From 3daea88e32333872259b82833fd25c89e15047bc Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Wed, 23 Sep 2026 13:06:20 +0000 Subject: [PATCH] runtime: publish SUPPORT-260923-SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1 --- ...SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1.json | 38 +++++++++ ...-SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1.txt | 45 ++++++++++ runtime/latest.json | 36 ++++---- runtime/latest.txt | 82 +++++++------------ 4 files changed, 129 insertions(+), 72 deletions(-) create mode 100644 runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1.json create mode 100644 runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1.txt diff --git a/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1.json b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1.json new file mode 100644 index 00000000..dbe6c7f6 --- /dev/null +++ b/runtime/history/SUPPORT-260923-SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-HOST-HEADER-RCA-9199R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "spb-tls-bridge-host-header-rca", + "started_at_utc": "2026-09-23T13:06:17Z", + "finished_at_utc": "2026-09-23T13:06:19Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "5e32e44364865ee6e8387da5cec22a8ef4050b188ee09472dab2cc388660124f", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "161813eae378ff04a02fe2bfa14878f20d810692071a0592011b5b9e1b743644", + "sanitized_output_sha256": "161813eae378ff04a02fe2bfa14878f20d810692071a0592011b5b9e1b743644", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "RCA9199_BEGIN=true\nMUTATION_BOUNDARY=READ_ONLY_HOST_HEADER_RCA;NO_VM130_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD\nVM130_QGA_TRANSPORT_RC=0\nVM130_QGA_STDERR_SHA16=e3b0c44298fc1c14\nVM130_QGA_EXITCODE=0\nVM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14\nRCA9199={\"baseline\":{\"nginx_test_rc\":0,\"stderr_sha16\":\"9cb221b6993277a1\"},\"classification\":\"OK\",\"configs\":{\"git.gram1.ru\":{\"exists\":true,\"filename\":\"9.conf\",\"host_token_counts\":{\"$host\":3,\"$http_host\":0,\"$server_name\":0,\"proxy_pass\":2,\"proxy_set_header_host\":2,\"return\":2,\"rewrite\":0,\"upstream_decl\":1},\"live_probe\":{\"location\":\"\",\"rc\":0,\"status_line\":\"HTTP/2 200 \",\"stderr_sha16\":\"e3b0c44298fc1c14\"},\"relevant_lines\":[{\"line\":7,\"text\":\"upstream upstream_9 {\"},{\"line\":14,\"text\":\" server_name git.gram1.ru;\"},{\"line\":30,\"text\":\" if ($scheme = \\\"http\\\") {\"},{\"line\":31,\"text\":\" return 301 https://$host$is_request_port$request_port$request_uri;\"},{\"line\":34,\"text\":\" return 301 https://$host$is_request_port$request_port$request_uri;\"},{\"line\":38,\"text\":\" location /.well-known/acme-challenge/ {\"},{\"line\":49,\"text\":\" location ^~ /.well-known/homelab-runtime/result/ {\"},{\"line\":56,\"text\":\" proxy_pass http://:18095;\"},{\"line\":57,\"text\":\" proxy_set_header Host lookup.internal;\"},{\"line\":58,\"text\":\" proxy_set_header X-Real-IP $remote_addr;\"},{\"line\":59,\"text\":\" proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\"},{\"line\":60,\"text\":\" proxy_set_header X-Forwarded-Proto https;\"},{\"line\":61,\"text\":\" proxy_set_header Connection \\\"\\\";\"},{\"line\":62,\"text\":\" proxy_set_header Authorization \\\"\\\";\"},{\"line\":63,\"text\":\" proxy_set_header Cookie \\\"\\\";\"},{\"line\":64,\"text\":\" proxy_set_header Accept-Encoding \\\"\\\";\"},{\"line\":76,\"text\":\" location / {\"},{\"line\":84,\"text\":\" proxy_set_header Host $host$is_request_port$request_port;\"},{\"line\":87,\"text\":\" proxy_set_header Accept-Encoding \\\"\\\";\"},{\"line\":90,\"text\":\" proxy_pass ;\"}],\"sha16\":\"de2b17edce2a5fcf\",\"size\":2363},\"hbarhub.ru\":{\"exists\":true,\"filename\":\"999.conf\",\"host_token_counts\":{\"$host\":3,\"$http_host\":0,\"$server_name\":0,\"proxy_pass\":1,\"proxy_set_header_host\":1,\"return\":2,\"rewrite\":0,\"upstream_decl\":1},\"live_probe\":{\"location\":\"\",\"rc\":0,\"status_line\":\"HTTP/2 200 \",\"stderr_sha16\":\"e3b0c44298fc1c14\"},\"relevant_lines\":[{\"line\":7,\"text\":\"upstream upstream_999 {\"},{\"line\":14,\"text\":\" server_name hbarhub.ru;\"},{\"line\":31,\"text\":\" if ($scheme = \\\"http\\\") {\"},{\"line\":32,\"text\":\" return 301 https://$host$is_request_port$request_port$request_uri;\"},{\"line\":35,\"text\":\" return 301 https://$host$is_request_port$request_port$request_uri;\"},{\"line\":39,\"text\":\" location /.well-known/acme-challenge/ {\"},{\"line\":49,\"text\":\" location / {\"},{\"line\":55,\"text\":\" proxy_set_header Host $host$is_request_port$request_port;\"},{\"line\":58,\"text\":\" proxy_set_header Accept-Encoding \\\"\\\";\"},{\"line\":61,\"text\":\" proxy_pass ;\"}],\"sha16\":\"5a619f28b97195ed\",\"size\":1397},\"newfilya.ru\":{\"exists\":true,\"filename\":\"992.conf\",\"host_token_counts\":{\"$host\":0,\"$http_host\":0,\"$server_name\":0,\"proxy_pass\":0,\"proxy_set_header_host\":0,\"return\":2,\"rewrite\":0,\"upstream_decl\":0},\"live_probe\":{\"location\":\"\",\"rc\":0,\"status_line\":\"HTTP/2 200 \",\"stderr_sha16\":\"e3b0c44298fc1c14\"},\"relevant_lines\":[{\"line\":7,\"text\":\" server_name newfilya.ru;\"},{\"line\":10,\"text\":\" location /.well-known/acme-challenge/ {\"},{\"line\":19,\"text\":\" location / {\"},{\"line\":20,\"text\":\" return 301 $request_uri;\"},{\"line\":25,\"text\":\" server_name newfilya.ru;\"},{\"line\":34,\"text\":\" location = /ilyusha.jpg {\"},{\"line\":43,\"text\":\" location / {\"},{\"line\":51,\"text\":\" return 200 '\\u0418\\u043b\\u044e\\u0448\\u0430 \\u2014 \\u0441\\u0430\\u0439\\u0442 \\u0433\\u043e\\u0442\\u043e\\u0432\\u0438\\u0442\\u0441\\u044f \\u043a \\u0437\\u0430\\u043f\\u0443\\u0441\\u043a\\u0443