diff --git a/runtime/history/SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1.json b/runtime/history/SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1.json new file mode 100644 index 00000000..febde5b8 --- /dev/null +++ b/runtime/history/SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "netbird-spb-nginx-privilege-rca-readonly", + "started_at_utc": "2026-09-19T11:31:59Z", + "finished_at_utc": "2026-09-19T11:32:00Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "e4fd4f756c05a2e92a2c45e80037ebe4e3fffaff14ab48be5f0224c292fb922b", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "47da9b8d1ed4d010f997cd8d91d865615e5bac48ccd42a9b76481e7c7a4169ec", + "sanitized_output_sha256": "47da9b8d1ed4d010f997cd8d91d865615e5bac48ccd42a9b76481e7c7a4169ec", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nKEY_PRESENT=True\nKH_PRESENT=True\nEDGEADMIN_RC=0\nEDGEADMIN_BEGIN\nPITER_HOST=edge01\nPITER_ID=uid=1000(edgeadmin) gid=1000(edgeadmin) groups=1000(edgeadmin),27(sudo),100(users)\nPITER_GROUPS=edgeadmin sudo users\nSUDO_N_L_RC=1\nSUDO_N_L_OUT=\nSUDO_N_L_ERR=sudo: interactive authentication is required \nSUDO_N_ID_RC=1\nSUDO_N_ID_OUT=\nSUDO_N_ID_ERR=sudo: interactive authentication is required \nDOAS_N_ID_RC=999\nDOAS_N_ID_OUT=\nDOAS_N_ID_ERR=FileNotFoundError\nNGINX_SYSTEMD_RC=0\nNGINX_SYSTEMD=FragmentPath=/usr/lib/systemd/system/nginx.service\nNGINX_SYSTEMD=MainPID=373515\nNGINX_SYSTEMD=ExecStart={ path=/usr/sbin/nginx ; argv[]=/usr/sbin/nginx -g daemon on; master_process on; ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }\nNGINX_SYSTEMD=User=\nNGINX_SYSTEMD=Group=\nNGINX_EXE=/proc/373515/exe\nNGINX_CMDLINE=nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\nPATH=/etc/nginx|EXISTS=True|READ=True|WRITE=False|EXEC=True\nPATH_META=/etc/nginx|MODE=0o755|UID=0|GID=0|SYMLINK=False\nPATH=/etc/nginx/nginx.conf|EXISTS=True|READ=True|WRITE=False|EXEC=False\nPATH_META=/etc/nginx/nginx.conf|MODE=0o644|UID=0|GID=0|SYMLINK=False\nPATH=/etc/nginx/conf.d|EXISTS=True|READ=True|WRITE=False|EXEC=True\nPATH_META=/etc/nginx/conf.d|MODE=0o755|UID=0|GID=0|SYMLINK=False\nPATH=/etc/nginx/sites-enabled|EXISTS=True|READ=True|WRITE=False|EXEC=True\nPATH_META=/etc/nginx/sites-enabled|MODE=0o755|UID=0|GID=0|SYMLINK=False\nPATH=/etc/nginx/sites-available|EXISTS=True|READ=True|WRITE=False|EXEC=True\nPATH_META=/etc/nginx/sites-available|MODE=0o755|UID=0|GID=0|SYMLINK=False\nPATH=/etc/nginx/stream.d|EXISTS=False|READ=False|WRITE=False|EXEC=False\nPATH=/etc/nginx/modules-enabled|EXISTS=True|READ=True|WRITE=False|EXEC=True\nPATH_META=/etc/nginx/modules-enabled|MODE=0o755|UID=0|GID=0|SYMLINK=False\nPATH=/etc/letsencrypt/live|EXISTS=True|READ=False|WRITE=False|EXEC=False\nPATH_META=/etc/letsencrypt/live|MODE=0o700|UID=0|GID=0|SYMLINK=False\nREADABLE_NGINX_CONFIG_COUNT=38\nNGINX_CONFIG=/etc/nginx/conf.d/00-edge-common.conf|WRITE=False\nNGINX_CONFIG=/etc/nginx/conf.d/00-git-read-v3-log-format.conf|WRITE=False\nNGINX_CONFIG=/etc/nginx/fastcgi.conf|WRITE=False\nNGINX_CONFIG=/etc/nginx/nginx.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/modules-enabled/*.conf;\nNGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/mime.types;\nNGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/conf.d/*.conf;\nNGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/sites-enabled/*;\nNGINX_CONFIG=/etc/nginx/sites-available/chat.gram1.ru.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|server_name\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|proxy_pass https://home_npmplus_tls;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|server_name\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/codevipe-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|server_name codevipe.ru www.codevipe.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/codevipe-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|server_name codevipe.ru www.codevipe.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|ssl_certificate /etc/letsencrypt/live/codevipe.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/dsmods.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|server_name dsmods.ru www.dsmods.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/dsmods.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|server_name dsmods.ru www.dsmods.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|ssl_certificate /etc/letsencrypt/live/dsmods.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/gamevipe.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|server_name gamevipe.ru www.gamevipe.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/gamevipe.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|server_name gamevipe.ru www.gamevipe.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|ssl_certificate /etc/letsencrypt/live/gamevipe.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/git-edge-test.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|listen [IP];\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|server_name git.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/git.gram1.ru.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|server_name git.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|server_name git.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|ssl_certificate /etc/letsencrypt/live/git-edge-bootstrap/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/git-read-edge-test.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|listen [IP];\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|server_name git-read.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|proxy_pass_request_headers off;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|proxy_pass https://home_npmplus_tls/.well-known/homelab-git-read/v1/;\nNGINX_CONFIG=/etc/nginx/sites-available/git-read.gram1.ru.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|server_name git-read.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|include /etc/nginx/snippets/git-read-server-observer-v3.conf;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|server_name git-read.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|include /etc/nginx/snippets/git-read-server-observer-v3.conf;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|ssl_certificate /etc/letsencrypt/live/git-edge-bootstrap/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|proxy_pass_request_headers off;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|proxy_pass https://home_npmplus_tls/.well-known/homelab-git-read/v1/;\nNGINX_CONFIG=/etc/nginx/sites-available/gram1.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|server_name gram1.ru www.gram1.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/gram1.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|server_name gram1.ru www.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|ssl_certificate /etc/letsencrypt/live/gram1.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/hapusya.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|server_name hapusya.ru www.hapusya.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/hapusya.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|server_name hapusya.ru www.hapusya.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hapusya.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/hbarhub.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|server_name hbarhub.ru www.hbarhub.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/hbarhub.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|server_name hbarhub.ru www.hbarhub.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hbarhub.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/hkmods.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|server_name hkmods.ru www.hkmods.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/hkmods.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|server_name hkmods.ru www.hkmods.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hkmods.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/kingofwolk.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|server_name kingofwolk.ru www.kingofwolk.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/kingofwolk.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|server_name kingofwolk.ru www.kingofwolk.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|ssl_certificate /etc/letsencrypt/live/kingofwolk.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/newfilya.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|server_name newfilya.ru www.newfilya.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/newfilya.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|server_name newfilya.ru www.newfilya.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|ssl_certificate /etc/letsencrypt/live/newfilya.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/newfi.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|server_name newfi.ru www.newfi.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/newfi.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|server_name newfi.ru www.newfi.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|ssl_certificate /etc/letsencrypt/live/newfi.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/pvepro.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|server_name pvepro.ru www.pvepro.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/pvepro.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|server_name pvepro.ru www.pvepro.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|ssl_certificate /etc/letsencrypt/live/pvepro.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/taftauto.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|server_name taftauto.ru www.taftauto.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/taftauto.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|server_name taftauto.ru www.taftauto.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|ssl_certificate /etc/letsencrypt/live/taftauto.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/zakrutim.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|server_name zakrutim.ru www.zakrutim.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/zakrutim.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|server_name zakrutim.ru www.zakrutim.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|ssl_certificate /etc/letsencrypt/live/zakrutim.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/snippets/fastcgi-php.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/snippets/fastcgi-php.conf|include fastcgi.conf;\nNGINX_CONFIG=/etc/nginx/snippets/git-read-server-observer-v3.conf|WRITE=False\nNGINX_CONFIG=/etc/nginx/snippets/snakeoil.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/snippets/snakeoil.conf|ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;\nNGINX_SYMLINK=/etc/nginx/sites-enabled/chat.gram1.ru.conf -> /etc/nginx/sites-available/chat.gram1.ru.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/codevipe-http.conf -> /etc/nginx/sites-available/codevipe-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/codevipe-https.conf -> /etc/nginx/sites-available/codevipe-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/dsmods.ru-http.conf -> /etc/nginx/sites-available/dsmods.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/dsmods.ru-https.conf -> /etc/nginx/sites-available/dsmods.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/gamevipe.ru-http.conf -> /etc/nginx/sites-available/gamevipe.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/gamevipe.ru-https.conf -> /etc/nginx/sites-available/gamevipe.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/git.gram1.ru.conf -> /etc/nginx/sites-available/git.gram1.ru.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/git-read.gram1.ru.conf -> /etc/nginx/sites-available/git-read.gram1.ru.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/gram1.ru-http.conf -> /etc/nginx/sites-available/gram1.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/gram1.ru-https.conf -> /etc/nginx/sites-available/gram1.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hapusya.ru-http.conf -> /etc/nginx/sites-available/hapusya.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hapusya.ru-https.conf -> /etc/nginx/sites-available/hapusya.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hbarhub.ru-http.conf -> /etc/nginx/sites-available/hbarhub.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hbarhub.ru-https.conf -> /etc/nginx/sites-available/hbarhub.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hkmods.ru-http.conf -> /etc/nginx/sites-available/hkmods.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hkmods.ru-https.conf -> /etc/nginx/sites-available/hkmods.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/kingofwolk.ru-http.conf -> /etc/nginx/sites-available/kingofwolk.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/kingofwolk.ru-https.conf -> /etc/nginx/sites-available/kingofwolk.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/newfilya.ru-http.conf -> /etc/nginx/sites-available/newfilya.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/newfilya.ru-https.conf -> /etc/nginx/sites-available/newfilya.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/newfi.ru-http.conf -> /etc/nginx/sites-available/newfi.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/newfi.ru-https.conf -> /etc/nginx/sites-available/newfi.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/pvepro.ru-http.conf -> /etc/nginx/sites-available/pvepro.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/pvepro.ru-https.conf -> /etc/nginx/sites-available/pvepro.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/taftauto.ru-http.conf -> /etc/nginx/sites-available/taftauto.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/taftauto.ru-https.conf -> /etc/nginx/sites-available/taftauto.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/zakrutim.ru-http.conf -> /etc/nginx/sites-available/zakrutim.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/zakrutim.ru-https.conf -> /etc/nginx/sites-available/zakrutim.ru-https.conf\nNGINX_GETCAP=\nDOCKER_RC=999\nPODMAN_RC=999\nPITER605_END\n\nEDGEADMIN_END\nROOT_SSH_RC=255\nROOT_SSH_ERR=root@185.225.35.6: Permission denied (publickey). \nTASK_COMPLETE=true\nTASK_RESULT=SPB_PRIVILEGE_CONFIG_EVIDENCE_COLLECTED\nNO_CONNECTION_FIX_APPLIED=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1.txt b/runtime/history/SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1.txt new file mode 100644 index 00000000..5a708e17 --- /dev/null +++ b/runtime/history/SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1.txt @@ -0,0 +1,297 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=netbird-spb-nginx-privilege-rca-readonly +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=e4fd4f756c05a2e92a2c45e80037ebe4e3fffaff14ab48be5f0224c292fb922b +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=47da9b8d1ed4d010f997cd8d91d865615e5bac48ccd42a9b76481e7c7a4169ec +SANITIZED_OUTPUT_SHA256=47da9b8d1ed4d010f997cd8d91d865615e5bac48ccd42a9b76481e7c7a4169ec +OUTPUT_BEGIN +ERROR_REGISTER_CHECK=OK +REFERENCE_CHECK=OK +KEY_PRESENT=True +KH_PRESENT=True +EDGEADMIN_RC=0 +EDGEADMIN_BEGIN +PITER_HOST=edge01 +PITER_ID=uid=1000(edgeadmin) gid=1000(edgeadmin) groups=1000(edgeadmin),27(sudo),100(users) +PITER_GROUPS=edgeadmin sudo users +SUDO_N_L_RC=1 +SUDO_N_L_OUT= +SUDO_N_L_ERR=sudo: interactive authentication is required +SUDO_N_ID_RC=1 +SUDO_N_ID_OUT= +SUDO_N_ID_ERR=sudo: interactive authentication is required +DOAS_N_ID_RC=999 +DOAS_N_ID_OUT= +DOAS_N_ID_ERR=FileNotFoundError +NGINX_SYSTEMD_RC=0 +NGINX_SYSTEMD=FragmentPath=/usr/lib/systemd/system/nginx.service +NGINX_SYSTEMD=MainPID=373515 +NGINX_SYSTEMD=ExecStart={ path=/usr/sbin/nginx ; argv[]=/usr/sbin/nginx -g daemon on; master_process on; ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 } +NGINX_SYSTEMD=User= +NGINX_SYSTEMD=Group= +NGINX_EXE=/proc/373515/exe +NGINX_CMDLINE=nginx: master process /usr/sbin/nginx -g daemon on; master_process on; +PATH=/etc/nginx|EXISTS=True|READ=True|WRITE=False|EXEC=True +PATH_META=/etc/nginx|MODE=0o755|UID=0|GID=0|SYMLINK=False +PATH=/etc/nginx/nginx.conf|EXISTS=True|READ=True|WRITE=False|EXEC=False +PATH_META=/etc/nginx/nginx.conf|MODE=0o644|UID=0|GID=0|SYMLINK=False +PATH=/etc/nginx/conf.d|EXISTS=True|READ=True|WRITE=False|EXEC=True +PATH_META=/etc/nginx/conf.d|MODE=0o755|UID=0|GID=0|SYMLINK=False +PATH=/etc/nginx/sites-enabled|EXISTS=True|READ=True|WRITE=False|EXEC=True +PATH_META=/etc/nginx/sites-enabled|MODE=0o755|UID=0|GID=0|SYMLINK=False +PATH=/etc/nginx/sites-available|EXISTS=True|READ=True|WRITE=False|EXEC=True +PATH_META=/etc/nginx/sites-available|MODE=0o755|UID=0|GID=0|SYMLINK=False +PATH=/etc/nginx/stream.d|EXISTS=False|READ=False|WRITE=False|EXEC=False +PATH=/etc/nginx/modules-enabled|EXISTS=True|READ=True|WRITE=False|EXEC=True +PATH_META=/etc/nginx/modules-enabled|MODE=0o755|UID=0|GID=0|SYMLINK=False +PATH=/etc/letsencrypt/live|EXISTS=True|READ=False|WRITE=False|EXEC=False +PATH_META=/etc/letsencrypt/live|MODE=0o700|UID=0|GID=0|SYMLINK=False +READABLE_NGINX_CONFIG_COUNT=38 +NGINX_CONFIG=/etc/nginx/conf.d/00-edge-common.conf|WRITE=False +NGINX_CONFIG=/etc/nginx/conf.d/00-git-read-v3-log-format.conf|WRITE=False +NGINX_CONFIG=/etc/nginx/fastcgi.conf|WRITE=False +NGINX_CONFIG=/etc/nginx/nginx.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/modules-enabled/*.conf; +NGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/mime.types; +NGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/conf.d/*.conf; +NGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/sites-enabled/*; +NGINX_CONFIG=/etc/nginx/sites-available/chat.gram1.ru.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|server_name +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|proxy_pass https://home_npmplus_tls; +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|server_name +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/codevipe-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|server_name codevipe.ru www.codevipe.ru; +NGINX_CONFIG=/etc/nginx/sites-available/codevipe-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|server_name codevipe.ru www.codevipe.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|ssl_certificate /etc/letsencrypt/live/codevipe.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/dsmods.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|server_name dsmods.ru www.dsmods.ru; +NGINX_CONFIG=/etc/nginx/sites-available/dsmods.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|server_name dsmods.ru www.dsmods.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|ssl_certificate /etc/letsencrypt/live/dsmods.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/gamevipe.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|server_name gamevipe.ru www.gamevipe.ru; +NGINX_CONFIG=/etc/nginx/sites-available/gamevipe.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|server_name gamevipe.ru www.gamevipe.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|ssl_certificate /etc/letsencrypt/live/gamevipe.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/git-edge-test.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|listen [IP]; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|server_name git.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/git.gram1.ru.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|server_name git.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|server_name git.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|ssl_certificate /etc/letsencrypt/live/git-edge-bootstrap/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/git-read-edge-test.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|listen [IP]; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|server_name git-read.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|proxy_pass_request_headers off; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|proxy_pass https://home_npmplus_tls/.well-known/homelab-git-read/v1/; +NGINX_CONFIG=/etc/nginx/sites-available/git-read.gram1.ru.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|server_name git-read.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|include /etc/nginx/snippets/git-read-server-observer-v3.conf; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|server_name git-read.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|include /etc/nginx/snippets/git-read-server-observer-v3.conf; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|ssl_certificate /etc/letsencrypt/live/git-edge-bootstrap/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|proxy_pass_request_headers off; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|proxy_pass https://home_npmplus_tls/.well-known/homelab-git-read/v1/; +NGINX_CONFIG=/etc/nginx/sites-available/gram1.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|server_name gram1.ru www.gram1.ru; +NGINX_CONFIG=/etc/nginx/sites-available/gram1.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|server_name gram1.ru www.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|ssl_certificate /etc/letsencrypt/live/gram1.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/hapusya.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|server_name hapusya.ru www.hapusya.ru; +NGINX_CONFIG=/etc/nginx/sites-available/hapusya.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|server_name hapusya.ru www.hapusya.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hapusya.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/hbarhub.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|server_name hbarhub.ru www.hbarhub.ru; +NGINX_CONFIG=/etc/nginx/sites-available/hbarhub.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|server_name hbarhub.ru www.hbarhub.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hbarhub.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/hkmods.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|server_name hkmods.ru www.hkmods.ru; +NGINX_CONFIG=/etc/nginx/sites-available/hkmods.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|server_name hkmods.ru www.hkmods.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hkmods.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/kingofwolk.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|server_name kingofwolk.ru www.kingofwolk.ru; +NGINX_CONFIG=/etc/nginx/sites-available/kingofwolk.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|server_name kingofwolk.ru www.kingofwolk.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|ssl_certificate /etc/letsencrypt/live/kingofwolk.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/newfilya.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|server_name newfilya.ru www.newfilya.ru; +NGINX_CONFIG=/etc/nginx/sites-available/newfilya.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|server_name newfilya.ru www.newfilya.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|ssl_certificate /etc/letsencrypt/live/newfilya.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/newfi.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|server_name newfi.ru www.newfi.ru; +NGINX_CONFIG=/etc/nginx/sites-available/newfi.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|server_name newfi.ru www.newfi.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|ssl_certificate /etc/letsencrypt/live/newfi.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/pvepro.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|server_name pvepro.ru www.pvepro.ru; +NGINX_CONFIG=/etc/nginx/sites-available/pvepro.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|server_name pvepro.ru www.pvepro.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|ssl_certificate /etc/letsencrypt/live/pvepro.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/taftauto.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|server_name taftauto.ru www.taftauto.ru; +NGINX_CONFIG=/etc/nginx/sites-available/taftauto.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|server_name taftauto.ru www.taftauto.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|ssl_certificate /etc/letsencrypt/live/taftauto.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/zakrutim.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|server_name zakrutim.ru www.zakrutim.ru; +NGINX_CONFIG=/etc/nginx/sites-available/zakrutim.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|server_name zakrutim.ru www.zakrutim.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|ssl_certificate /etc/letsencrypt/live/zakrutim.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/snippets/fastcgi-php.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/snippets/fastcgi-php.conf|include fastcgi.conf; +NGINX_CONFIG=/etc/nginx/snippets/git-read-server-observer-v3.conf|WRITE=False +NGINX_CONFIG=/etc/nginx/snippets/snakeoil.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/snippets/snakeoil.conf|ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem; +NGINX_SYMLINK=/etc/nginx/sites-enabled/chat.gram1.ru.conf -> /etc/nginx/sites-available/chat.gram1.ru.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/codevipe-http.conf -> /etc/nginx/sites-available/codevipe-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/codevipe-https.conf -> /etc/nginx/sites-available/codevipe-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/dsmods.ru-http.conf -> /etc/nginx/sites-available/dsmods.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/dsmods.ru-https.conf -> /etc/nginx/sites-available/dsmods.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/gamevipe.ru-http.conf -> /etc/nginx/sites-available/gamevipe.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/gamevipe.ru-https.conf -> /etc/nginx/sites-available/gamevipe.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/git.gram1.ru.conf -> /etc/nginx/sites-available/git.gram1.ru.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/git-read.gram1.ru.conf -> /etc/nginx/sites-available/git-read.gram1.ru.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/gram1.ru-http.conf -> /etc/nginx/sites-available/gram1.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/gram1.ru-https.conf -> /etc/nginx/sites-available/gram1.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hapusya.ru-http.conf -> /etc/nginx/sites-available/hapusya.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hapusya.ru-https.conf -> /etc/nginx/sites-available/hapusya.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hbarhub.ru-http.conf -> /etc/nginx/sites-available/hbarhub.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hbarhub.ru-https.conf -> /etc/nginx/sites-available/hbarhub.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hkmods.ru-http.conf -> /etc/nginx/sites-available/hkmods.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hkmods.ru-https.conf -> /etc/nginx/sites-available/hkmods.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/kingofwolk.ru-http.conf -> /etc/nginx/sites-available/kingofwolk.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/kingofwolk.ru-https.conf -> /etc/nginx/sites-available/kingofwolk.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/newfilya.ru-http.conf -> /etc/nginx/sites-available/newfilya.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/newfilya.ru-https.conf -> /etc/nginx/sites-available/newfilya.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/newfi.ru-http.conf -> /etc/nginx/sites-available/newfi.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/newfi.ru-https.conf -> /etc/nginx/sites-available/newfi.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/pvepro.ru-http.conf -> /etc/nginx/sites-available/pvepro.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/pvepro.ru-https.conf -> /etc/nginx/sites-available/pvepro.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/taftauto.ru-http.conf -> /etc/nginx/sites-available/taftauto.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/taftauto.ru-https.conf -> /etc/nginx/sites-available/taftauto.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/zakrutim.ru-http.conf -> /etc/nginx/sites-available/zakrutim.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/zakrutim.ru-https.conf -> /etc/nginx/sites-available/zakrutim.ru-https.conf +NGINX_GETCAP= +DOCKER_RC=999 +PODMAN_RC=999 +PITER605_END + +EDGEADMIN_END +ROOT_SSH_RC=255 +ROOT_SSH_ERR=root@185.225.35.6: Permission denied (publickey). +TASK_COMPLETE=true +TASK_RESULT=SPB_PRIVILEGE_CONFIG_EVIDENCE_COLLECTED +NO_CONNECTION_FIX_APPLIED=true +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 03f4ee1f..febde5b8 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260919-NETBIRD-SPB-INGRESS-CANDIDATE-AUDIT-READONLY-604R1", + "command_id": "SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1", "status": "OK", "rc": 0, "host": "pve01", "mode": "read-only", - "component": "netbird-spb-ingress-candidate-audit-readonly", - "started_at_utc": "2026-09-19T11:25:51Z", - "finished_at_utc": "2026-09-19T11:25:57Z", + "component": "netbird-spb-nginx-privilege-rca-readonly", + "started_at_utc": "2026-09-19T11:31:59Z", + "finished_at_utc": "2026-09-19T11:32:00Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "cbc77ef188f6571f4c6a4e1020a8b3faaaaf1d6e45356f87d4f18486303467c7", + "command_sha256": "e4fd4f756c05a2e92a2c45e80037ebe4e3fffaff14ab48be5f0224c292fb922b", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "20d1f4206930fccb2bd16ff041419eecef1606eafcc0861c2a768df908a30f4d", - "sanitized_output_sha256": "20d1f4206930fccb2bd16ff041419eecef1606eafcc0861c2a768df908a30f4d", + "raw_evidence_sha256": "47da9b8d1ed4d010f997cd8d91d865615e5bac48ccd42a9b76481e7c7a4169ec", + "sanitized_output_sha256": "47da9b8d1ed4d010f997cd8d91d865615e5bac48ccd42a9b76481e7c7a4169ec", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nACCESS_KEY_PRESENT=True\nKNOWN_HOSTS_PRESENT=True\nPITER_RC=0\nPITER_BEGIN\nPITER_HOST=edge01\nPITER_UID=1000\nPITER_SUDO_N_RC=1\nSERVICE=nginx|STATE=active|RC=0\nSERVICE=haproxy|STATE=inactive|RC=3\nLISTEN_BEGIN\nLISTEN 0 511 [IP]:80 [IP]:*\nLISTEN 0 511 [IP]:443 [IP]:*\nLISTEN 0 511 [::]:80 [::]:*\nLISTEN 0 511 [::]:443 [::]:*\nLISTEN_END\nNGINX_T_BYTES=0\nNGINX_T_HAS_STREAM=False\nNGINX_T_HAS_SSL_PREREAD=False\nNGINX_HOST=nb.pvepro.ru|MATCHES=0\nNGINX_HOST=pvepro.ru|MATCHES=0\nNGINX_HOST=chat.gram1.ru|MATCHES=0\nNGINX_HOST=git.gram1.ru|MATCHES=0\nPITER_USA_CURL_1|RC=0|200|0.324880|0.529160|0.716977\nPITER_USA_CURL_2|RC=0|200|2|0.186421|0.390382|0.577006\nPITER604_END\n\nPITER_END\nUSA_RC=0\nUSA_BEGIN\nUSA_HOST=pvepro\nNETBIRD_ROOT_EXISTS=True\nUSA_CFG_FILE=/opt/netbird/docker-compose.yml\nUSA_CFG=- \"--entrypoints.websecure.address=:443\"\nUSA_CFG=- '46.16.34.129:443:443'\nUSA_CFG=- traefik.http.routers.netbird-dashboard.rule=(Host(`nb.pvepro.ru`) || Host(`nb.gram1.ru`))\nUSA_CFG=# Combined server (Management + Signal + Relay + STUN)\nUSA_CFG=- '46.16.34.129:3478:3478/udp'\nUSA_CFG=- traefik.http.routers.netbird-grpc.rule=(Host(`nb.pvepro.ru`) || Host(`nb.gram1.ru`)) && (PathPrefix(`/signalexchange.SignalExchange/`) || PathPrefix(`/management.ManagementService/`) || PathPrefix(`/management.ProxyService/`))\nUSA_CFG=# Backend router (relay, WebSocket, API, OAuth2)\nUSA_CFG=- traefik.http.routers.netbird-backend.rule=(Host(`nb.pvepro.ru`) || Host(`nb.gram1.ru`)) && (PathPrefix(`/relay`) || PathPrefix(`/ws-proxy/`) || PathPrefix(`/api`) || PathPrefix(`/oauth2`))\nUSA_CFG_FILE=/opt/netbird/config.yaml\nUSA_CFG=listenAddress: \":80\"\nUSA_CFG=exposedAddress: \"https://nb.pvepro.ru:443\"\nUSA_CFG=stunPorts:\nUSA_CFG=- 3478\nUSA_CFG=issuer: \"https://nb.pvepro.ru/oauth2\"\nUSA_CFG=- \"https://nb.pvepro.ru/nb-auth\"\nUSA_CFG=- \"https://nb.pvepro.ru/nb-silent-auth\"\nUSA604_END\n\nUSA_END\nTASK_COMPLETE=true\nTASK_RESULT=SPB_INGRESS_CANDIDATE_EVIDENCE_COLLECTED\nNO_CONNECTION_FIX_APPLIED=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-NETBIRD-SPB-INGRESS-CANDIDATE-AUDIT-READONLY-604R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" + "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nKEY_PRESENT=True\nKH_PRESENT=True\nEDGEADMIN_RC=0\nEDGEADMIN_BEGIN\nPITER_HOST=edge01\nPITER_ID=uid=1000(edgeadmin) gid=1000(edgeadmin) groups=1000(edgeadmin),27(sudo),100(users)\nPITER_GROUPS=edgeadmin sudo users\nSUDO_N_L_RC=1\nSUDO_N_L_OUT=\nSUDO_N_L_ERR=sudo: interactive authentication is required \nSUDO_N_ID_RC=1\nSUDO_N_ID_OUT=\nSUDO_N_ID_ERR=sudo: interactive authentication is required \nDOAS_N_ID_RC=999\nDOAS_N_ID_OUT=\nDOAS_N_ID_ERR=FileNotFoundError\nNGINX_SYSTEMD_RC=0\nNGINX_SYSTEMD=FragmentPath=/usr/lib/systemd/system/nginx.service\nNGINX_SYSTEMD=MainPID=373515\nNGINX_SYSTEMD=ExecStart={ path=/usr/sbin/nginx ; argv[]=/usr/sbin/nginx -g daemon on; master_process on; ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }\nNGINX_SYSTEMD=User=\nNGINX_SYSTEMD=Group=\nNGINX_EXE=/proc/373515/exe\nNGINX_CMDLINE=nginx: master process /usr/sbin/nginx -g daemon on; master_process on;\nPATH=/etc/nginx|EXISTS=True|READ=True|WRITE=False|EXEC=True\nPATH_META=/etc/nginx|MODE=0o755|UID=0|GID=0|SYMLINK=False\nPATH=/etc/nginx/nginx.conf|EXISTS=True|READ=True|WRITE=False|EXEC=False\nPATH_META=/etc/nginx/nginx.conf|MODE=0o644|UID=0|GID=0|SYMLINK=False\nPATH=/etc/nginx/conf.d|EXISTS=True|READ=True|WRITE=False|EXEC=True\nPATH_META=/etc/nginx/conf.d|MODE=0o755|UID=0|GID=0|SYMLINK=False\nPATH=/etc/nginx/sites-enabled|EXISTS=True|READ=True|WRITE=False|EXEC=True\nPATH_META=/etc/nginx/sites-enabled|MODE=0o755|UID=0|GID=0|SYMLINK=False\nPATH=/etc/nginx/sites-available|EXISTS=True|READ=True|WRITE=False|EXEC=True\nPATH_META=/etc/nginx/sites-available|MODE=0o755|UID=0|GID=0|SYMLINK=False\nPATH=/etc/nginx/stream.d|EXISTS=False|READ=False|WRITE=False|EXEC=False\nPATH=/etc/nginx/modules-enabled|EXISTS=True|READ=True|WRITE=False|EXEC=True\nPATH_META=/etc/nginx/modules-enabled|MODE=0o755|UID=0|GID=0|SYMLINK=False\nPATH=/etc/letsencrypt/live|EXISTS=True|READ=False|WRITE=False|EXEC=False\nPATH_META=/etc/letsencrypt/live|MODE=0o700|UID=0|GID=0|SYMLINK=False\nREADABLE_NGINX_CONFIG_COUNT=38\nNGINX_CONFIG=/etc/nginx/conf.d/00-edge-common.conf|WRITE=False\nNGINX_CONFIG=/etc/nginx/conf.d/00-git-read-v3-log-format.conf|WRITE=False\nNGINX_CONFIG=/etc/nginx/fastcgi.conf|WRITE=False\nNGINX_CONFIG=/etc/nginx/nginx.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/modules-enabled/*.conf;\nNGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/mime.types;\nNGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/conf.d/*.conf;\nNGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/sites-enabled/*;\nNGINX_CONFIG=/etc/nginx/sites-available/chat.gram1.ru.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|server_name\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|proxy_pass https://home_npmplus_tls;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|server_name\nNGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/codevipe-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|server_name codevipe.ru www.codevipe.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/codevipe-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|server_name codevipe.ru www.codevipe.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|ssl_certificate /etc/letsencrypt/live/codevipe.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/dsmods.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|server_name dsmods.ru www.dsmods.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/dsmods.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|server_name dsmods.ru www.dsmods.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|ssl_certificate /etc/letsencrypt/live/dsmods.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/gamevipe.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|server_name gamevipe.ru www.gamevipe.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/gamevipe.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|server_name gamevipe.ru www.gamevipe.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|ssl_certificate /etc/letsencrypt/live/gamevipe.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/git-edge-test.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|listen [IP];\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|server_name git.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/git.gram1.ru.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|server_name git.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|server_name git.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|ssl_certificate /etc/letsencrypt/live/git-edge-bootstrap/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/git-read-edge-test.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|listen [IP];\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|server_name git-read.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|proxy_pass_request_headers off;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|proxy_pass https://home_npmplus_tls/.well-known/homelab-git-read/v1/;\nNGINX_CONFIG=/etc/nginx/sites-available/git-read.gram1.ru.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|server_name git-read.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|include /etc/nginx/snippets/git-read-server-observer-v3.conf;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|server_name git-read.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|include /etc/nginx/snippets/git-read-server-observer-v3.conf;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|ssl_certificate /etc/letsencrypt/live/git-edge-bootstrap/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|proxy_pass_request_headers off;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|proxy_pass https://home_npmplus_tls/.well-known/homelab-git-read/v1/;\nNGINX_CONFIG=/etc/nginx/sites-available/gram1.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|server_name gram1.ru www.gram1.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/gram1.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|server_name gram1.ru www.gram1.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|ssl_certificate /etc/letsencrypt/live/gram1.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/hapusya.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|server_name hapusya.ru www.hapusya.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/hapusya.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|server_name hapusya.ru www.hapusya.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hapusya.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/hbarhub.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|server_name hbarhub.ru www.hbarhub.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/hbarhub.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|server_name hbarhub.ru www.hbarhub.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hbarhub.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/hkmods.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|server_name hkmods.ru www.hkmods.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/hkmods.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|server_name hkmods.ru www.hkmods.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hkmods.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/kingofwolk.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|server_name kingofwolk.ru www.kingofwolk.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/kingofwolk.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|server_name kingofwolk.ru www.kingofwolk.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|ssl_certificate /etc/letsencrypt/live/kingofwolk.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/newfilya.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|server_name newfilya.ru www.newfilya.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/newfilya.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|server_name newfilya.ru www.newfilya.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|ssl_certificate /etc/letsencrypt/live/newfilya.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/newfi.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|server_name newfi.ru www.newfi.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/newfi.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|server_name newfi.ru www.newfi.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|ssl_certificate /etc/letsencrypt/live/newfi.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/pvepro.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|server_name pvepro.ru www.pvepro.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/pvepro.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|server_name pvepro.ru www.pvepro.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|ssl_certificate /etc/letsencrypt/live/pvepro.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/taftauto.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|server_name taftauto.ru www.taftauto.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/taftauto.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|server_name taftauto.ru www.taftauto.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|ssl_certificate /etc/letsencrypt/live/taftauto.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/sites-available/zakrutim.ru-http.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|listen 80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|listen [::]:80;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|server_name zakrutim.ru www.zakrutim.ru;\nNGINX_CONFIG=/etc/nginx/sites-available/zakrutim.ru-https.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|listen 443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|listen [::]:443 ssl;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|server_name zakrutim.ru www.zakrutim.ru;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|ssl_certificate /etc/letsencrypt/live/zakrutim.ru/fullchain.pem;\nNGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|proxy_pass https://home_npmplus_tls;\nNGINX_CONFIG=/etc/nginx/snippets/fastcgi-php.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/snippets/fastcgi-php.conf|include fastcgi.conf;\nNGINX_CONFIG=/etc/nginx/snippets/git-read-server-observer-v3.conf|WRITE=False\nNGINX_CONFIG=/etc/nginx/snippets/snakeoil.conf|WRITE=False\nNGINX_DIRECTIVE=/etc/nginx/snippets/snakeoil.conf|ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;\nNGINX_SYMLINK=/etc/nginx/sites-enabled/chat.gram1.ru.conf -> /etc/nginx/sites-available/chat.gram1.ru.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/codevipe-http.conf -> /etc/nginx/sites-available/codevipe-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/codevipe-https.conf -> /etc/nginx/sites-available/codevipe-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/dsmods.ru-http.conf -> /etc/nginx/sites-available/dsmods.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/dsmods.ru-https.conf -> /etc/nginx/sites-available/dsmods.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/gamevipe.ru-http.conf -> /etc/nginx/sites-available/gamevipe.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/gamevipe.ru-https.conf -> /etc/nginx/sites-available/gamevipe.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/git.gram1.ru.conf -> /etc/nginx/sites-available/git.gram1.ru.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/git-read.gram1.ru.conf -> /etc/nginx/sites-available/git-read.gram1.ru.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/gram1.ru-http.conf -> /etc/nginx/sites-available/gram1.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/gram1.ru-https.conf -> /etc/nginx/sites-available/gram1.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hapusya.ru-http.conf -> /etc/nginx/sites-available/hapusya.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hapusya.ru-https.conf -> /etc/nginx/sites-available/hapusya.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hbarhub.ru-http.conf -> /etc/nginx/sites-available/hbarhub.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hbarhub.ru-https.conf -> /etc/nginx/sites-available/hbarhub.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hkmods.ru-http.conf -> /etc/nginx/sites-available/hkmods.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/hkmods.ru-https.conf -> /etc/nginx/sites-available/hkmods.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/kingofwolk.ru-http.conf -> /etc/nginx/sites-available/kingofwolk.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/kingofwolk.ru-https.conf -> /etc/nginx/sites-available/kingofwolk.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/newfilya.ru-http.conf -> /etc/nginx/sites-available/newfilya.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/newfilya.ru-https.conf -> /etc/nginx/sites-available/newfilya.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/newfi.ru-http.conf -> /etc/nginx/sites-available/newfi.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/newfi.ru-https.conf -> /etc/nginx/sites-available/newfi.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/pvepro.ru-http.conf -> /etc/nginx/sites-available/pvepro.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/pvepro.ru-https.conf -> /etc/nginx/sites-available/pvepro.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/taftauto.ru-http.conf -> /etc/nginx/sites-available/taftauto.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/taftauto.ru-https.conf -> /etc/nginx/sites-available/taftauto.ru-https.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/zakrutim.ru-http.conf -> /etc/nginx/sites-available/zakrutim.ru-http.conf\nNGINX_SYMLINK=/etc/nginx/sites-enabled/zakrutim.ru-https.conf -> /etc/nginx/sites-available/zakrutim.ru-https.conf\nNGINX_GETCAP=\nDOCKER_RC=999\nPODMAN_RC=999\nPITER605_END\n\nEDGEADMIN_END\nROOT_SSH_RC=255\nROOT_SSH_ERR=root@185.225.35.6: Permission denied (publickey). \nTASK_COMPLETE=true\nTASK_RESULT=SPB_PRIVILEGE_CONFIG_EVIDENCE_COLLECTED\nNO_CONNECTION_FIX_APPLIED=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 06a322a4..5a708e17 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,15 +1,15 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260919-NETBIRD-SPB-INGRESS-CANDIDATE-AUDIT-READONLY-604R1 +COMMAND_ID=SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1 STATUS=OK RC=0 HOST=pve01 MODE=read-only -COMPONENT=netbird-spb-ingress-candidate-audit-readonly +COMPONENT=netbird-spb-nginx-privilege-rca-readonly REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=cbc77ef188f6571f4c6a4e1020a8b3faaaaf1d6e45356f87d4f18486303467c7 +COMMAND_SHA256=e4fd4f756c05a2e92a2c45e80037ebe4e3fffaff14ab48be5f0224c292fb922b DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false @@ -24,66 +24,274 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=20d1f4206930fccb2bd16ff041419eecef1606eafcc0861c2a768df908a30f4d -SANITIZED_OUTPUT_SHA256=20d1f4206930fccb2bd16ff041419eecef1606eafcc0861c2a768df908a30f4d +RAW_EVIDENCE_SHA256=47da9b8d1ed4d010f997cd8d91d865615e5bac48ccd42a9b76481e7c7a4169ec +SANITIZED_OUTPUT_SHA256=47da9b8d1ed4d010f997cd8d91d865615e5bac48ccd42a9b76481e7c7a4169ec OUTPUT_BEGIN ERROR_REGISTER_CHECK=OK REFERENCE_CHECK=OK -ACCESS_KEY_PRESENT=True -KNOWN_HOSTS_PRESENT=True -PITER_RC=0 -PITER_BEGIN +KEY_PRESENT=True +KH_PRESENT=True +EDGEADMIN_RC=0 +EDGEADMIN_BEGIN PITER_HOST=edge01 -PITER_UID=1000 -PITER_SUDO_N_RC=1 -SERVICE=nginx|STATE=active|RC=0 -SERVICE=haproxy|STATE=inactive|RC=3 -LISTEN_BEGIN -LISTEN 0 511 [IP]:80 [IP]:* -LISTEN 0 511 [IP]:443 [IP]:* -LISTEN 0 511 [::]:80 [::]:* -LISTEN 0 511 [::]:443 [::]:* -LISTEN_END -NGINX_T_BYTES=0 -NGINX_T_HAS_STREAM=False -NGINX_T_HAS_SSL_PREREAD=False -NGINX_HOST=nb.pvepro.ru|MATCHES=0 -NGINX_HOST=pvepro.ru|MATCHES=0 -NGINX_HOST=chat.gram1.ru|MATCHES=0 -NGINX_HOST=git.gram1.ru|MATCHES=0 -PITER_USA_CURL_1|RC=0|200|0.324880|0.529160|0.716977 -PITER_USA_CURL_2|RC=0|200|2|0.186421|0.390382|0.577006 -PITER604_END +PITER_ID=uid=1000(edgeadmin) gid=1000(edgeadmin) groups=1000(edgeadmin),27(sudo),100(users) +PITER_GROUPS=edgeadmin sudo users +SUDO_N_L_RC=1 +SUDO_N_L_OUT= +SUDO_N_L_ERR=sudo: interactive authentication is required +SUDO_N_ID_RC=1 +SUDO_N_ID_OUT= +SUDO_N_ID_ERR=sudo: interactive authentication is required +DOAS_N_ID_RC=999 +DOAS_N_ID_OUT= +DOAS_N_ID_ERR=FileNotFoundError +NGINX_SYSTEMD_RC=0 +NGINX_SYSTEMD=FragmentPath=/usr/lib/systemd/system/nginx.service +NGINX_SYSTEMD=MainPID=373515 +NGINX_SYSTEMD=ExecStart={ path=/usr/sbin/nginx ; argv[]=/usr/sbin/nginx -g daemon on; master_process on; ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 } +NGINX_SYSTEMD=User= +NGINX_SYSTEMD=Group= +NGINX_EXE=/proc/373515/exe +NGINX_CMDLINE=nginx: master process /usr/sbin/nginx -g daemon on; master_process on; +PATH=/etc/nginx|EXISTS=True|READ=True|WRITE=False|EXEC=True +PATH_META=/etc/nginx|MODE=0o755|UID=0|GID=0|SYMLINK=False +PATH=/etc/nginx/nginx.conf|EXISTS=True|READ=True|WRITE=False|EXEC=False +PATH_META=/etc/nginx/nginx.conf|MODE=0o644|UID=0|GID=0|SYMLINK=False +PATH=/etc/nginx/conf.d|EXISTS=True|READ=True|WRITE=False|EXEC=True +PATH_META=/etc/nginx/conf.d|MODE=0o755|UID=0|GID=0|SYMLINK=False +PATH=/etc/nginx/sites-enabled|EXISTS=True|READ=True|WRITE=False|EXEC=True +PATH_META=/etc/nginx/sites-enabled|MODE=0o755|UID=0|GID=0|SYMLINK=False +PATH=/etc/nginx/sites-available|EXISTS=True|READ=True|WRITE=False|EXEC=True +PATH_META=/etc/nginx/sites-available|MODE=0o755|UID=0|GID=0|SYMLINK=False +PATH=/etc/nginx/stream.d|EXISTS=False|READ=False|WRITE=False|EXEC=False +PATH=/etc/nginx/modules-enabled|EXISTS=True|READ=True|WRITE=False|EXEC=True +PATH_META=/etc/nginx/modules-enabled|MODE=0o755|UID=0|GID=0|SYMLINK=False +PATH=/etc/letsencrypt/live|EXISTS=True|READ=False|WRITE=False|EXEC=False +PATH_META=/etc/letsencrypt/live|MODE=0o700|UID=0|GID=0|SYMLINK=False +READABLE_NGINX_CONFIG_COUNT=38 +NGINX_CONFIG=/etc/nginx/conf.d/00-edge-common.conf|WRITE=False +NGINX_CONFIG=/etc/nginx/conf.d/00-git-read-v3-log-format.conf|WRITE=False +NGINX_CONFIG=/etc/nginx/fastcgi.conf|WRITE=False +NGINX_CONFIG=/etc/nginx/nginx.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/modules-enabled/*.conf; +NGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/mime.types; +NGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/conf.d/*.conf; +NGINX_DIRECTIVE=/etc/nginx/nginx.conf|include /etc/nginx/sites-enabled/*; +NGINX_CONFIG=/etc/nginx/sites-available/chat.gram1.ru.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|server_name +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|proxy_pass https://home_npmplus_tls; +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|server_name +NGINX_DIRECTIVE=/etc/nginx/sites-available/chat.gram1.ru.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/codevipe-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-http.conf|server_name codevipe.ru www.codevipe.ru; +NGINX_CONFIG=/etc/nginx/sites-available/codevipe-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|server_name codevipe.ru www.codevipe.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|ssl_certificate /etc/letsencrypt/live/codevipe.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/codevipe-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/dsmods.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-http.conf|server_name dsmods.ru www.dsmods.ru; +NGINX_CONFIG=/etc/nginx/sites-available/dsmods.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|server_name dsmods.ru www.dsmods.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|ssl_certificate /etc/letsencrypt/live/dsmods.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/dsmods.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/gamevipe.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-http.conf|server_name gamevipe.ru www.gamevipe.ru; +NGINX_CONFIG=/etc/nginx/sites-available/gamevipe.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|server_name gamevipe.ru www.gamevipe.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|ssl_certificate /etc/letsencrypt/live/gamevipe.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gamevipe.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/git-edge-test.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|listen [IP]; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|server_name git.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-edge-test.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/git.gram1.ru.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|server_name git.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|server_name git.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|ssl_certificate /etc/letsencrypt/live/git-edge-bootstrap/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git.gram1.ru.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/git-read-edge-test.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|listen [IP]; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|server_name git-read.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|proxy_pass_request_headers off; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read-edge-test.conf|proxy_pass https://home_npmplus_tls/.well-known/homelab-git-read/v1/; +NGINX_CONFIG=/etc/nginx/sites-available/git-read.gram1.ru.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|server_name git-read.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|include /etc/nginx/snippets/git-read-server-observer-v3.conf; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|server_name git-read.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|include /etc/nginx/snippets/git-read-server-observer-v3.conf; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|ssl_certificate /etc/letsencrypt/live/git-edge-bootstrap/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|proxy_pass_request_headers off; +NGINX_DIRECTIVE=/etc/nginx/sites-available/git-read.gram1.ru.conf|proxy_pass https://home_npmplus_tls/.well-known/homelab-git-read/v1/; +NGINX_CONFIG=/etc/nginx/sites-available/gram1.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-http.conf|server_name gram1.ru www.gram1.ru; +NGINX_CONFIG=/etc/nginx/sites-available/gram1.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|server_name gram1.ru www.gram1.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|ssl_certificate /etc/letsencrypt/live/gram1.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/gram1.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/hapusya.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-http.conf|server_name hapusya.ru www.hapusya.ru; +NGINX_CONFIG=/etc/nginx/sites-available/hapusya.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|server_name hapusya.ru www.hapusya.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hapusya.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hapusya.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/hbarhub.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-http.conf|server_name hbarhub.ru www.hbarhub.ru; +NGINX_CONFIG=/etc/nginx/sites-available/hbarhub.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|server_name hbarhub.ru www.hbarhub.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hbarhub.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hbarhub.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/hkmods.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-http.conf|server_name hkmods.ru www.hkmods.ru; +NGINX_CONFIG=/etc/nginx/sites-available/hkmods.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|server_name hkmods.ru www.hkmods.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|ssl_certificate /etc/letsencrypt/live/hkmods.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/hkmods.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/kingofwolk.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-http.conf|server_name kingofwolk.ru www.kingofwolk.ru; +NGINX_CONFIG=/etc/nginx/sites-available/kingofwolk.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|server_name kingofwolk.ru www.kingofwolk.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|ssl_certificate /etc/letsencrypt/live/kingofwolk.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/kingofwolk.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/newfilya.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-http.conf|server_name newfilya.ru www.newfilya.ru; +NGINX_CONFIG=/etc/nginx/sites-available/newfilya.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|server_name newfilya.ru www.newfilya.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|ssl_certificate /etc/letsencrypt/live/newfilya.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfilya.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/newfi.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-http.conf|server_name newfi.ru www.newfi.ru; +NGINX_CONFIG=/etc/nginx/sites-available/newfi.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|server_name newfi.ru www.newfi.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|ssl_certificate /etc/letsencrypt/live/newfi.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/newfi.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/pvepro.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-http.conf|server_name pvepro.ru www.pvepro.ru; +NGINX_CONFIG=/etc/nginx/sites-available/pvepro.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|server_name pvepro.ru www.pvepro.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|ssl_certificate /etc/letsencrypt/live/pvepro.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/pvepro.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/taftauto.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-http.conf|server_name taftauto.ru www.taftauto.ru; +NGINX_CONFIG=/etc/nginx/sites-available/taftauto.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|server_name taftauto.ru www.taftauto.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|ssl_certificate /etc/letsencrypt/live/taftauto.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/taftauto.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/sites-available/zakrutim.ru-http.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|listen 80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|listen [::]:80; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-http.conf|server_name zakrutim.ru www.zakrutim.ru; +NGINX_CONFIG=/etc/nginx/sites-available/zakrutim.ru-https.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|listen 443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|listen [::]:443 ssl; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|server_name zakrutim.ru www.zakrutim.ru; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|ssl_certificate /etc/letsencrypt/live/zakrutim.ru/fullchain.pem; +NGINX_DIRECTIVE=/etc/nginx/sites-available/zakrutim.ru-https.conf|proxy_pass https://home_npmplus_tls; +NGINX_CONFIG=/etc/nginx/snippets/fastcgi-php.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/snippets/fastcgi-php.conf|include fastcgi.conf; +NGINX_CONFIG=/etc/nginx/snippets/git-read-server-observer-v3.conf|WRITE=False +NGINX_CONFIG=/etc/nginx/snippets/snakeoil.conf|WRITE=False +NGINX_DIRECTIVE=/etc/nginx/snippets/snakeoil.conf|ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem; +NGINX_SYMLINK=/etc/nginx/sites-enabled/chat.gram1.ru.conf -> /etc/nginx/sites-available/chat.gram1.ru.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/codevipe-http.conf -> /etc/nginx/sites-available/codevipe-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/codevipe-https.conf -> /etc/nginx/sites-available/codevipe-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/dsmods.ru-http.conf -> /etc/nginx/sites-available/dsmods.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/dsmods.ru-https.conf -> /etc/nginx/sites-available/dsmods.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/gamevipe.ru-http.conf -> /etc/nginx/sites-available/gamevipe.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/gamevipe.ru-https.conf -> /etc/nginx/sites-available/gamevipe.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/git.gram1.ru.conf -> /etc/nginx/sites-available/git.gram1.ru.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/git-read.gram1.ru.conf -> /etc/nginx/sites-available/git-read.gram1.ru.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/gram1.ru-http.conf -> /etc/nginx/sites-available/gram1.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/gram1.ru-https.conf -> /etc/nginx/sites-available/gram1.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hapusya.ru-http.conf -> /etc/nginx/sites-available/hapusya.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hapusya.ru-https.conf -> /etc/nginx/sites-available/hapusya.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hbarhub.ru-http.conf -> /etc/nginx/sites-available/hbarhub.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hbarhub.ru-https.conf -> /etc/nginx/sites-available/hbarhub.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hkmods.ru-http.conf -> /etc/nginx/sites-available/hkmods.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/hkmods.ru-https.conf -> /etc/nginx/sites-available/hkmods.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/kingofwolk.ru-http.conf -> /etc/nginx/sites-available/kingofwolk.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/kingofwolk.ru-https.conf -> /etc/nginx/sites-available/kingofwolk.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/newfilya.ru-http.conf -> /etc/nginx/sites-available/newfilya.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/newfilya.ru-https.conf -> /etc/nginx/sites-available/newfilya.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/newfi.ru-http.conf -> /etc/nginx/sites-available/newfi.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/newfi.ru-https.conf -> /etc/nginx/sites-available/newfi.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/pvepro.ru-http.conf -> /etc/nginx/sites-available/pvepro.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/pvepro.ru-https.conf -> /etc/nginx/sites-available/pvepro.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/taftauto.ru-http.conf -> /etc/nginx/sites-available/taftauto.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/taftauto.ru-https.conf -> /etc/nginx/sites-available/taftauto.ru-https.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/zakrutim.ru-http.conf -> /etc/nginx/sites-available/zakrutim.ru-http.conf +NGINX_SYMLINK=/etc/nginx/sites-enabled/zakrutim.ru-https.conf -> /etc/nginx/sites-available/zakrutim.ru-https.conf +NGINX_GETCAP= +DOCKER_RC=999 +PODMAN_RC=999 +PITER605_END -PITER_END -USA_RC=0 -USA_BEGIN -USA_HOST=pvepro -NETBIRD_ROOT_EXISTS=True -USA_CFG_FILE=/opt/netbird/docker-compose.yml -USA_CFG=- "--entrypoints.websecure.address=:443" -USA_CFG=- '46.16.34.129:443:443' -USA_CFG=- traefik.http.routers.netbird-dashboard.rule=(Host(`nb.pvepro.ru`) || Host(`nb.gram1.ru`)) -USA_CFG=# Combined server (Management + Signal + Relay + STUN) -USA_CFG=- '46.16.34.129:3478:3478/udp' -USA_CFG=- traefik.http.routers.netbird-grpc.rule=(Host(`nb.pvepro.ru`) || Host(`nb.gram1.ru`)) && (PathPrefix(`/signalexchange.SignalExchange/`) || PathPrefix(`/management.ManagementService/`) || PathPrefix(`/management.ProxyService/`)) -USA_CFG=# Backend router (relay, WebSocket, API, OAuth2) -USA_CFG=- traefik.http.routers.netbird-backend.rule=(Host(`nb.pvepro.ru`) || Host(`nb.gram1.ru`)) && (PathPrefix(`/relay`) || PathPrefix(`/ws-proxy/`) || PathPrefix(`/api`) || PathPrefix(`/oauth2`)) -USA_CFG_FILE=/opt/netbird/config.yaml -USA_CFG=listenAddress: ":80" -USA_CFG=exposedAddress: "https://nb.pvepro.ru:443" -USA_CFG=stunPorts: -USA_CFG=- 3478 -USA_CFG=issuer: "https://nb.pvepro.ru/oauth2" -USA_CFG=- "https://nb.pvepro.ru/nb-auth" -USA_CFG=- "https://nb.pvepro.ru/nb-silent-auth" -USA604_END - -USA_END +EDGEADMIN_END +ROOT_SSH_RC=255 +ROOT_SSH_ERR=root@185.225.35.6: Permission denied (publickey). TASK_COMPLETE=true -TASK_RESULT=SPB_INGRESS_CANDIDATE_EVIDENCE_COLLECTED +TASK_RESULT=SPB_PRIVILEGE_CONFIG_EVIDENCE_COLLECTED NO_CONNECTION_FIX_APPLIED=true -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-NETBIRD-SPB-INGRESS-CANDIDATE-AUDIT-READONLY-604R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-NETBIRD-SPB-NGINX-PRIVILEGE-RCA-READONLY-605R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END