERT_OR_ALIAS_FIX
OUTPUT_END
CHAT_OUTPUT_END