From d370f7fdd997d262aa2b21972d7dbcdc293bced6 Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Mon, 5 Oct 2026 09:28:20 +0000 Subject: [PATCH] runtime: publish SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1 --- ...RESH-BACKUP-RESTORE-RECONCILE-99596R1.json | 38 + ...FRESH-BACKUP-RESTORE-RECONCILE-99596R1.txt | 113 ++ runtime/latest.json | 16 +- runtime/latest.txt | 1173 ++--------------- 4 files changed, 239 insertions(+), 1101 deletions(-) create mode 100644 runtime/history/SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1.json create mode 100644 runtime/history/SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1.txt diff --git a/runtime/history/SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1.json b/runtime/history/SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1.json new file mode 100644 index 00000000..c7aae1ad --- /dev/null +++ b/runtime/history/SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "snikket-fresh-backup-restore-reconcile", + "started_at_utc": "2026-10-05T09:28:11Z", + "finished_at_utc": "2026-10-05T09:28:20Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "aa4d24604e08080a4424c65f063d950e4d108af85e15b194b42b3f071539ad55", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "6ab481397516db0c02af324a901bebc01941ff62a95997cff712f9071ada165d", + "sanitized_output_sha256": "6ab481397516db0c02af324a901bebc01941ff62a95997cff712f9071ada165d", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "SNIKKET_FRESH_BACKUP_RESTORE_RECONCILE=V1\nMODE=read-only\nNO_VM_MUTATION=true\nNO_BACKUP_MUTATION=true\nNO_REMOTE_MUTATION=true\nNO_STATE_MUTATION=true\nNO_DNS_MUTATION=true\nNO_MONITOR_MUTATION=true\nHOST_PVE01=true\nINGRESS_HOSTKEY_SELF_BOUND=true\nVM150_RUNNING=true\nVM150_QGA=true\nVM150_CONFIG_SHA256=2e4c1ea46b27034a2efe7bfc00cd9f32c0641a43d8365aa21992f72493a43b0e\nVM150_CONFIG_MATCH_99595_PRE=true\nPROD_HOSTNAME_PRESENT=true\nPROD_HOSTNAME_SHA256=3c7efeafc1bb10d0343c4790ae885d930ff08cf90396917fea962e3fce0e5e14\nPROD_HOSTNAME_IS_SNIKKET=true\nPROD_STATIC_HOSTNAME_MATCH=true\nPROD_SNIKKET_DOMAIN_OK=true\nFRESH_STATE_PRESENT=true\nFRESH_RESTORE_VALIDATION_PRESENT=true\nSTATE_GENERATION_MATCH=true\nSTATE_STATUS_SEALED=true\nSTATE_CLOUD_QUORUM_2=true\nSTATE_CLOUD_A_VERIFIED=true\nSTATE_CLOUD_B_VERIFIED=true\nSTATE_CLOUD_A_SEAL_VERIFIED=true\nSTATE_CLOUD_B_SEAL_VERIFIED=true\nSTATE_PART_HASHES_VERIFIED=true\nSTATE_SEAL_WRITTEN=true\nSTATE_LOCAL_CLEANUP_OK=true\nSTATE_LOCAL_PAYLOAD_ABSENT=true\nRESTORE_RESULT_OK=true\nRESTORE_PAYLOAD_SHA_VERIFIED=true\nRESTORE_ARCHIVE_READBACK_VERIFIED=true\nRESTORE_PROXMOX_CONFIG_EXTRACT_VERIFIED=true\nSTRICT_FRESH_EVIDENCE_PASS=true\nFRESH_STATE_SHA256=d1633743b207d851dee72c59fb26a3071622bcbcbd63e943463ebada0081f10c\nFRESH_RESTORE_SHA256=122ea17af4149a1fdbb42efb78d13256f3e49915cbff4a87d595fd1e13c18822\nFRESH_GENERATION_AGE_HOURS=0.167\nREMOTE_A_BASE_PRESENT=true\nREMOTE_B_BASE_PRESENT=true\nARCHIVE_SHA256=f512b9e70dac503583643203a42a1c57cee0f061cf301152036408e0cf0abeac\nARCHIVE_SIZE_BYTES=935669734\nPART_COUNT=2\nPARTS_MANIFEST_SHA256=851e54c928f30d7f5064deb067caa26341364b5d6b6d0e156e496237cb434270\nREMOTE_A_BASE_PRESENT=true\nREMOTE_A_GEN_PATH_MATCH=true\nREMOTE_A_SEAL_JSON_READ_RC=0\nREMOTE_A_SEAL_JSON_NONEMPTY=true\nREMOTE_A_PARTS_TSV_READ_RC=0\nREMOTE_A_PARTS_TSV_NONEMPTY=true\nREMOTE_B_BASE_PRESENT=true\nREMOTE_B_GEN_PATH_MATCH=true\nREMOTE_B_SEAL_JSON_READ_RC=0\nREMOTE_B_SEAL_JSON_NONEMPTY=true\nREMOTE_B_PARTS_TSV_READ_RC=0\nREMOTE_B_PARTS_TSV_NONEMPTY=true\nEXPORT_STATE_OK=true\nEXPORT_GENERATION_MATCH_FRESH=true\nEXPORT_REMOTE_A_VALID=true\nEXPORT_REMOTE_A_PART_COUNT=2\nEXPORT_REMOTE_B_VALID=true\nEXPORT_REMOTE_B_PART_COUNT=2\nTEMP_VM_9600_PRESENT=false\nRESTORE_STAGE_99595_RESIDUE_COUNT=0\nPROD_RUNNING_CONTAINER_COUNT=4\nPROD_RECON_RESULT_OK=true\nPROD_RECON_EXEC_OK=true\nPROD_RECON_SHA_OK=true\nPUBLIC_DNS_OK_COUNT=3\nPUBLIC_HTTPS_OK_COUNT=3\nPUBLIC_STUN_3479_PASS=true\nRECONCILE_COMPLETE=true\nDECISION=ANALYZE_EXACT_99596\nNEXT_GATE=SNIKKET_ISOLATED_BOOT_REPROOF_OR_FINAL_SEAL\nTASK_RESULT=SNIKKET_FRESH_BACKUP_RESTORE_RECONCILE\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\n" +} diff --git a/runtime/history/SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1.txt b/runtime/history/SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1.txt new file mode 100644 index 00000000..e0dd3ad3 --- /dev/null +++ b/runtime/history/SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1.txt @@ -0,0 +1,113 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=snikket-fresh-backup-restore-reconcile +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=aa4d24604e08080a4424c65f063d950e4d108af85e15b194b42b3f071539ad55 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=6ab481397516db0c02af324a901bebc01941ff62a95997cff712f9071ada165d +SANITIZED_OUTPUT_SHA256=6ab481397516db0c02af324a901bebc01941ff62a95997cff712f9071ada165d +OUTPUT_BEGIN +SNIKKET_FRESH_BACKUP_RESTORE_RECONCILE=V1 +MODE=read-only +NO_VM_MUTATION=true +NO_BACKUP_MUTATION=true +NO_REMOTE_MUTATION=true +NO_STATE_MUTATION=true +NO_DNS_MUTATION=true +NO_MONITOR_MUTATION=true +HOST_PVE01=true +INGRESS_HOSTKEY_SELF_BOUND=true +VM150_RUNNING=true +VM150_QGA=true +VM150_CONFIG_SHA256=2e4c1ea46b27034a2efe7bfc00cd9f32c0641a43d8365aa21992f72493a43b0e +VM150_CONFIG_MATCH_99595_PRE=true +PROD_HOSTNAME_PRESENT=true +PROD_HOSTNAME_SHA256=3c7efeafc1bb10d0343c4790ae885d930ff08cf90396917fea962e3fce0e5e14 +PROD_HOSTNAME_IS_SNIKKET=true +PROD_STATIC_HOSTNAME_MATCH=true +PROD_SNIKKET_DOMAIN_OK=true +FRESH_STATE_PRESENT=true +FRESH_RESTORE_VALIDATION_PRESENT=true +STATE_GENERATION_MATCH=true +STATE_STATUS_SEALED=true +STATE_CLOUD_QUORUM_2=true +STATE_CLOUD_A_VERIFIED=true +STATE_CLOUD_B_VERIFIED=true +STATE_CLOUD_A_SEAL_VERIFIED=true +STATE_CLOUD_B_SEAL_VERIFIED=true +STATE_PART_HASHES_VERIFIED=true +STATE_SEAL_WRITTEN=true +STATE_LOCAL_CLEANUP_OK=true +STATE_LOCAL_PAYLOAD_ABSENT=true +RESTORE_RESULT_OK=true +RESTORE_PAYLOAD_SHA_VERIFIED=true +RESTORE_ARCHIVE_READBACK_VERIFIED=true +RESTORE_PROXMOX_CONFIG_EXTRACT_VERIFIED=true +STRICT_FRESH_EVIDENCE_PASS=true +FRESH_STATE_SHA256=d1633743b207d851dee72c59fb26a3071622bcbcbd63e943463ebada0081f10c +FRESH_RESTORE_SHA256=122ea17af4149a1fdbb42efb78d13256f3e49915cbff4a87d595fd1e13c18822 +FRESH_GENERATION_AGE_HOURS=0.167 +REMOTE_A_BASE_PRESENT=true +REMOTE_B_BASE_PRESENT=true +ARCHIVE_SHA256=f512b9e70dac503583643203a42a1c57cee0f061cf301152036408e0cf0abeac +ARCHIVE_SIZE_BYTES=935669734 +PART_COUNT=2 +PARTS_MANIFEST_SHA256=851e54c928f30d7f5064deb067caa26341364b5d6b6d0e156e496237cb434270 +REMOTE_A_BASE_PRESENT=true +REMOTE_A_GEN_PATH_MATCH=true +REMOTE_A_SEAL_JSON_READ_RC=0 +REMOTE_A_SEAL_JSON_NONEMPTY=true +REMOTE_A_PARTS_TSV_READ_RC=0 +REMOTE_A_PARTS_TSV_NONEMPTY=true +REMOTE_B_BASE_PRESENT=true +REMOTE_B_GEN_PATH_MATCH=true +REMOTE_B_SEAL_JSON_READ_RC=0 +REMOTE_B_SEAL_JSON_NONEMPTY=true +REMOTE_B_PARTS_TSV_READ_RC=0 +REMOTE_B_PARTS_TSV_NONEMPTY=true +EXPORT_STATE_OK=true +EXPORT_GENERATION_MATCH_FRESH=true +EXPORT_REMOTE_A_VALID=true +EXPORT_REMOTE_A_PART_COUNT=2 +EXPORT_REMOTE_B_VALID=true +EXPORT_REMOTE_B_PART_COUNT=2 +TEMP_VM_9600_PRESENT=false +RESTORE_STAGE_99595_RESIDUE_COUNT=0 +PROD_RUNNING_CONTAINER_COUNT=4 +PROD_RECON_RESULT_OK=true +PROD_RECON_EXEC_OK=true +PROD_RECON_SHA_OK=true +PUBLIC_DNS_OK_COUNT=3 +PUBLIC_HTTPS_OK_COUNT=3 +PUBLIC_STUN_3479_PASS=true +RECONCILE_COMPLETE=true +DECISION=ANALYZE_EXACT_99596 +NEXT_GATE=SNIKKET_ISOLATED_BOOT_REPROOF_OR_FINAL_SEAL +TASK_RESULT=SNIKKET_FRESH_BACKUP_RESTORE_RECONCILE +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index f602e573..c7aae1ad 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-261005-HOME-GRAM1-EDGE-VPN-DNS-RCA-99595R1", + "command_id": "SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1", "status": "OK", "rc": 0, "host": "pve01", "mode": "read-only", - "component": "home-gram1-edge-vpn-dns-rca", - "started_at_utc": "2026-10-05T09:25:29Z", - "finished_at_utc": "2026-10-05T09:25:35Z", + "component": "snikket-fresh-backup-restore-reconcile", + "started_at_utc": "2026-10-05T09:28:11Z", + "finished_at_utc": "2026-10-05T09:28:20Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "8373cbc8cc09222185a3eea30f811f59cdfd6c7e88118f3aa80c8fa2ce6e6027", + "command_sha256": "aa4d24604e08080a4424c65f063d950e4d108af85e15b194b42b3f071539ad55", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "8d2e00550474afe9ffde1aee1364664e74e5775593673837f2b262320065fd0e", - "sanitized_output_sha256": "e222f8b364b0ef3aed91333615ff2ea31a541a9169bdbcb53347e0231495293b", + "raw_evidence_sha256": "6ab481397516db0c02af324a901bebc01941ff62a95997cff712f9071ada165d", + "sanitized_output_sha256": "6ab481397516db0c02af324a901bebc01941ff62a95997cff712f9071ada165d", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "HOME_GRAM1_EDGE_VPN_DNS_RCA=V1\nNO_MAIL_SEND=true\nNO_SERVICE_RESTART=true\nNO_TIMER_MUTATION=true\nNO_NETWORK_MUTATION=true\nNO_SOURCE_MUTATION=true\nNO_DNS_MUTATION=true\nNO_PROXY_MUTATION=true\nNO_CONTAINER_MUTATION=true\nNO_ACCESS_LIST_MUTATION=true\nNO_LOCAL_WINDOWS_MUTATION=true\nMODE=read-only\nHOST_PVE01=true\nLOCAL_DIAG_OK=true \nLOCAL_NETBIRD_PRESENT=true \nLOCAL_NETBIRD_SERVICE_FOUND=true \nLOCAL_NETBIRD_SERVICE_RUNNING=true \nLOCAL_NETBIRD_STATUS_RC=0 \nLOCAL_NETBIRD_CONNECTED_HINT=true \nLOCAL_NETBIRD_DISCONNECTED_HINT=false \nLOCAL_NETBIRD_MANAGEMENT_HINT=true \nLOCAL_NETBIRD_SIGNAL_HINT=true \nLOCAL_NETBIRD_OUTPUT_SHA=99aa8ce33befabc416914dd33b1af56e247c8e25960e4cb74a4a797ce330a880 \nLOCAL_HOME_DNS_COUNT=0 \nLOCAL_HOME_DNS_PRIVATE_COUNT=0 \nLOCAL_HOME_DNS_PUBLIC_COUNT=0 \nLOCAL_HOME_HTTPS_STATUS=0 \nLOCAL_HOMEVPN_DNS_COUNT=0 \nLOCAL_HOMEVPN_DNS_PRIVATE_COUNT=0 \nLOCAL_HOMEVPN_DNS_PUBLIC_COUNT=0 \nLOCAL_HOMEVPN_HTTPS_STATUS=0 \nSERVER_HOME_DNS_COUNT=1\nSERVER_HOME_DNS_PRIVATE_COUNT=1\nSERVER_HOME_DNS_PUBLIC_COUNT=0\nSERVER_HOME_HTTPS_STATUS=200\nSERVER_HOME_CURL_RC=0\nSERVER_HOMEVPN_DNS_COUNT=0\nSERVER_HOMEVPN_DNS_PRIVATE_COUNT=0\nSERVER_HOMEVPN_DNS_PUBLIC_COUNT=0\nSERVER_HOMEVPN_HTTPS_STATUS=000\nSERVER_HOMEVPN_CURL_RC=6\nEDGE_VM_FOUND=true\nEDGE_VM_NODE=pve03\nEDGE_VM_STATUS=running\nEDGE_VM_NAME=edge-vm\nPVE03_EDGE_INSPECT_RC=0\nPVE03_EDGE_INSPECT_STDERR_SHA=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_QM_GUEST_EXEC_RC=0\nEDGE_QM_STDERR_SHA=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_QGA_JSON=true\nEDGE_GUEST_EXITCODE=0\nEDGE_HOSTNAME=edge-vm\nEDGE_DOCKER_PRESENT=yes\nEDGE_NETBIRD_PRESENT=yes\nEDGE_NETBIRD_STATUS_SHA=7de6bb08abbcd58a722827794738dd523a1cbb4119b3cf8a5cba3d617b99b459\nEDGE_NETBIRD_CONNECTED_HINT=true\nEDGE_RELEVANT_CONTAINER_COUNT=2\nEDGE_CONTAINER_1_NAME=npmplus\nEDGE_CONTAINER_1_IMAGE=zoeyvid/npmplus:2026-06-17-b1\nEDGE_CONTAINER_1_STATUS=Up 5 weeks (healthy)\nEDGE_CONTAINER_2_NAME=socket-proxy\nEDGE_CONTAINER_2_IMAGE=lscr.io/linuxserver/socket-proxy:latest\nEDGE_CONTAINER_2_STATUS=Up 5 weeks\nEDGE_HOMEPAGE_CONTAINER_COUNT=0\nEDGE_DOMAIN_CONFIG_MATCH_COUNT=120\nEDGE_DOMAINCFG_1_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-certificate-expiry-audit-20260621/index.html\nEDGE_DOMAINCFG_1_HAS_HOME=true\nEDGE_DOMAINCFG_1_HAS_VPN=false\nEDGE_DOMAINCFG_1_HAS_ALLOW=false\nEDGE_DOMAINCFG_1_HAS_DENY=false\nEDGE_DOMAINCFG_1_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_2_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-services-prepatch-snapshot-20260621/index.html\nEDGE_DOMAINCFG_2_HAS_HOME=true\nEDGE_DOMAINCFG_2_HAS_VPN=true\nEDGE_DOMAINCFG_2_HAS_ALLOW=false\nEDGE_DOMAINCFG_2_HAS_DENY=false\nEDGE_DOMAINCFG_2_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_3_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-warning-monitoring-closure-20260621/index.html\nEDGE_DOMAINCFG_3_HAS_HOME=true\nEDGE_DOMAINCFG_3_HAS_VPN=false\nEDGE_DOMAINCFG_3_HAS_ALLOW=false\nEDGE_DOMAINCFG_3_HAS_DENY=false\nEDGE_DOMAINCFG_3_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_4_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-post-ui-final-closure-20260621/index.html\nEDGE_DOMAINCFG_4_HAS_HOME=true\nEDGE_DOMAINCFG_4_HAS_VPN=false\nEDGE_DOMAINCFG_4_HAS_ALLOW=false\nEDGE_DOMAINCFG_4_HAS_DENY=false\nEDGE_DOMAINCFG_4_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_5_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-services-full-npmplus-visibility-patch-20260621/index.html\nEDGE_DOMAINCFG_5_HAS_HOME=true\nEDGE_DOMAINCFG_5_HAS_VPN=true\nEDGE_DOMAINCFG_5_HAS_ALLOW=false\nEDGE_DOMAINCFG_5_HAS_DENY=false\nEDGE_DOMAINCFG_5_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_6_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homelab-service-visibility-strict-audit-20260621/index.html\nEDGE_DOMAINCFG_6_HAS_HOME=true\nEDGE_DOMAINCFG_6_HAS_VPN=true\nEDGE_DOMAINCFG_6_HAS_ALLOW=false\nEDGE_DOMAINCFG_6_HAS_DENY=false\nEDGE_DOMAINCFG_6_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_7_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/vpn-domain-route-and-homepage-hostvalidation-fix-20260623/index.html\nEDGE_DOMAINCFG_7_HAS_HOME=false\nEDGE_DOMAINCFG_7_HAS_VPN=true\nEDGE_DOMAINCFG_7_HAS_ALLOW=false\nEDGE_DOMAINCFG_7_HAS_DENY=false\nEDGE_DOMAINCFG_7_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_8_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-all-runtime-services-visible-patch-20260621/index.html\nEDGE_DOMAINCFG_8_HAS_HOME=true\nEDGE_DOMAINCFG_8_HAS_VPN=true\nEDGE_DOMAINCFG_8_HAS_ALLOW=false\nEDGE_DOMAINCFG_8_HAS_DENY=false\nEDGE_DOMAINCFG_8_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_9_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-runtime-full-visibility-final-closure-20260621/index.html\nEDGE_DOMAINCFG_9_HAS_HOME=true\nEDGE_DOMAINCFG_9_HAS_VPN=true\nEDGE_DOMAINCFG_9_HAS_ALLOW=false\nEDGE_DOMAINCFG_9_HAS_DENY=false\nEDGE_DOMAINCFG_9_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_10_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-fix-schema-preflight-20260621/index.html\nEDGE_DOMAINCFG_10_HAS_HOME=true\nEDGE_DOMAINCFG_10_HAS_VPN=false\nEDGE_DOMAINCFG_10_HAS_ALLOW=false\nEDGE_DOMAINCFG_10_HAS_DENY=false\nEDGE_DOMAINCFG_10_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_11_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-vpn-alias-cards-patch-20260622/index.html\nEDGE_DOMAINCFG_11_HAS_HOME=false\nEDGE_DOMAINCFG_11_HAS_VPN=true\nEDGE_DOMAINCFG_11_HAS_ALLOW=false\nEDGE_DOMAINCFG_11_HAS_DENY=false\nEDGE_DOMAINCFG_11_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_12_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/vpn-domain-route-recovery-v2-20260623/index.html\nEDGE_DOMAINCFG_12_HAS_HOME=false\nEDGE_DOMAINCFG_12_HAS_VPN=true\nEDGE_DOMAINCFG_12_HAS_ALLOW=false\nEDGE_DOMAINCFG_12_HAS_DENY=false\nEDGE_DOMAINCFG_12_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_13_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-vpn-route-batch-1-retry-20260622/index.html\nEDGE_DOMAINCFG_13_HAS_HOME=false\nEDGE_DOMAINCFG_13_HAS_VPN=true\nEDGE_DOMAINCFG_13_HAS_ALLOW=false\nEDGE_DOMAINCFG_13_HAS_DENY=false\nEDGE_DOMAINCFG_13_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_14_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-warning-checker-patch-20260621/index.html\nEDGE_DOMAINCFG_14_HAS_HOME=true\nEDGE_DOMAINCFG_14_HAS_VPN=false\nEDGE_DOMAINCFG_14_HAS_ALLOW=false\nEDGE_DOMAINCFG_14_HAS_DENY=false\nEDGE_DOMAINCFG_14_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_15_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-public-dns-blocker-audit-20260621/index.html\nEDGE_DOMAINCFG_15_HAS_HOME=true\nEDGE_DOMAINCFG_15_HAS_VPN=false\nEDGE_DOMAINCFG_15_HAS_ALLOW=false\nEDGE_DOMAINCFG_15_HAS_DENY=false\nEDGE_DOMAINCFG_15_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_16_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/cloudflare-remaining-token-post-revoke-check-20260622/index.html\nEDGE_DOMAINCFG_16_HAS_HOME=false\nEDGE_DOMAINCFG_16_HAS_VPN=true\nEDGE_DOMAINCFG_16_HAS_ALLOW=false\nEDGE_DOMAINCFG_16_HAS_DENY=false\nEDGE_DOMAINCFG_16_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_17_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-certbot-path-layout-preflight-20260621/index.html\nEDGE_DOMAINCFG_17_HAS_HOME=true\nEDGE_DOMAINCFG_17_HAS_VPN=false\nEDGE_DOMAINCFG_17_HAS_ALLOW=false\nEDGE_DOMAINCFG_17_HAS_DENY=false\nEDGE_DOMAINCFG_17_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_18_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-clickability-grouping-audit-20260621/index.html\nEDGE_DOMAINCFG_18_HAS_HOME=true\nEDGE_DOMAINCFG_18_HAS_VPN=true\nEDGE_DOMAINCFG_18_HAS_ALLOW=false\nEDGE_DOMAINCFG_18_HAS_DENY=false\nEDGE_DOMAINCFG_18_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_19_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-vpn-dns-wildcard-patch-20260621/index.html\nEDGE_DOMAINCFG_19_HAS_HOME=false\nEDGE_DOMAINCFG_19_HAS_VPN=true\nEDGE_DOMAINCFG_19_HAS_ALLOW=false\nEDGE_DOMAINCFG_19_HAS_DENY=false\nEDGE_DOMAINCFG_19_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_20_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-checker-prepatch-inspect-20260621/index.html\nEDGE_DOMAINCFG_20_HAS_HOME=true\nEDGE_DOMAINCFG_20_HAS_VPN=false\nEDGE_DOMAINCFG_20_HAS_ALLOW=false\nEDGE_DOMAINCFG_20_HAS_DENY=false\nEDGE_DOMAINCFG_20_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_21_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/post-revoke-final-docs-runtime-closure-20260622/index.html\nEDGE_DOMAINCFG_21_HAS_HOME=false\nEDGE_DOMAINCFG_21_HAS_VPN=true\nEDGE_DOMAINCFG_21_HAS_ALLOW=false\nEDGE_DOMAINCFG_21_HAS_DENY=false\nEDGE_DOMAINCFG_21_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_22_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-vpn-route-batch-2-20260622/index.html\nEDGE_DOMAINCFG_22_HAS_HOME=false\nEDGE_DOMAINCFG_22_HAS_VPN=true\nEDGE_DOMAINCFG_22_HAS_ALLOW=false\nEDGE_DOMAINCFG_22_HAS_DENY=false\nEDGE_DOMAINCFG_22_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_23_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-supported-vpn-routes-closeout-20260623/index.html\nEDGE_DOMAINCFG_23_HAS_HOME=false\nEDGE_DOMAINCFG_23_HAS_VPN=true\nEDGE_DOMAINCFG_23_HAS_ALLOW=false\nEDGE_DOMAINCFG_23_HAS_DENY=false\nEDGE_DOMAINCFG_23_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_24_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-grouping-href-patch-20260622/index.html\nEDGE_DOMAINCFG_24_HAS_HOME=true\nEDGE_DOMAINCFG_24_HAS_VPN=false\nEDGE_DOMAINCFG_24_HAS_ALLOW=false\nEDGE_DOMAINCFG_24_HAS_DENY=false\nEDGE_DOMAINCFG_24_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_25_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-routes-strict-tls-audit-20260621/index.html\nEDGE_DOMAINCFG_25_HAS_HOME=true\nEDGE_DOMAINCFG_25_HAS_VPN=false\nEDGE_DOMAINCFG_25_HAS_ALLOW=false\nEDGE_DOMAINCFG_25_HAS_DENY=false\nEDGE_DOMAINCFG_25_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_26_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-full-visibility-closure-rescan-fixed-20260621/index.html\nEDGE_DOMAINCFG_26_HAS_HOME=true\nEDGE_DOMAINCFG_26_HAS_VPN=true\nEDGE_DOMAINCFG_26_HAS_ALLOW=false\nEDGE_DOMAINCFG_26_HAS_DENY=false\nEDGE_DOMAINCFG_26_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_27_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-production-update-20260619/index.html\nEDGE_DOMAINCFG_27_HAS_HOME=true\nEDGE_DOMAINCFG_27_HAS_VPN=false\nEDGE_DOMAINCFG_27_HAS_ALLOW=false\nEDGE_DOMAINCFG_27_HAS_DENY=false\nEDGE_DOMAINCFG_27_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_28_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/search/search_index.json\nEDGE_DOMAINCFG_28_HAS_HOME=true\nEDGE_DOMAINCFG_28_HAS_VPN=true\nEDGE_DOMAINCFG_28_HAS_ALLOW=true\nEDGE_DOMAINCFG_28_HAS_DENY=true\nEDGE_DOMAINCFG_28_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_29_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/index.html\nEDGE_DOMAINCFG_29_HAS_HOME=true\nEDGE_DOMAINCFG_29_HAS_VPN=false\nEDGE_DOMAINCFG_29_HAS_ALLOW=false\nEDGE_DOMAINCFG_29_HAS_DENY=false\nEDGE_DOMAINCFG_29_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_30_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/inventory/domains.csv\nEDGE_DOMAINCFG_30_HAS_HOME=true\nEDGE_DOMAINCFG_30_HAS_VPN=false\nEDGE_DOMAINCFG_30_HAS_ALLOW=false\nEDGE_DOMAINCFG_30_HAS_DENY=false\nEDGE_DOMAINCFG_30_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_31_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/inventory/ports/index.html\nEDGE_DOMAINCFG_31_HAS_HOME=true\nEDGE_DOMAINCFG_31_HAS_VPN=false\nEDGE_DOMAINCFG_31_HAS_ALLOW=false\nEDGE_DOMAINCFG_31_HAS_DENY=false\nEDGE_DOMAINCFG_31_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_32_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/runbooks/01-add-new-service/index.html\nEDGE_DOMAINCFG_32_HAS_HOME=true\nEDGE_DOMAINCFG_32_HAS_VPN=false\nEDGE_DOMAINCFG_32_HAS_ALLOW=false\nEDGE_DOMAINCFG_32_HAS_DENY=false\nEDGE_DOMAINCFG_32_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_33_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/runbooks/00-restore-from-zero-for-beginners/index.html\nEDGE_DOMAINCFG_33_HAS_HOME=true\nEDGE_DOMAINCFG_33_HAS_VPN=false\nEDGE_DOMAINCFG_33_HAS_ALLOW=false\nEDGE_DOMAINCFG_33_HAS_DENY=false\nEDGE_DOMAINCFG_33_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_34_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618/index.html\nEDGE_DOMAINCFG_34_HAS_HOME=false\nEDGE_DOMAINCFG_34_HAS_VPN=true\nEDGE_DOMAINCFG_34_HAS_ALLOW=false\nEDGE_DOMAINCFG_34_HAS_DENY=false\nEDGE_DOMAINCFG_34_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_35_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/99-current-state-summary/index.html\nEDGE_DOMAINCFG_35_HAS_HOME=true\nEDGE_DOMAINCFG_35_HAS_VPN=true\nEDGE_DOMAINCFG_35_HAS_ALLOW=false\nEDGE_DOMAINCFG_35_HAS_DENY=false\nEDGE_DOMAINCFG_35_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_36_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/05-service-catalog/index.html\nEDGE_DOMAINCFG_36_HAS_HOME=true\nEDGE_DOMAINCFG_36_HAS_VPN=false\nEDGE_DOMAINCFG_36_HAS_ALLOW=false\nEDGE_DOMAINCFG_36_HAS_DENY=false\nEDGE_DOMAINCFG_36_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_37_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/HANDOFF-20260618-authentik-npmplus/index.html\nEDGE_DOMAINCFG_37_HAS_HOME=false\nEDGE_DOMAINCFG_37_HAS_VPN=true\nEDGE_DOMAINCFG_37_HAS_ALLOW=false\nEDGE_DOMAINCFG_37_HAS_DENY=false\nEDGE_DOMAINCFG_37_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_38_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/06-certificates-troubleshooting/index.html\nEDGE_DOMAINCFG_38_HAS_HOME=true\nEDGE_DOMAINCFG_38_HAS_VPN=false\nEDGE_DOMAINCFG_38_HAS_ALLOW=false\nEDGE_DOMAINCFG_38_HAS_DENY=false\nEDGE_DOMAINCFG_38_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_39_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/ERRORS-LESSONS-20260618/index.html\nEDGE_DOMAINCFG_39_HAS_HOME=false\nEDGE_DOMAINCFG_39_HAS_VPN=true\nEDGE_DOMAINCFG_39_HAS_ALLOW=false\nEDGE_DOMAINCFG_39_HAS_DENY=false\nEDGE_DOMAINCFG_39_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_40_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/service-url-catalog/index.html\nEDGE_DOMAINCFG_40_HAS_HOME=true\nEDGE_DOMAINCFG_40_HAS_VPN=true\nEDGE_DOMAINCFG_40_HAS_ALLOW=false\nEDGE_DOMAINCFG_40_HAS_DENY=false\nEDGE_DOMAINCFG_40_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_41_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/SERVICES-BOOTSTRAP-20260617/index.html\nEDGE_DOMAINCFG_41_HAS_HOME=false\nEDGE_DOMAINCFG_41_HAS_VPN=true\nEDGE_DOMAINCFG_41_HAS_ALLOW=false\nEDGE_DOMAINCFG_41_HAS_DENY=false\nEDGE_DOMAINCFG_41_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_42_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-certificate-expiry-audit-20260621/index.html\nEDGE_DOMAINCFG_42_HAS_HOME=true\nEDGE_DOMAINCFG_42_HAS_VPN=false\nEDGE_DOMAINCFG_42_HAS_ALLOW=false\nEDGE_DOMAINCFG_42_HAS_DENY=false\nEDGE_DOMAINCFG_42_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_43_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-services-prepatch-snapshot-20260621/index.html\nEDGE_DOMAINCFG_43_HAS_HOME=true\nEDGE_DOMAINCFG_43_HAS_VPN=true\nEDGE_DOMAINCFG_43_HAS_ALLOW=false\nEDGE_DOMAINCFG_43_HAS_DENY=false\nEDGE_DOMAINCFG_43_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_44_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-warning-monitoring-closure-20260621/index.html\nEDGE_DOMAINCFG_44_HAS_HOME=true\nEDGE_DOMAINCFG_44_HAS_VPN=false\nEDGE_DOMAINCFG_44_HAS_ALLOW=false\nEDGE_DOMAINCFG_44_HAS_DENY=false\nEDGE_DOMAINCFG_44_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_45_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-post-ui-final-closure-20260621/index.html\nEDGE_DOMAINCFG_45_HAS_HOME=true\nEDGE_DOMAINCFG_45_HAS_VPN=false\nEDGE_DOMAINCFG_45_HAS_ALLOW=false\nEDGE_DOMAINCFG_45_HAS_DENY=false\nEDGE_DOMAINCFG_45_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_46_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-services-full-npmplus-visibility-patch-20260621/index.html\nEDGE_DOMAINCFG_46_HAS_HOME=true\nEDGE_DOMAINCFG_46_HAS_VPN=true\nEDGE_DOMAINCFG_46_HAS_ALLOW=false\nEDGE_DOMAINCFG_46_HAS_DENY=false\nEDGE_DOMAINCFG_46_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_47_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homelab-service-visibility-strict-audit-20260621/index.html\nEDGE_DOMAINCFG_47_HAS_HOME=true\nEDGE_DOMAINCFG_47_HAS_VPN=true\nEDGE_DOMAINCFG_47_HAS_ALLOW=false\nEDGE_DOMAINCFG_47_HAS_DENY=false\nEDGE_DOMAINCFG_47_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_48_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/vpn-domain-route-and-homepage-hostvalidation-fix-20260623/index.html\nEDGE_DOMAINCFG_48_HAS_HOME=false\nEDGE_DOMAINCFG_48_HAS_VPN=true\nEDGE_DOMAINCFG_48_HAS_ALLOW=false\nEDGE_DOMAINCFG_48_HAS_DENY=false\nEDGE_DOMAINCFG_48_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_49_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-all-runtime-services-visible-patch-20260621/index.html\nEDGE_DOMAINCFG_49_HAS_HOME=true\nEDGE_DOMAINCFG_49_HAS_VPN=true\nEDGE_DOMAINCFG_49_HAS_ALLOW=false\nEDGE_DOMAINCFG_49_HAS_DENY=false\nEDGE_DOMAINCFG_49_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_50_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-runtime-full-visibility-final-closure-20260621/index.html\nEDGE_DOMAINCFG_50_HAS_HOME=true\nEDGE_DOMAINCFG_50_HAS_VPN=true\nEDGE_DOMAINCFG_50_HAS_ALLOW=false\nEDGE_DOMAINCFG_50_HAS_DENY=false\nEDGE_DOMAINCFG_50_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_51_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-fix-schema-preflight-20260621/index.html\nEDGE_DOMAINCFG_51_HAS_HOME=true\nEDGE_DOMAINCFG_51_HAS_VPN=false\nEDGE_DOMAINCFG_51_HAS_ALLOW=false\nEDGE_DOMAINCFG_51_HAS_DENY=false\nEDGE_DOMAINCFG_51_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_52_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-vpn-alias-cards-patch-20260622/index.html\nEDGE_DOMAINCFG_52_HAS_HOME=false\nEDGE_DOMAINCFG_52_HAS_VPN=true\nEDGE_DOMAINCFG_52_HAS_ALLOW=false\nEDGE_DOMAINCFG_52_HAS_DENY=false\nEDGE_DOMAINCFG_52_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_53_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/vpn-domain-route-recovery-v2-20260623/index.html\nEDGE_DOMAINCFG_53_HAS_HOME=false\nEDGE_DOMAINCFG_53_HAS_VPN=true\nEDGE_DOMAINCFG_53_HAS_ALLOW=false\nEDGE_DOMAINCFG_53_HAS_DENY=false\nEDGE_DOMAINCFG_53_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_54_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-vpn-route-batch-1-retry-20260622/index.html\nEDGE_DOMAINCFG_54_HAS_HOME=false\nEDGE_DOMAINCFG_54_HAS_VPN=true\nEDGE_DOMAINCFG_54_HAS_ALLOW=false\nEDGE_DOMAINCFG_54_HAS_DENY=false\nEDGE_DOMAINCFG_54_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_55_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-warning-checker-patch-20260621/index.html\nEDGE_DOMAINCFG_55_HAS_HOME=true\nEDGE_DOMAINCFG_55_HAS_VPN=false\nEDGE_DOMAINCFG_55_HAS_ALLOW=false\nEDGE_DOMAINCFG_55_HAS_DENY=false\nEDGE_DOMAINCFG_55_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_56_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-public-dns-blocker-audit-20260621/index.html\nEDGE_DOMAINCFG_56_HAS_HOME=true\nEDGE_DOMAINCFG_56_HAS_VPN=false\nEDGE_DOMAINCFG_56_HAS_ALLOW=false\nEDGE_DOMAINCFG_56_HAS_DENY=false\nEDGE_DOMAINCFG_56_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_57_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/cloudflare-remaining-token-post-revoke-check-20260622/index.html\nEDGE_DOMAINCFG_57_HAS_HOME=false\nEDGE_DOMAINCFG_57_HAS_VPN=true\nEDGE_DOMAINCFG_57_HAS_ALLOW=false\nEDGE_DOMAINCFG_57_HAS_DENY=false\nEDGE_DOMAINCFG_57_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_58_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-certbot-path-layout-preflight-20260621/index.html\nEDGE_DOMAINCFG_58_HAS_HOME=true\nEDGE_DOMAINCFG_58_HAS_VPN=false\nEDGE_DOMAINCFG_58_HAS_ALLOW=false\nEDGE_DOMAINCFG_58_HAS_DENY=false\nEDGE_DOMAINCFG_58_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_59_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-clickability-grouping-audit-20260621/index.html\nEDGE_DOMAINCFG_59_HAS_HOME=true\nEDGE_DOMAINCFG_59_HAS_VPN=true\nEDGE_DOMAINCFG_59_HAS_ALLOW=false\nEDGE_DOMAINCFG_59_HAS_DENY=false\nEDGE_DOMAINCFG_59_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_60_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-vpn-dns-wildcard-patch-20260621/index.html\nEDGE_DOMAINCFG_60_HAS_HOME=false\nEDGE_DOMAINCFG_60_HAS_VPN=true\nEDGE_DOMAINCFG_60_HAS_ALLOW=false\nEDGE_DOMAINCFG_60_HAS_DENY=false\nEDGE_DOMAINCFG_60_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_61_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-checker-prepatch-inspect-20260621/index.html\nEDGE_DOMAINCFG_61_HAS_HOME=true\nEDGE_DOMAINCFG_61_HAS_VPN=false\nEDGE_DOMAINCFG_61_HAS_ALLOW=false\nEDGE_DOMAINCFG_61_HAS_DENY=false\nEDGE_DOMAINCFG_61_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_62_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/post-revoke-final-docs-runtime-closure-20260622/index.html\nEDGE_DOMAINCFG_62_HAS_HOME=false\nEDGE_DOMAINCFG_62_HAS_VPN=true\nEDGE_DOMAINCFG_62_HAS_ALLOW=false\nEDGE_DOMAINCFG_62_HAS_DENY=false\nEDGE_DOMAINCFG_62_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_63_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-vpn-route-batch-2-20260622/index.html\nEDGE_DOMAINCFG_63_HAS_HOME=false\nEDGE_DOMAINCFG_63_HAS_VPN=true\nEDGE_DOMAINCFG_63_HAS_ALLOW=false\nEDGE_DOMAINCFG_63_HAS_DENY=false\nEDGE_DOMAINCFG_63_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_64_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-grouping-href-patch-20260622/index.html\nEDGE_DOMAINCFG_64_HAS_HOME=true\nEDGE_DOMAINCFG_64_HAS_VPN=false\nEDGE_DOMAINCFG_64_HAS_ALLOW=false\nEDGE_DOMAINCFG_64_HAS_DENY=false\nEDGE_DOMAINCFG_64_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_65_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-routes-strict-tls-audit-20260621/index.html\nEDGE_DOMAINCFG_65_HAS_HOME=true\nEDGE_DOMAINCFG_65_HAS_VPN=false\nEDGE_DOMAINCFG_65_HAS_ALLOW=false\nEDGE_DOMAINCFG_65_HAS_DENY=false\nEDGE_DOMAINCFG_65_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_66_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-full-visibility-closure-rescan-fixed-20260621/index.html\nEDGE_DOMAINCFG_66_HAS_HOME=true\nEDGE_DOMAINCFG_66_HAS_VPN=true\nEDGE_DOMAINCFG_66_HAS_ALLOW=false\nEDGE_DOMAINCFG_66_HAS_DENY=false\nEDGE_DOMAINCFG_66_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_67_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-production-update-20260619/index.html\nEDGE_DOMAINCFG_67_HAS_HOME=true\nEDGE_DOMAINCFG_67_HAS_VPN=false\nEDGE_DOMAINCFG_67_HAS_ALLOW=false\nEDGE_DOMAINCFG_67_HAS_DENY=false\nEDGE_DOMAINCFG_67_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_68_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/search/search_index.json\nEDGE_DOMAINCFG_68_HAS_HOME=true\nEDGE_DOMAINCFG_68_HAS_VPN=true\nEDGE_DOMAINCFG_68_HAS_ALLOW=true\nEDGE_DOMAINCFG_68_HAS_DENY=true\nEDGE_DOMAINCFG_68_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_69_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/index.html\nEDGE_DOMAINCFG_69_HAS_HOME=true\nEDGE_DOMAINCFG_69_HAS_VPN=false\nEDGE_DOMAINCFG_69_HAS_ALLOW=false\nEDGE_DOMAINCFG_69_HAS_DENY=false\nEDGE_DOMAINCFG_69_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_70_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/inventory/domains.csv\nEDGE_DOMAINCFG_70_HAS_HOME=true\nEDGE_DOMAINCFG_70_HAS_VPN=false\nEDGE_DOMAINCFG_70_HAS_ALLOW=false\nEDGE_DOMAINCFG_70_HAS_DENY=false\nEDGE_DOMAINCFG_70_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_71_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/inventory/ports/index.html\nEDGE_DOMAINCFG_71_HAS_HOME=true\nEDGE_DOMAINCFG_71_HAS_VPN=false\nEDGE_DOMAINCFG_71_HAS_ALLOW=false\nEDGE_DOMAINCFG_71_HAS_DENY=false\nEDGE_DOMAINCFG_71_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_72_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/runbooks/01-add-new-service/index.html\nEDGE_DOMAINCFG_72_HAS_HOME=true\nEDGE_DOMAINCFG_72_HAS_VPN=false\nEDGE_DOMAINCFG_72_HAS_ALLOW=false\nEDGE_DOMAINCFG_72_HAS_DENY=false\nEDGE_DOMAINCFG_72_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_73_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/runbooks/00-restore-from-zero-for-beginners/index.html\nEDGE_DOMAINCFG_73_HAS_HOME=true\nEDGE_DOMAINCFG_73_HAS_VPN=false\nEDGE_DOMAINCFG_73_HAS_ALLOW=false\nEDGE_DOMAINCFG_73_HAS_DENY=false\nEDGE_DOMAINCFG_73_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_74_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618/index.html\nEDGE_DOMAINCFG_74_HAS_HOME=false\nEDGE_DOMAINCFG_74_HAS_VPN=true\nEDGE_DOMAINCFG_74_HAS_ALLOW=false\nEDGE_DOMAINCFG_74_HAS_DENY=false\nEDGE_DOMAINCFG_74_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_75_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/99-current-state-summary/index.html\nEDGE_DOMAINCFG_75_HAS_HOME=true\nEDGE_DOMAINCFG_75_HAS_VPN=true\nEDGE_DOMAINCFG_75_HAS_ALLOW=false\nEDGE_DOMAINCFG_75_HAS_DENY=false\nEDGE_DOMAINCFG_75_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_76_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/05-service-catalog/index.html\nEDGE_DOMAINCFG_76_HAS_HOME=true\nEDGE_DOMAINCFG_76_HAS_VPN=false\nEDGE_DOMAINCFG_76_HAS_ALLOW=false\nEDGE_DOMAINCFG_76_HAS_DENY=false\nEDGE_DOMAINCFG_76_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_77_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/HANDOFF-20260618-authentik-npmplus/index.html\nEDGE_DOMAINCFG_77_HAS_HOME=false\nEDGE_DOMAINCFG_77_HAS_VPN=true\nEDGE_DOMAINCFG_77_HAS_ALLOW=false\nEDGE_DOMAINCFG_77_HAS_DENY=false\nEDGE_DOMAINCFG_77_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_78_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/06-certificates-troubleshooting/index.html\nEDGE_DOMAINCFG_78_HAS_HOME=true\nEDGE_DOMAINCFG_78_HAS_VPN=false\nEDGE_DOMAINCFG_78_HAS_ALLOW=false\nEDGE_DOMAINCFG_78_HAS_DENY=false\nEDGE_DOMAINCFG_78_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_79_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/ERRORS-LESSONS-20260618/index.html\nEDGE_DOMAINCFG_79_HAS_HOME=false\nEDGE_DOMAINCFG_79_HAS_VPN=true\nEDGE_DOMAINCFG_79_HAS_ALLOW=false\nEDGE_DOMAINCFG_79_HAS_DENY=false\nEDGE_DOMAINCFG_79_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_80_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/service-url-catalog/index.html\nEDGE_DOMAINCFG_80_HAS_HOME=true\nEDGE_DOMAINCFG_80_HAS_VPN=true\nEDGE_DOMAINCFG_80_HAS_ALLOW=false\nEDGE_DOMAINCFG_80_HAS_DENY=false\nEDGE_DOMAINCFG_80_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_81_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/SERVICES-BOOTSTRAP-20260617/index.html\nEDGE_DOMAINCFG_81_HAS_HOME=false\nEDGE_DOMAINCFG_81_HAS_VPN=true\nEDGE_DOMAINCFG_81_HAS_ALLOW=false\nEDGE_DOMAINCFG_81_HAS_DENY=false\nEDGE_DOMAINCFG_81_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_82_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-certificate-expiry-audit-20260621/index.html\nEDGE_DOMAINCFG_82_HAS_HOME=true\nEDGE_DOMAINCFG_82_HAS_VPN=false\nEDGE_DOMAINCFG_82_HAS_ALLOW=false\nEDGE_DOMAINCFG_82_HAS_DENY=false\nEDGE_DOMAINCFG_82_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_83_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-services-prepatch-snapshot-20260621/index.html\nEDGE_DOMAINCFG_83_HAS_HOME=true\nEDGE_DOMAINCFG_83_HAS_VPN=true\nEDGE_DOMAINCFG_83_HAS_ALLOW=false\nEDGE_DOMAINCFG_83_HAS_DENY=false\nEDGE_DOMAINCFG_83_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_84_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-warning-monitoring-closure-20260621/index.html\nEDGE_DOMAINCFG_84_HAS_HOME=true\nEDGE_DOMAINCFG_84_HAS_VPN=false\nEDGE_DOMAINCFG_84_HAS_ALLOW=false\nEDGE_DOMAINCFG_84_HAS_DENY=false\nEDGE_DOMAINCFG_84_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_85_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-post-ui-final-closure-20260621/index.html\nEDGE_DOMAINCFG_85_HAS_HOME=true\nEDGE_DOMAINCFG_85_HAS_VPN=false\nEDGE_DOMAINCFG_85_HAS_ALLOW=false\nEDGE_DOMAINCFG_85_HAS_DENY=false\nEDGE_DOMAINCFG_85_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_86_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-services-full-npmplus-visibility-patch-20260621/index.html\nEDGE_DOMAINCFG_86_HAS_HOME=true\nEDGE_DOMAINCFG_86_HAS_VPN=true\nEDGE_DOMAINCFG_86_HAS_ALLOW=false\nEDGE_DOMAINCFG_86_HAS_DENY=false\nEDGE_DOMAINCFG_86_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_87_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homelab-service-visibility-strict-audit-20260621/index.html\nEDGE_DOMAINCFG_87_HAS_HOME=true\nEDGE_DOMAINCFG_87_HAS_VPN=true\nEDGE_DOMAINCFG_87_HAS_ALLOW=false\nEDGE_DOMAINCFG_87_HAS_DENY=false\nEDGE_DOMAINCFG_87_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_88_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/vpn-domain-route-and-homepage-hostvalidation-fix-20260623/index.html\nEDGE_DOMAINCFG_88_HAS_HOME=false\nEDGE_DOMAINCFG_88_HAS_VPN=true\nEDGE_DOMAINCFG_88_HAS_ALLOW=false\nEDGE_DOMAINCFG_88_HAS_DENY=false\nEDGE_DOMAINCFG_88_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_89_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-all-runtime-services-visible-patch-20260621/index.html\nEDGE_DOMAINCFG_89_HAS_HOME=true\nEDGE_DOMAINCFG_89_HAS_VPN=true\nEDGE_DOMAINCFG_89_HAS_ALLOW=false\nEDGE_DOMAINCFG_89_HAS_DENY=false\nEDGE_DOMAINCFG_89_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_90_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-runtime-full-visibility-final-closure-20260621/index.html\nEDGE_DOMAINCFG_90_HAS_HOME=true\nEDGE_DOMAINCFG_90_HAS_VPN=true\nEDGE_DOMAINCFG_90_HAS_ALLOW=false\nEDGE_DOMAINCFG_90_HAS_DENY=false\nEDGE_DOMAINCFG_90_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_91_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-fix-schema-preflight-20260621/index.html\nEDGE_DOMAINCFG_91_HAS_HOME=true\nEDGE_DOMAINCFG_91_HAS_VPN=false\nEDGE_DOMAINCFG_91_HAS_ALLOW=false\nEDGE_DOMAINCFG_91_HAS_DENY=false\nEDGE_DOMAINCFG_91_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_92_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-vpn-alias-cards-patch-20260622/index.html\nEDGE_DOMAINCFG_92_HAS_HOME=false\nEDGE_DOMAINCFG_92_HAS_VPN=true\nEDGE_DOMAINCFG_92_HAS_ALLOW=false\nEDGE_DOMAINCFG_92_HAS_DENY=false\nEDGE_DOMAINCFG_92_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_93_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/vpn-domain-route-recovery-v2-20260623/index.html\nEDGE_DOMAINCFG_93_HAS_HOME=false\nEDGE_DOMAINCFG_93_HAS_VPN=true\nEDGE_DOMAINCFG_93_HAS_ALLOW=false\nEDGE_DOMAINCFG_93_HAS_DENY=false\nEDGE_DOMAINCFG_93_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_94_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-vpn-route-batch-1-retry-20260622/index.html\nEDGE_DOMAINCFG_94_HAS_HOME=false\nEDGE_DOMAINCFG_94_HAS_VPN=true\nEDGE_DOMAINCFG_94_HAS_ALLOW=false\nEDGE_DOMAINCFG_94_HAS_DENY=false\nEDGE_DOMAINCFG_94_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_95_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-warning-checker-patch-20260621/index.html\nEDGE_DOMAINCFG_95_HAS_HOME=true\nEDGE_DOMAINCFG_95_HAS_VPN=false\nEDGE_DOMAINCFG_95_HAS_ALLOW=false\nEDGE_DOMAINCFG_95_HAS_DENY=false\nEDGE_DOMAINCFG_95_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_96_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-public-dns-blocker-audit-20260621/index.html\nEDGE_DOMAINCFG_96_HAS_HOME=true\nEDGE_DOMAINCFG_96_HAS_VPN=false\nEDGE_DOMAINCFG_96_HAS_ALLOW=false\nEDGE_DOMAINCFG_96_HAS_DENY=false\nEDGE_DOMAINCFG_96_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_97_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/cloudflare-remaining-token-post-revoke-check-20260622/index.html\nEDGE_DOMAINCFG_97_HAS_HOME=false\nEDGE_DOMAINCFG_97_HAS_VPN=true\nEDGE_DOMAINCFG_97_HAS_ALLOW=false\nEDGE_DOMAINCFG_97_HAS_DENY=false\nEDGE_DOMAINCFG_97_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_98_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-certbot-path-layout-preflight-20260621/index.html\nEDGE_DOMAINCFG_98_HAS_HOME=true\nEDGE_DOMAINCFG_98_HAS_VPN=false\nEDGE_DOMAINCFG_98_HAS_ALLOW=false\nEDGE_DOMAINCFG_98_HAS_DENY=false\nEDGE_DOMAINCFG_98_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_99_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-clickability-grouping-audit-20260621/index.html\nEDGE_DOMAINCFG_99_HAS_HOME=true\nEDGE_DOMAINCFG_99_HAS_VPN=true\nEDGE_DOMAINCFG_99_HAS_ALLOW=false\nEDGE_DOMAINCFG_99_HAS_DENY=false\nEDGE_DOMAINCFG_99_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_100_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-vpn-dns-wildcard-patch-20260621/index.html\nEDGE_DOMAINCFG_100_HAS_HOME=false\nEDGE_DOMAINCFG_100_HAS_VPN=true\nEDGE_DOMAINCFG_100_HAS_ALLOW=false\nEDGE_DOMAINCFG_100_HAS_DENY=false\nEDGE_DOMAINCFG_100_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_101_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-checker-prepatch-inspect-20260621/index.html\nEDGE_DOMAINCFG_101_HAS_HOME=true\nEDGE_DOMAINCFG_101_HAS_VPN=false\nEDGE_DOMAINCFG_101_HAS_ALLOW=false\nEDGE_DOMAINCFG_101_HAS_DENY=false\nEDGE_DOMAINCFG_101_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_102_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/post-revoke-final-docs-runtime-closure-20260622/index.html\nEDGE_DOMAINCFG_102_HAS_HOME=false\nEDGE_DOMAINCFG_102_HAS_VPN=true\nEDGE_DOMAINCFG_102_HAS_ALLOW=false\nEDGE_DOMAINCFG_102_HAS_DENY=false\nEDGE_DOMAINCFG_102_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_103_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-vpn-route-batch-2-20260622/index.html\nEDGE_DOMAINCFG_103_HAS_HOME=false\nEDGE_DOMAINCFG_103_HAS_VPN=true\nEDGE_DOMAINCFG_103_HAS_ALLOW=false\nEDGE_DOMAINCFG_103_HAS_DENY=false\nEDGE_DOMAINCFG_103_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_104_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-grouping-href-patch-20260622/index.html\nEDGE_DOMAINCFG_104_HAS_HOME=true\nEDGE_DOMAINCFG_104_HAS_VPN=false\nEDGE_DOMAINCFG_104_HAS_ALLOW=false\nEDGE_DOMAINCFG_104_HAS_DENY=false\nEDGE_DOMAINCFG_104_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_105_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-routes-strict-tls-audit-20260621/index.html\nEDGE_DOMAINCFG_105_HAS_HOME=true\nEDGE_DOMAINCFG_105_HAS_VPN=false\nEDGE_DOMAINCFG_105_HAS_ALLOW=false\nEDGE_DOMAINCFG_105_HAS_DENY=false\nEDGE_DOMAINCFG_105_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_106_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-full-visibility-closure-rescan-fixed-20260621/index.html\nEDGE_DOMAINCFG_106_HAS_HOME=true\nEDGE_DOMAINCFG_106_HAS_VPN=true\nEDGE_DOMAINCFG_106_HAS_ALLOW=false\nEDGE_DOMAINCFG_106_HAS_DENY=false\nEDGE_DOMAINCFG_106_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_107_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-production-update-20260619/index.html\nEDGE_DOMAINCFG_107_HAS_HOME=true\nEDGE_DOMAINCFG_107_HAS_VPN=false\nEDGE_DOMAINCFG_107_HAS_ALLOW=false\nEDGE_DOMAINCFG_107_HAS_DENY=false\nEDGE_DOMAINCFG_107_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_108_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/search/search_index.json\nEDGE_DOMAINCFG_108_HAS_HOME=true\nEDGE_DOMAINCFG_108_HAS_VPN=true\nEDGE_DOMAINCFG_108_HAS_ALLOW=true\nEDGE_DOMAINCFG_108_HAS_DENY=true\nEDGE_DOMAINCFG_108_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_109_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/index.html\nEDGE_DOMAINCFG_109_HAS_HOME=true\nEDGE_DOMAINCFG_109_HAS_VPN=false\nEDGE_DOMAINCFG_109_HAS_ALLOW=false\nEDGE_DOMAINCFG_109_HAS_DENY=false\nEDGE_DOMAINCFG_109_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_110_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/inventory/domains.csv\nEDGE_DOMAINCFG_110_HAS_HOME=true\nEDGE_DOMAINCFG_110_HAS_VPN=false\nEDGE_DOMAINCFG_110_HAS_ALLOW=false\nEDGE_DOMAINCFG_110_HAS_DENY=false\nEDGE_DOMAINCFG_110_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_111_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/inventory/ports/index.html\nEDGE_DOMAINCFG_111_HAS_HOME=true\nEDGE_DOMAINCFG_111_HAS_VPN=false\nEDGE_DOMAINCFG_111_HAS_ALLOW=false\nEDGE_DOMAINCFG_111_HAS_DENY=false\nEDGE_DOMAINCFG_111_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_112_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/runbooks/01-add-new-service/index.html\nEDGE_DOMAINCFG_112_HAS_HOME=true\nEDGE_DOMAINCFG_112_HAS_VPN=false\nEDGE_DOMAINCFG_112_HAS_ALLOW=false\nEDGE_DOMAINCFG_112_HAS_DENY=false\nEDGE_DOMAINCFG_112_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_113_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/runbooks/00-restore-from-zero-for-beginners/index.html\nEDGE_DOMAINCFG_113_HAS_HOME=true\nEDGE_DOMAINCFG_113_HAS_VPN=false\nEDGE_DOMAINCFG_113_HAS_ALLOW=false\nEDGE_DOMAINCFG_113_HAS_DENY=false\nEDGE_DOMAINCFG_113_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_114_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618/index.html\nEDGE_DOMAINCFG_114_HAS_HOME=false\nEDGE_DOMAINCFG_114_HAS_VPN=true\nEDGE_DOMAINCFG_114_HAS_ALLOW=false\nEDGE_DOMAINCFG_114_HAS_DENY=false\nEDGE_DOMAINCFG_114_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_115_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/99-current-state-summary/index.html\nEDGE_DOMAINCFG_115_HAS_HOME=true\nEDGE_DOMAINCFG_115_HAS_VPN=true\nEDGE_DOMAINCFG_115_HAS_ALLOW=false\nEDGE_DOMAINCFG_115_HAS_DENY=false\nEDGE_DOMAINCFG_115_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_116_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/05-service-catalog/index.html\nEDGE_DOMAINCFG_116_HAS_HOME=true\nEDGE_DOMAINCFG_116_HAS_VPN=false\nEDGE_DOMAINCFG_116_HAS_ALLOW=false\nEDGE_DOMAINCFG_116_HAS_DENY=false\nEDGE_DOMAINCFG_116_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_117_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/HANDOFF-20260618-authentik-npmplus/index.html\nEDGE_DOMAINCFG_117_HAS_HOME=false\nEDGE_DOMAINCFG_117_HAS_VPN=true\nEDGE_DOMAINCFG_117_HAS_ALLOW=false\nEDGE_DOMAINCFG_117_HAS_DENY=false\nEDGE_DOMAINCFG_117_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_118_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/06-certificates-troubleshooting/index.html\nEDGE_DOMAINCFG_118_HAS_HOME=true\nEDGE_DOMAINCFG_118_HAS_VPN=false\nEDGE_DOMAINCFG_118_HAS_ALLOW=false\nEDGE_DOMAINCFG_118_HAS_DENY=false\nEDGE_DOMAINCFG_118_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_119_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/ERRORS-LESSONS-20260618/index.html\nEDGE_DOMAINCFG_119_HAS_HOME=false\nEDGE_DOMAINCFG_119_HAS_VPN=true\nEDGE_DOMAINCFG_119_HAS_ALLOW=false\nEDGE_DOMAINCFG_119_HAS_DENY=false\nEDGE_DOMAINCFG_119_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_120_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/service-url-catalog/index.html\nEDGE_DOMAINCFG_120_HAS_HOME=true\nEDGE_DOMAINCFG_120_HAS_VPN=true\nEDGE_DOMAINCFG_120_HAS_ALLOW=false\nEDGE_DOMAINCFG_120_HAS_DENY=false\nEDGE_DOMAINCFG_120_HAS_AUTH_REQUEST=false\nEDGE_PROXY_CONTAINER_COUNT=1\nEDGE_PROXY_DB_CANDIDATE_COUNT=1\nEDGE_PROXY_DB_SELECTED=true\nEDGE_PROXY_DB_PATH_SHA=36a7644962bc77f6f2ab31bf092004ded1daf0d1eb4421ac479f92a54b4c4c60\nEDGE_PROXY_MATCH_COUNT=2\nEDGE_PROXY_1_ID=8\nEDGE_PROXY_1_DOMAINS=[\"home.gram1.ru\"]\nEDGE_PROXY_1_FORWARD_SCHEME=http\nEDGE_PROXY_1_FORWARD_HOST_CLASS=private\nEDGE_PROXY_1_FORWARD_HOST_SHA=3eb2319e39eac307b3c7bd11f67663c0a0c814fd603989f5965083f9d1c80fb0\nEDGE_PROXY_1_FORWARD_PORT=3000\nEDGE_PROXY_1_ACCESS_LIST_ID=1\nEDGE_PROXY_1_SSL_FORCED=1\nEDGE_PROXY_1_ENABLED=1\nEDGE_PROXY_1_ADV_HAS_ALLOW=false\nEDGE_PROXY_1_ADV_HAS_DENY=false\nEDGE_PROXY_1_ADV_HAS_AUTH=false\nEDGE_PROXY_1_BACKEND_HTTP=200\nEDGE_PROXY_2_ID=17\nEDGE_PROXY_2_DOMAINS=[\"homepage.vpn.gram1.ru\"]\nEDGE_PROXY_2_FORWARD_SCHEME=http\nEDGE_PROXY_2_FORWARD_HOST_CLASS=private\nEDGE_PROXY_2_FORWARD_HOST_SHA=3eb2319e39eac307b3c7bd11f67663c0a0c814fd603989f5965083f9d1c80fb0\nEDGE_PROXY_2_FORWARD_PORT=3000\nEDGE_PROXY_2_ACCESS_LIST_ID=1\nEDGE_PROXY_2_SSL_FORCED=1\nEDGE_PROXY_2_ENABLED=1\nEDGE_PROXY_2_ADV_HAS_ALLOW=false\nEDGE_PROXY_2_ADV_HAS_DENY=false\nEDGE_PROXY_2_ADV_HAS_AUTH=false\nEDGE_PROXY_2_BACKEND_HTTP=200\nEDGE_USED_ACL_COUNT=1\nEDGE_ACL_1_ID=1\nEDGE_ACL_1_NAME=LAN only\nEDGE_ACL_1_SATISFY_ANY=0\nEDGE_ACL_1_PASS_AUTH=0\nEDGE_ACL_1_RULE_COUNT=4\nEDGE_ACL_1_RULE_1_CLASS=private\nEDGE_ACL_1_RULE_1_SHA=3bc5d8aba5c1426425a0ad3770bf77782d3f16a12d4455ad3d3a7ce324a5910a\nEDGE_ACL_1_RULE_1_DIRECTIVE=allow\nEDGE_ACL_1_RULE_2_CLASS=private\nEDGE_ACL_1_RULE_2_SHA=d01a825c13311b46a70c53405baab8c9aab1ceda5076cf56ef86d1d8c8673f5a\nEDGE_ACL_1_RULE_2_DIRECTIVE=allow\nEDGE_ACL_1_RULE_3_CLASS=private\nEDGE_ACL_1_RULE_3_SHA=783712746109b3d66507177fc2ac066b768aac772e5c9d7f20b28f4c7b5ef641\nEDGE_ACL_1_RULE_3_DIRECTIVE=allow\nEDGE_ACL_1_RULE_4_CLASS=private\nEDGE_ACL_1_RULE_4_SHA=9422ac7ba7ba4ebf2d71db387c71b97ed1709669d2d2e55408128148cfae4daf\nEDGE_ACL_1_RULE_4_DIRECTIVE=allow\nEDGE_RECENT_403_COUNT=0\nSOURCE_1_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_1_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-backup:53: echo \"NETBIRD_ACTIVE=$(systemctl is-active netbird 2>/dev/null || true)\"\nSOURCE_2_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_2_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:197: facts[\"netbird_route\"] = route\nSOURCE_3_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_3_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:199: problems.append(\"netbird_route_not_wt0\")\nSOURCE_4_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_4_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:290: f\"- NetBird route: {facts.get('netbird_route')}\",\nSOURCE_5_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_5_LINE=tests/test_cr_2026_0005.py:33: for forbidden in (\"paperless\", \"netbird\", \"vm160\", \"pve02\", \"pve03\", \"cluster/backup\"):\nSOURCE_6_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_6_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-status:51:section \"EDGE-VM: монитор, NetBird и расширения\"\nSOURCE_7_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_7_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:290: f\"- NetBird route: {facts.get('netbird_route')}\",\nSOURCE_8_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_8_LINE=.gitea/workflows/validate-kb.yml:59: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2\nSOURCE_9_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_9_LINE=kb/integration/validate-kb.yml.template:31: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2\nSOURCE_10_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_10_LINE=kb/lessons/known_failures.json:423: \"netbird\",\nSOURCE_11_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_11_LINE=kb/lessons/known_failures_public.json:247: \"netbird\",\nSOURCE_12_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_12_LINE=kb/private/access.json:88: \"id\": \"new_usa_netbird\",\nSOURCE_13_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_13_LINE=kb/private/archive/2026-08-19/docs/03_SERVICE_CATALOG.md:104:- `netbird.service`\nSOURCE_14_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_14_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:66:`/root/netbird-cutover-20260818T145807Z`\nSOURCE_15_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_15_LINE=kb/private/archive/2026-08-19/docs/27_SECURITY_ACCESS_CURRENT_DELTA_2026-08-19.md:6:`[SENSITIVE_PATH]\nSOURCE_16_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_16_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:15: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_17_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_17_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:25: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_18_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_18_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:36: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_19_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_19_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:463: \"netbird.service\",\nSOURCE_20_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_20_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:682: \"netbird.service\",\nSOURCE_21_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_21_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:686: \"skladchik-ct200-netbird-egress.service\",\nSOURCE_22_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_22_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:771: \"udp UNCONN 0 0 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=38)) \",\nSOURCE_23_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_23_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:776: \"udp UNCONN 0 0 [IP_REDACTED]:3128 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=27)) \",\nSOURCE_24_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_24_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:819: \"tcp LISTEN 0 4096 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=39)) \",\nSOURCE_25_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_25_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:40:netbird:\nSOURCE_26_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_26_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:53: old_secondary_netbird_ipv4: \"[IP_REDACTED]\"\nSOURCE_27_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_27_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:54: netbird_server: STOPPED\nSOURCE_28_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_28_LINE=KB_START_HERE.md:27:- Не считать NetBird 0.73.2 `/api/health` или `:9000/health` обязательным readiness gate.\nSOURCE_29_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_29_LINE=deploy/homelab-command-stack/payload/homelab-command-portal:651:

Ссылка одноразовая и уже привязана к этому NetBird-адресу.

\nSOURCE_30_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_30_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:18:- NetBird service must be `active`.\nSOURCE_31_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_31_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:72:This document supersedes older observer assumptions that require `nc.gram1.ru` or Nextcloud availability. It does not change Mailcow, NetBird routing, Gotify, firewall policy, or Snikket.\nSOURCE_32_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_32_LINE=docs/superpowers/specs/2026-08-31-cr0103-command-stack-boot-readiness-design.md:92:- change NetBird configuration;\nSOURCE_33_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_33_LINE=kb/AI_CONTEXT.md:15:- pve01 `[IP_REDACTED]`, operator historical NetBird path `root@[IP_REDACTED]`, MobaXterm key label `eddsa-key-20260617`.\nSOURCE_34_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_34_LINE=kb/AI_CONTEXT.md:30:## NetBird migration\nSOURCE_35_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_35_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.\nSOURCE_36_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_36_LINE=kb/AI_CONTEXT_PUBLIC.md:20:- New USA is current NetBird production on version 0.73.2. Its historical `/api/health` and combined `:9000/health` responses are not valid generic readiness gates.\nSOURCE_37_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_37_LINE=kb/current/01_CURRENT_STATE.md:12:- old Mailcow/old NetBird server architecture is retired from production; rollback window remains.\nSOURCE_38_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_38_LINE=kb/current/04_P0_NEXT.md:5:3. Canonical post-migration CR including NetBird new USA, Postbox/Null MX, Moldova V3/Gotify, old-USA retirement window and dependencies.\nSOURCE_39_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_39_LINE=kb/current/04_P0_NEXT.md:12:Do not mix unrelated changes into these gates (e.g. NetBird version upgrade/hostname change during SSH hardening).\nSOURCE_40_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_40_LINE=kb/inventory/guests.json:59: \"role\": \"edge-vm: домашний ingress/NPMplus, NetBird/WireGuard, edge observability/backup services\",\nSOURCE_41_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_41_LINE=kb/lessons/known_failures.json:430: \"incident\": \"On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.\",\nSOURCE_42_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_42_LINE=kb/lessons/known_failures_public.json:250: \"incident\": \"On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.\",\nSOURCE_43_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_43_LINE=kb/private/archive/2026-08-19/README_FIRST.md:11:- добавлены NetBird/Mailcow/Postbox/Moldova/AlexHost/forum tails;\nSOURCE_44_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_44_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:16:6. SSH-hardening нового USA NetBird VPS.\nSOURCE_45_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_45_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:24:- NetBird production перенесён на `[IP_REDACTED]`.\nSOURCE_46_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_46_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production\nSOURCE_47_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_47_LINE=.gitea/workflows/validate-kb.yml:31: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2\nSOURCE_48_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_48_LINE=kb/integration/validate-kb.yml.template:31: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2\nSOURCE_49_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_49_LINE=kb/lessons/known_failures.json:423: \"netbird\",\nSOURCE_50_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_50_LINE=kb/lessons/known_failures_public.json:247: \"netbird\",\nSOURCE_51_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_51_LINE=kb/private/access.json:88: \"id\": \"new_usa_netbird\",\nSOURCE_52_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_52_LINE=kb/private/archive/2026-08-19/docs/03_SERVICE_CATALOG.md:104:- `netbird.service`\nSOURCE_53_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_53_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:66:`/root/netbird-cutover-20260818T145807Z`\nSOURCE_54_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_54_LINE=kb/private/archive/2026-08-19/docs/27_SECURITY_ACCESS_CURRENT_DELTA_2026-08-19.md:6:`[SENSITIVE_PATH]\nSOURCE_55_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_55_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:15: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_56_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_56_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:25: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_57_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_57_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:36: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_58_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_58_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:463: \"netbird.service\",\nSOURCE_59_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_59_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:682: \"netbird.service\",\nSOURCE_60_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_60_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:686: \"skladchik-ct200-netbird-egress.service\",\nSOURCE_61_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_61_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:771: \"udp UNCONN 0 0 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=38)) \",\nSOURCE_62_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_62_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:776: \"udp UNCONN 0 0 [IP_REDACTED]:3128 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=27)) \",\nSOURCE_63_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_63_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:819: \"tcp LISTEN 0 4096 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=39)) \",\nSOURCE_64_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_64_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:40:netbird:\nSOURCE_65_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_65_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:53: old_secondary_netbird_ipv4: \"[IP_REDACTED]\"\nSOURCE_66_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_66_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:54: netbird_server: STOPPED\nSOURCE_67_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_67_LINE=KB_START_HERE.md:27:- Не считать NetBird 0.73.2 `/api/health` или `:9000/health` обязательным readiness gate.\nSOURCE_68_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_68_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:18:- NetBird service must be `active`.\nSOURCE_69_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_69_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:72:This document supersedes older observer assumptions that require `nc.gram1.ru` or Nextcloud availability. It does not change Mailcow, NetBird routing, Gotify, firewall policy, or Snikket.\nSOURCE_70_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_70_LINE=kb/AI_CONTEXT.md:15:- pve01 `[IP_REDACTED]`, operator historical NetBird path `root@[IP_REDACTED]`, MobaXterm key label `eddsa-key-20260617`.\nSOURCE_71_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_71_LINE=kb/AI_CONTEXT.md:30:## NetBird migration\nSOURCE_72_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_72_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.\nSOURCE_73_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_73_LINE=kb/AI_CONTEXT_PUBLIC.md:20:- New USA is current NetBird production on version 0.73.2. Its historical `/api/health` and combined `:9000/health` responses are not valid generic readiness gates.\nSOURCE_74_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_74_LINE=kb/current/01_CURRENT_STATE.md:12:- old Mailcow/old NetBird server architecture is retired from production; rollback window remains.\nSOURCE_75_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_75_LINE=kb/current/04_P0_NEXT.md:5:3. Canonical post-migration CR including NetBird new USA, Postbox/Null MX, Moldova V3/Gotify, old-USA retirement window and dependencies.\nSOURCE_76_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_76_LINE=kb/current/04_P0_NEXT.md:12:Do not mix unrelated changes into these gates (e.g. NetBird version upgrade/hostname change during SSH hardening).\nSOURCE_77_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_77_LINE=kb/inventory/guests.json:59: \"role\": \"edge-vm: домашний ingress/NPMplus, NetBird/WireGuard, edge observability/backup services\",\nSOURCE_78_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_78_LINE=kb/lessons/known_failures.json:430: \"incident\": \"On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.\",\nSOURCE_79_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_79_LINE=kb/lessons/known_failures_public.json:250: \"incident\": \"On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.\",\nSOURCE_80_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_80_LINE=kb/private/archive/2026-08-19/README_FIRST.md:11:- добавлены NetBird/Mailcow/Postbox/Moldova/AlexHost/forum tails;\nSOURCE_81_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_81_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:16:6. SSH-hardening нового USA NetBird VPS.\nSOURCE_82_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_82_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:24:- NetBird production перенесён на `[IP_REDACTED]`.\nSOURCE_83_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_83_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production\nSOURCE_84_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_84_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:211:- NetBird server SHA `efa4e50dbc556ccd7bdc5b0d977ff29fe21bdee3b7e312cba6e3fa53bbeec60b`\nSOURCE_85_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_85_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:215:NetBird server:\nSOURCE_86_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_86_LINE=README.md:9:- Homepage: https://home.gram1.ru\nSOURCE_87_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_87_LINE=README.md:53:- https://home.gram1.ru\nSOURCE_88_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_88_LINE=configs/sanitized/edge-vm/homepage-compose.yaml:9: HOMEPAGE_ALLOWED_HOSTS: home.gram1.ru,homepage.vpn.gram1.ru\nSOURCE_89_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_89_LINE=configs/sanitized/edge-vm/homepage-services.yaml:3: href: https://home.gram1.ru\nSOURCE_90_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_90_LINE=docs/05-service-catalog.md:67:- Domain: https://home.gram1.ru\nSOURCE_91_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_91_LINE=docs/06-certificates-troubleshooting.md:62:Observed with home.gram1.ru and git.gram1.ru before certificate completion.\nSOURCE_92_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_92_LINE=docs/06-certificates-troubleshooting.md:96:- home.gram1.ru: Lets Encrypt via Cloudflare DNS challenge.\nSOURCE_93_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_93_LINE=docs/99-current-state-summary.md:113:- URL: https://home.gram1.ru\nSOURCE_94_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_94_LINE=docs/99-current-state-summary.md:147:- https://home.gram1.ru\nSOURCE_95_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_95_LINE=docs/operations/p0-healthchecks-restore-proof-preflight-20260624T190801Z.md:65:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru\nSOURCE_96_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_96_LINE=docs/operations/p0-restore-drill-matrix-edge-index-20260624T183747Z.md:112:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru\nSOURCE_97_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_97_LINE=docs/operations/p0-restore-drill-matrix-quality-offhost-20260624T183931Z.md:126:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru\nSOURCE_98_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_98_LINE=docs/operations/p0-vikunja-restore-proof-preflight-20260624T191408Z.md:63:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru\nSOURCE_99_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_99_LINE=docs/operations/p1-exposure-matrix-npmplus-route-inventory-20260625T212426Z.json:123: \"home.gram1.ru\"\nSOURCE_100_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_100_LINE=docs/operations/p1-exposure-matrix-npmplus-route-inventory-20260625T212426Z.md:34:| 8 | public_or_unknown | home.gram1.ru | yes | http | [IP_REDACTED]:3000 | present | 8 |\nSOURCE_101_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_101_LINE=docs/operations/p1-exposure-ownership-matrix-20260625T212704Z.json:103: \"domain\": \"home.gram1.ru\",\nSOURCE_102_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_102_LINE=docs/operations/p1-exposure-ownership-matrix-20260625T212704Z.json:105: \"home.gram1.ru\"\nSOURCE_103_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_103_LINE=docs/operations/p1-exposure-ownership-matrix-20260625T212704Z.md:39:| 8 | home.gram1.ru | public-domain | homepage | edge-local | http://[IP_REDACTED]:3000 | yes | present | OK_PUBLIC_INTENTIONAL | keep_monitoring |\nSOURCE_104_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_104_LINE=docs/operations/p2-dependency-risk-classification-20260625T221747Z.json:905: \"domain\": \"home.gram1.ru\",\nSOURCE_105_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_105_LINE=docs/operations/p2-dependency-risk-classification-20260625T221747Z.md:68:| 8 | home.gram1.ru | http://[IP_REDACTED]:3000 | homepage | PUBLIC_OR_UNKNOWN_ROUTE, ACCESS_HINT_REVIEW |\nSOURCE_106_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_106_LINE=configs/sanitized/edge-vm/homepage-compose.yaml:9: HOMEPAGE_ALLOWED_HOSTS: home.gram1.ru,homepage.vpn.gram1.ru\nSOURCE_107_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_107_LINE=configs/sanitized/edge-vm/homepage-services.yaml:7: href: https://homepage.vpn.gram1.ru\nSOURCE_108_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_108_LINE=docs/99-current-state-summary.md:2333:- `homepage.vpn.gram1.ru`: HTTP `200`\nSOURCE_109_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_109_LINE=docs/ERRORS-LESSONS-20260618.md:61:Correct value: only https://homepage.vpn.gram1.ru.\nSOURCE_110_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_110_LINE=docs/ERRORS-LESSONS-20260618.md:108:Correction: use local direct Authentik outpost checks with homepage.vpn.gram1.ru forwarded headers before enabling NPMplus auth. Do not require the public auth.vpn outpost auth endpoint to match the Homepage provider.\nSOURCE_111_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_111_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:11:homepage.vpn.gram1.ru proxy id 17 cert id 32 access 1 ssl forced\nSOURCE_112_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_112_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:33:Launch URL: https://homepage.vpn.gram1.ru\nSOURCE_113_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_113_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:42:Only after provider and outpost verification, enable npmplus_auth_request authentik for homepage.vpn.gram1.ru. Keep rollback ready by setting it back to none.\nSOURCE_114_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_114_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:54:The public check through auth.vpn.gram1.ru returned 404 for /outpost.goauthentik.io/auth/nginx, while the local direct outpost check for homepage.vpn.gram1.ru returned a valid auth response. Treat the public auth.vpn auth endpoint as a wrong validation path for Homepage. Next safe step: enable npmplus_auth_request=authentik only for homepage proxy id 17 with rollback ready.\nSOURCE_115_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_115_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:73:host: homepage.vpn.gram1.ru\nSOURCE_116_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_116_LINE=docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618.md:22:homepage.vpn.gram1.ru -> [IP_REDACTED] -> NPMplus -> [IP_REDACTED]:3000\nSOURCE_117_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_117_LINE=docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618.md:55:EDGE_HOST=edge-vm;DOCKER_IMAGES=actual-budget=actualbudget/actual-server:latest;authentik-postgresql-1=postgres:16-alpine;authentik-server-1=ghcr.io/goauthentik/server:2026.5.3;authentik-worker-1=ghcr.io/goauthentik/server:2026.5.3;beszel=henrygd/beszel:latest;crowdsec=crowdsecurity/crowdsec:latest;dockge=louislam/dockge:1;dozzle=amir20/dozzle:latest;filebrowser=filebrowser/filebrowser:latest;gitea=docker.gitea.com/gitea:1.26.2;gotify=gotify/server:latest;grafana=grafana/grafana:latest;homeassistant=ghcr.io/home-assistant/home-assistant:stable;homebox=ghcr.io/sysadminsmedia/homebox:latest-rootless;homepage=ghcr.io/gethomepage/homepage:latest;immi\nSOURCE_118_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_118_LINE=docs/SERVICES-BOOTSTRAP-20260617.md:208:homepage.vpn.gram1.ru -> [IP_REDACTED] -> [IP_REDACTED]:3000\nSOURCE_119_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_119_LINE=docs/SERVICES-BOOTSTRAP-20260617.md:216:BINDING= - NPM_IPV4_BINDING=[IP_REDACTED]; - IPV4_BINDING=[IP_REDACTED];;ACCESS=5|access_list_id=1|address=[IP_REDACTED]|directive=allow;6|access_list_id=1|address=[IP_REDACTED]|directive=allow;7|access_list_id=1|address=[IP_REDACTED]|directive=allow;8|access_list_id=1|address=[IP_REDACTED]|directive=allow;;PROXIES=16|[\"kuma.vpn.gram1.ru\"]|forward=http://[IP_REDACTED]:3001|cert=32|access=1|enabled=1|ssl_forced=1|hsts=0;17|[\"homepage.vpn.gram1.ru\"]|forward=http://[IP_REDACTED]:3000|cert=32|access=1|enabled=1|ssl_forced=1|hsts=0;18|[\"gitea.vpn.gram1.ru\"]|forward=http://[IP_REDACTED]:3002|cert=32|access=1|enabled=1|ssl_forced=1|hsts=0;19|[\"fileb\nSOURCE_120_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_120_LINE=docs/SERVICES-BOOTSTRAP-20260617.md:222:kuma.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=302|CERT=issuer=C=US, O=Let's Encrypt, CN=YE2;notAfter=Sep 15 20:18:29 2026 GMT;X509v3 Subject Alternative Name: ; DNS:*.vpn.gram1.ru, DNS:vpn.gram1.ru;;homepage.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=200|CERT=issuer=C=US, O=Let's Encrypt, CN=YE2;notAfter=Sep 15 20:18:29 2026 GMT;X509v3 Subject Alternative Name: ; DNS:*.vpn.gram1.ru, DNS:vpn.gram1.ru;;gitea.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=200|CERT=issuer=C=US, O=Let's Encrypt, CN=YE2;notAfter=Sep 15 20:18:29 2026 GMT;X509v3 Subject Alternative Name: ; DNS:*.vpn.gram1.ru, DNS:vpn.gram1.ru;;filebrowser.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=200|CERT=iss\nSOURCE_MATCH_COUNT=120\nPVE01_NETBIRD_UNIT_MATCH_COUNT=3\nPVE01_NETBIRD_PRESENT=true\nPVE01_NETBIRD_STATUS_SHA=0cf182820b4c45584910a7a7b5bff12370f80c8707f9104557b0a61e643bbf11\nPVE01_NETBIRD_CONNECTED_HINT=true\nNEW_PC_NETBIRD_MISSING=true\nNEW_PC_NETBIRD_NOT_RUNNING=false\nNEW_PC_NETBIRD_NOT_CONNECTED=false\nNEW_PC_HOME_DNS_MISSING=true\nNEW_PC_HOME_PRIVATE_DNS_PRESENT=false\nNEW_PC_HOME_HTTPS_WORKING=false\nREPAIR_CLASS=REPAIR_NEW_PC_NETBIRD_INSTALL\nDECISION=ANALYZE_HOME_GRAM1_EDGE_VPN_DNS\nNEXT_GATE=HOME_GRAM1_NEW_PC_TARGETED_REPAIR\nTASK_RESULT=HOME_GRAM1_EDGE_VPN_DNS_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\n" + "output": "SNIKKET_FRESH_BACKUP_RESTORE_RECONCILE=V1\nMODE=read-only\nNO_VM_MUTATION=true\nNO_BACKUP_MUTATION=true\nNO_REMOTE_MUTATION=true\nNO_STATE_MUTATION=true\nNO_DNS_MUTATION=true\nNO_MONITOR_MUTATION=true\nHOST_PVE01=true\nINGRESS_HOSTKEY_SELF_BOUND=true\nVM150_RUNNING=true\nVM150_QGA=true\nVM150_CONFIG_SHA256=2e4c1ea46b27034a2efe7bfc00cd9f32c0641a43d8365aa21992f72493a43b0e\nVM150_CONFIG_MATCH_99595_PRE=true\nPROD_HOSTNAME_PRESENT=true\nPROD_HOSTNAME_SHA256=3c7efeafc1bb10d0343c4790ae885d930ff08cf90396917fea962e3fce0e5e14\nPROD_HOSTNAME_IS_SNIKKET=true\nPROD_STATIC_HOSTNAME_MATCH=true\nPROD_SNIKKET_DOMAIN_OK=true\nFRESH_STATE_PRESENT=true\nFRESH_RESTORE_VALIDATION_PRESENT=true\nSTATE_GENERATION_MATCH=true\nSTATE_STATUS_SEALED=true\nSTATE_CLOUD_QUORUM_2=true\nSTATE_CLOUD_A_VERIFIED=true\nSTATE_CLOUD_B_VERIFIED=true\nSTATE_CLOUD_A_SEAL_VERIFIED=true\nSTATE_CLOUD_B_SEAL_VERIFIED=true\nSTATE_PART_HASHES_VERIFIED=true\nSTATE_SEAL_WRITTEN=true\nSTATE_LOCAL_CLEANUP_OK=true\nSTATE_LOCAL_PAYLOAD_ABSENT=true\nRESTORE_RESULT_OK=true\nRESTORE_PAYLOAD_SHA_VERIFIED=true\nRESTORE_ARCHIVE_READBACK_VERIFIED=true\nRESTORE_PROXMOX_CONFIG_EXTRACT_VERIFIED=true\nSTRICT_FRESH_EVIDENCE_PASS=true\nFRESH_STATE_SHA256=d1633743b207d851dee72c59fb26a3071622bcbcbd63e943463ebada0081f10c\nFRESH_RESTORE_SHA256=122ea17af4149a1fdbb42efb78d13256f3e49915cbff4a87d595fd1e13c18822\nFRESH_GENERATION_AGE_HOURS=0.167\nREMOTE_A_BASE_PRESENT=true\nREMOTE_B_BASE_PRESENT=true\nARCHIVE_SHA256=f512b9e70dac503583643203a42a1c57cee0f061cf301152036408e0cf0abeac\nARCHIVE_SIZE_BYTES=935669734\nPART_COUNT=2\nPARTS_MANIFEST_SHA256=851e54c928f30d7f5064deb067caa26341364b5d6b6d0e156e496237cb434270\nREMOTE_A_BASE_PRESENT=true\nREMOTE_A_GEN_PATH_MATCH=true\nREMOTE_A_SEAL_JSON_READ_RC=0\nREMOTE_A_SEAL_JSON_NONEMPTY=true\nREMOTE_A_PARTS_TSV_READ_RC=0\nREMOTE_A_PARTS_TSV_NONEMPTY=true\nREMOTE_B_BASE_PRESENT=true\nREMOTE_B_GEN_PATH_MATCH=true\nREMOTE_B_SEAL_JSON_READ_RC=0\nREMOTE_B_SEAL_JSON_NONEMPTY=true\nREMOTE_B_PARTS_TSV_READ_RC=0\nREMOTE_B_PARTS_TSV_NONEMPTY=true\nEXPORT_STATE_OK=true\nEXPORT_GENERATION_MATCH_FRESH=true\nEXPORT_REMOTE_A_VALID=true\nEXPORT_REMOTE_A_PART_COUNT=2\nEXPORT_REMOTE_B_VALID=true\nEXPORT_REMOTE_B_PART_COUNT=2\nTEMP_VM_9600_PRESENT=false\nRESTORE_STAGE_99595_RESIDUE_COUNT=0\nPROD_RUNNING_CONTAINER_COUNT=4\nPROD_RECON_RESULT_OK=true\nPROD_RECON_EXEC_OK=true\nPROD_RECON_SHA_OK=true\nPUBLIC_DNS_OK_COUNT=3\nPUBLIC_HTTPS_OK_COUNT=3\nPUBLIC_STUN_3479_PASS=true\nRECONCILE_COMPLETE=true\nDECISION=ANALYZE_EXACT_99596\nNEXT_GATE=SNIKKET_ISOLATED_BOOT_REPROOF_OR_FINAL_SEAL\nTASK_RESULT=SNIKKET_FRESH_BACKUP_RESTORE_RECONCILE\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 6ceb1f3c..e0dd3ad3 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,15 +1,15 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-261005-HOME-GRAM1-EDGE-VPN-DNS-RCA-99595R1 +COMMAND_ID=SUPPORT-261005-SNIKKET-FRESH-BACKUP-RESTORE-RECONCILE-99596R1 STATUS=OK RC=0 HOST=pve01 MODE=read-only -COMPONENT=home-gram1-edge-vpn-dns-rca +COMPONENT=snikket-fresh-backup-restore-reconcile REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=8373cbc8cc09222185a3eea30f811f59cdfd6c7e88118f3aa80c8fa2ce6e6027 +COMMAND_SHA256=aa4d24604e08080a4424c65f063d950e4d108af85e15b194b42b3f071539ad55 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false @@ -24,1099 +24,86 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=8d2e00550474afe9ffde1aee1364664e74e5775593673837f2b262320065fd0e -SANITIZED_OUTPUT_SHA256=e222f8b364b0ef3aed91333615ff2ea31a541a9169bdbcb53347e0231495293b +RAW_EVIDENCE_SHA256=6ab481397516db0c02af324a901bebc01941ff62a95997cff712f9071ada165d +SANITIZED_OUTPUT_SHA256=6ab481397516db0c02af324a901bebc01941ff62a95997cff712f9071ada165d OUTPUT_BEGIN -HOME_GRAM1_EDGE_VPN_DNS_RCA=V1 -NO_MAIL_SEND=true -NO_SERVICE_RESTART=true -NO_TIMER_MUTATION=true -NO_NETWORK_MUTATION=true -NO_SOURCE_MUTATION=true -NO_DNS_MUTATION=true -NO_PROXY_MUTATION=true -NO_CONTAINER_MUTATION=true -NO_ACCESS_LIST_MUTATION=true -NO_LOCAL_WINDOWS_MUTATION=true +SNIKKET_FRESH_BACKUP_RESTORE_RECONCILE=V1 MODE=read-only +NO_VM_MUTATION=true +NO_BACKUP_MUTATION=true +NO_REMOTE_MUTATION=true +NO_STATE_MUTATION=true +NO_DNS_MUTATION=true +NO_MONITOR_MUTATION=true HOST_PVE01=true -LOCAL_DIAG_OK=true -LOCAL_NETBIRD_PRESENT=true -LOCAL_NETBIRD_SERVICE_FOUND=true -LOCAL_NETBIRD_SERVICE_RUNNING=true -LOCAL_NETBIRD_STATUS_RC=0 -LOCAL_NETBIRD_CONNECTED_HINT=true -LOCAL_NETBIRD_DISCONNECTED_HINT=false -LOCAL_NETBIRD_MANAGEMENT_HINT=true -LOCAL_NETBIRD_SIGNAL_HINT=true -LOCAL_NETBIRD_OUTPUT_SHA=99aa8ce33befabc416914dd33b1af56e247c8e25960e4cb74a4a797ce330a880 -LOCAL_HOME_DNS_COUNT=0 -LOCAL_HOME_DNS_PRIVATE_COUNT=0 -LOCAL_HOME_DNS_PUBLIC_COUNT=0 -LOCAL_HOME_HTTPS_STATUS=0 -LOCAL_HOMEVPN_DNS_COUNT=0 -LOCAL_HOMEVPN_DNS_PRIVATE_COUNT=0 -LOCAL_HOMEVPN_DNS_PUBLIC_COUNT=0 -LOCAL_HOMEVPN_HTTPS_STATUS=0 -SERVER_HOME_DNS_COUNT=1 -SERVER_HOME_DNS_PRIVATE_COUNT=1 -SERVER_HOME_DNS_PUBLIC_COUNT=0 -SERVER_HOME_HTTPS_STATUS=200 -SERVER_HOME_CURL_RC=0 -SERVER_HOMEVPN_DNS_COUNT=0 -SERVER_HOMEVPN_DNS_PRIVATE_COUNT=0 -SERVER_HOMEVPN_DNS_PUBLIC_COUNT=0 -SERVER_HOMEVPN_HTTPS_STATUS=000 -SERVER_HOMEVPN_CURL_RC=6 -EDGE_VM_FOUND=true -EDGE_VM_NODE=pve03 -EDGE_VM_STATUS=running -EDGE_VM_NAME=edge-vm -PVE03_EDGE_INSPECT_RC=0 -PVE03_EDGE_INSPECT_STDERR_SHA=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 -EDGE_QM_GUEST_EXEC_RC=0 -EDGE_QM_STDERR_SHA=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 -EDGE_QGA_JSON=true -EDGE_GUEST_EXITCODE=0 -EDGE_HOSTNAME=edge-vm -EDGE_DOCKER_PRESENT=yes -EDGE_NETBIRD_PRESENT=yes -EDGE_NETBIRD_STATUS_SHA=7de6bb08abbcd58a722827794738dd523a1cbb4119b3cf8a5cba3d617b99b459 -EDGE_NETBIRD_CONNECTED_HINT=true -EDGE_RELEVANT_CONTAINER_COUNT=2 -EDGE_CONTAINER_1_NAME=npmplus -EDGE_CONTAINER_1_IMAGE=zoeyvid/npmplus:2026-06-17-b1 -EDGE_CONTAINER_1_STATUS=Up 5 weeks (healthy) -EDGE_CONTAINER_2_NAME=socket-proxy -EDGE_CONTAINER_2_IMAGE=lscr.io/linuxserver/socket-proxy:latest -EDGE_CONTAINER_2_STATUS=Up 5 weeks -EDGE_HOMEPAGE_CONTAINER_COUNT=0 -EDGE_DOMAIN_CONFIG_MATCH_COUNT=120 -EDGE_DOMAINCFG_1_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-certificate-expiry-audit-20260621/index.html -EDGE_DOMAINCFG_1_HAS_HOME=true -EDGE_DOMAINCFG_1_HAS_VPN=false -EDGE_DOMAINCFG_1_HAS_ALLOW=false -EDGE_DOMAINCFG_1_HAS_DENY=false -EDGE_DOMAINCFG_1_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_2_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-services-prepatch-snapshot-20260621/index.html -EDGE_DOMAINCFG_2_HAS_HOME=true -EDGE_DOMAINCFG_2_HAS_VPN=true -EDGE_DOMAINCFG_2_HAS_ALLOW=false -EDGE_DOMAINCFG_2_HAS_DENY=false -EDGE_DOMAINCFG_2_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_3_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-warning-monitoring-closure-20260621/index.html -EDGE_DOMAINCFG_3_HAS_HOME=true -EDGE_DOMAINCFG_3_HAS_VPN=false -EDGE_DOMAINCFG_3_HAS_ALLOW=false -EDGE_DOMAINCFG_3_HAS_DENY=false -EDGE_DOMAINCFG_3_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_4_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-post-ui-final-closure-20260621/index.html -EDGE_DOMAINCFG_4_HAS_HOME=true -EDGE_DOMAINCFG_4_HAS_VPN=false -EDGE_DOMAINCFG_4_HAS_ALLOW=false -EDGE_DOMAINCFG_4_HAS_DENY=false -EDGE_DOMAINCFG_4_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_5_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-services-full-npmplus-visibility-patch-20260621/index.html -EDGE_DOMAINCFG_5_HAS_HOME=true -EDGE_DOMAINCFG_5_HAS_VPN=true -EDGE_DOMAINCFG_5_HAS_ALLOW=false -EDGE_DOMAINCFG_5_HAS_DENY=false -EDGE_DOMAINCFG_5_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_6_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homelab-service-visibility-strict-audit-20260621/index.html -EDGE_DOMAINCFG_6_HAS_HOME=true -EDGE_DOMAINCFG_6_HAS_VPN=true -EDGE_DOMAINCFG_6_HAS_ALLOW=false -EDGE_DOMAINCFG_6_HAS_DENY=false -EDGE_DOMAINCFG_6_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_7_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/vpn-domain-route-and-homepage-hostvalidation-fix-20260623/index.html -EDGE_DOMAINCFG_7_HAS_HOME=false -EDGE_DOMAINCFG_7_HAS_VPN=true -EDGE_DOMAINCFG_7_HAS_ALLOW=false -EDGE_DOMAINCFG_7_HAS_DENY=false -EDGE_DOMAINCFG_7_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_8_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-all-runtime-services-visible-patch-20260621/index.html -EDGE_DOMAINCFG_8_HAS_HOME=true -EDGE_DOMAINCFG_8_HAS_VPN=true -EDGE_DOMAINCFG_8_HAS_ALLOW=false -EDGE_DOMAINCFG_8_HAS_DENY=false -EDGE_DOMAINCFG_8_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_9_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-runtime-full-visibility-final-closure-20260621/index.html -EDGE_DOMAINCFG_9_HAS_HOME=true -EDGE_DOMAINCFG_9_HAS_VPN=true -EDGE_DOMAINCFG_9_HAS_ALLOW=false -EDGE_DOMAINCFG_9_HAS_DENY=false -EDGE_DOMAINCFG_9_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_10_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-fix-schema-preflight-20260621/index.html -EDGE_DOMAINCFG_10_HAS_HOME=true -EDGE_DOMAINCFG_10_HAS_VPN=false -EDGE_DOMAINCFG_10_HAS_ALLOW=false -EDGE_DOMAINCFG_10_HAS_DENY=false -EDGE_DOMAINCFG_10_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_11_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-vpn-alias-cards-patch-20260622/index.html -EDGE_DOMAINCFG_11_HAS_HOME=false -EDGE_DOMAINCFG_11_HAS_VPN=true -EDGE_DOMAINCFG_11_HAS_ALLOW=false -EDGE_DOMAINCFG_11_HAS_DENY=false -EDGE_DOMAINCFG_11_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_12_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/vpn-domain-route-recovery-v2-20260623/index.html -EDGE_DOMAINCFG_12_HAS_HOME=false -EDGE_DOMAINCFG_12_HAS_VPN=true -EDGE_DOMAINCFG_12_HAS_ALLOW=false -EDGE_DOMAINCFG_12_HAS_DENY=false -EDGE_DOMAINCFG_12_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_13_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-vpn-route-batch-1-retry-20260622/index.html -EDGE_DOMAINCFG_13_HAS_HOME=false -EDGE_DOMAINCFG_13_HAS_VPN=true -EDGE_DOMAINCFG_13_HAS_ALLOW=false -EDGE_DOMAINCFG_13_HAS_DENY=false -EDGE_DOMAINCFG_13_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_14_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-warning-checker-patch-20260621/index.html -EDGE_DOMAINCFG_14_HAS_HOME=true -EDGE_DOMAINCFG_14_HAS_VPN=false -EDGE_DOMAINCFG_14_HAS_ALLOW=false -EDGE_DOMAINCFG_14_HAS_DENY=false -EDGE_DOMAINCFG_14_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_15_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-public-dns-blocker-audit-20260621/index.html -EDGE_DOMAINCFG_15_HAS_HOME=true -EDGE_DOMAINCFG_15_HAS_VPN=false -EDGE_DOMAINCFG_15_HAS_ALLOW=false -EDGE_DOMAINCFG_15_HAS_DENY=false -EDGE_DOMAINCFG_15_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_16_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/cloudflare-remaining-token-post-revoke-check-20260622/index.html -EDGE_DOMAINCFG_16_HAS_HOME=false -EDGE_DOMAINCFG_16_HAS_VPN=true -EDGE_DOMAINCFG_16_HAS_ALLOW=false -EDGE_DOMAINCFG_16_HAS_DENY=false -EDGE_DOMAINCFG_16_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_17_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-certbot-path-layout-preflight-20260621/index.html -EDGE_DOMAINCFG_17_HAS_HOME=true -EDGE_DOMAINCFG_17_HAS_VPN=false -EDGE_DOMAINCFG_17_HAS_ALLOW=false -EDGE_DOMAINCFG_17_HAS_DENY=false -EDGE_DOMAINCFG_17_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_18_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-clickability-grouping-audit-20260621/index.html -EDGE_DOMAINCFG_18_HAS_HOME=true -EDGE_DOMAINCFG_18_HAS_VPN=true -EDGE_DOMAINCFG_18_HAS_ALLOW=false -EDGE_DOMAINCFG_18_HAS_DENY=false -EDGE_DOMAINCFG_18_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_19_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-vpn-dns-wildcard-patch-20260621/index.html -EDGE_DOMAINCFG_19_HAS_HOME=false -EDGE_DOMAINCFG_19_HAS_VPN=true -EDGE_DOMAINCFG_19_HAS_ALLOW=false -EDGE_DOMAINCFG_19_HAS_DENY=false -EDGE_DOMAINCFG_19_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_20_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-checker-prepatch-inspect-20260621/index.html -EDGE_DOMAINCFG_20_HAS_HOME=true -EDGE_DOMAINCFG_20_HAS_VPN=false -EDGE_DOMAINCFG_20_HAS_ALLOW=false -EDGE_DOMAINCFG_20_HAS_DENY=false -EDGE_DOMAINCFG_20_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_21_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/post-revoke-final-docs-runtime-closure-20260622/index.html -EDGE_DOMAINCFG_21_HAS_HOME=false -EDGE_DOMAINCFG_21_HAS_VPN=true -EDGE_DOMAINCFG_21_HAS_ALLOW=false -EDGE_DOMAINCFG_21_HAS_DENY=false -EDGE_DOMAINCFG_21_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_22_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-vpn-route-batch-2-20260622/index.html -EDGE_DOMAINCFG_22_HAS_HOME=false -EDGE_DOMAINCFG_22_HAS_VPN=true -EDGE_DOMAINCFG_22_HAS_ALLOW=false -EDGE_DOMAINCFG_22_HAS_DENY=false -EDGE_DOMAINCFG_22_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_23_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-supported-vpn-routes-closeout-20260623/index.html -EDGE_DOMAINCFG_23_HAS_HOME=false -EDGE_DOMAINCFG_23_HAS_VPN=true -EDGE_DOMAINCFG_23_HAS_ALLOW=false -EDGE_DOMAINCFG_23_HAS_DENY=false -EDGE_DOMAINCFG_23_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_24_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-grouping-href-patch-20260622/index.html -EDGE_DOMAINCFG_24_HAS_HOME=true -EDGE_DOMAINCFG_24_HAS_VPN=false -EDGE_DOMAINCFG_24_HAS_ALLOW=false -EDGE_DOMAINCFG_24_HAS_DENY=false -EDGE_DOMAINCFG_24_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_25_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-routes-strict-tls-audit-20260621/index.html -EDGE_DOMAINCFG_25_HAS_HOME=true -EDGE_DOMAINCFG_25_HAS_VPN=false -EDGE_DOMAINCFG_25_HAS_ALLOW=false -EDGE_DOMAINCFG_25_HAS_DENY=false -EDGE_DOMAINCFG_25_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_26_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-full-visibility-closure-rescan-fixed-20260621/index.html -EDGE_DOMAINCFG_26_HAS_HOME=true -EDGE_DOMAINCFG_26_HAS_VPN=true -EDGE_DOMAINCFG_26_HAS_ALLOW=false -EDGE_DOMAINCFG_26_HAS_DENY=false -EDGE_DOMAINCFG_26_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_27_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-production-update-20260619/index.html -EDGE_DOMAINCFG_27_HAS_HOME=true -EDGE_DOMAINCFG_27_HAS_VPN=false -EDGE_DOMAINCFG_27_HAS_ALLOW=false -EDGE_DOMAINCFG_27_HAS_DENY=false -EDGE_DOMAINCFG_27_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_28_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/search/search_index.json -EDGE_DOMAINCFG_28_HAS_HOME=true -EDGE_DOMAINCFG_28_HAS_VPN=true -EDGE_DOMAINCFG_28_HAS_ALLOW=true -EDGE_DOMAINCFG_28_HAS_DENY=true -EDGE_DOMAINCFG_28_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_29_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/index.html -EDGE_DOMAINCFG_29_HAS_HOME=true -EDGE_DOMAINCFG_29_HAS_VPN=false -EDGE_DOMAINCFG_29_HAS_ALLOW=false -EDGE_DOMAINCFG_29_HAS_DENY=false -EDGE_DOMAINCFG_29_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_30_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/inventory/domains.csv -EDGE_DOMAINCFG_30_HAS_HOME=true -EDGE_DOMAINCFG_30_HAS_VPN=false -EDGE_DOMAINCFG_30_HAS_ALLOW=false -EDGE_DOMAINCFG_30_HAS_DENY=false -EDGE_DOMAINCFG_30_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_31_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/inventory/ports/index.html -EDGE_DOMAINCFG_31_HAS_HOME=true -EDGE_DOMAINCFG_31_HAS_VPN=false -EDGE_DOMAINCFG_31_HAS_ALLOW=false -EDGE_DOMAINCFG_31_HAS_DENY=false -EDGE_DOMAINCFG_31_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_32_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/runbooks/01-add-new-service/index.html -EDGE_DOMAINCFG_32_HAS_HOME=true -EDGE_DOMAINCFG_32_HAS_VPN=false -EDGE_DOMAINCFG_32_HAS_ALLOW=false -EDGE_DOMAINCFG_32_HAS_DENY=false -EDGE_DOMAINCFG_32_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_33_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/runbooks/00-restore-from-zero-for-beginners/index.html -EDGE_DOMAINCFG_33_HAS_HOME=true -EDGE_DOMAINCFG_33_HAS_VPN=false -EDGE_DOMAINCFG_33_HAS_ALLOW=false -EDGE_DOMAINCFG_33_HAS_DENY=false -EDGE_DOMAINCFG_33_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_34_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618/index.html -EDGE_DOMAINCFG_34_HAS_HOME=false -EDGE_DOMAINCFG_34_HAS_VPN=true -EDGE_DOMAINCFG_34_HAS_ALLOW=false -EDGE_DOMAINCFG_34_HAS_DENY=false -EDGE_DOMAINCFG_34_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_35_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/99-current-state-summary/index.html -EDGE_DOMAINCFG_35_HAS_HOME=true -EDGE_DOMAINCFG_35_HAS_VPN=true -EDGE_DOMAINCFG_35_HAS_ALLOW=false -EDGE_DOMAINCFG_35_HAS_DENY=false -EDGE_DOMAINCFG_35_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_36_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/05-service-catalog/index.html -EDGE_DOMAINCFG_36_HAS_HOME=true -EDGE_DOMAINCFG_36_HAS_VPN=false -EDGE_DOMAINCFG_36_HAS_ALLOW=false -EDGE_DOMAINCFG_36_HAS_DENY=false -EDGE_DOMAINCFG_36_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_37_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/HANDOFF-20260618-authentik-npmplus/index.html -EDGE_DOMAINCFG_37_HAS_HOME=false -EDGE_DOMAINCFG_37_HAS_VPN=true -EDGE_DOMAINCFG_37_HAS_ALLOW=false -EDGE_DOMAINCFG_37_HAS_DENY=false -EDGE_DOMAINCFG_37_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_38_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/06-certificates-troubleshooting/index.html -EDGE_DOMAINCFG_38_HAS_HOME=true -EDGE_DOMAINCFG_38_HAS_VPN=false -EDGE_DOMAINCFG_38_HAS_ALLOW=false -EDGE_DOMAINCFG_38_HAS_DENY=false -EDGE_DOMAINCFG_38_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_39_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/ERRORS-LESSONS-20260618/index.html -EDGE_DOMAINCFG_39_HAS_HOME=false -EDGE_DOMAINCFG_39_HAS_VPN=true -EDGE_DOMAINCFG_39_HAS_ALLOW=false -EDGE_DOMAINCFG_39_HAS_DENY=false -EDGE_DOMAINCFG_39_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_40_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/service-url-catalog/index.html -EDGE_DOMAINCFG_40_HAS_HOME=true -EDGE_DOMAINCFG_40_HAS_VPN=true -EDGE_DOMAINCFG_40_HAS_ALLOW=false -EDGE_DOMAINCFG_40_HAS_DENY=false -EDGE_DOMAINCFG_40_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_41_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/SERVICES-BOOTSTRAP-20260617/index.html -EDGE_DOMAINCFG_41_HAS_HOME=false -EDGE_DOMAINCFG_41_HAS_VPN=true -EDGE_DOMAINCFG_41_HAS_ALLOW=false -EDGE_DOMAINCFG_41_HAS_DENY=false -EDGE_DOMAINCFG_41_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_42_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-certificate-expiry-audit-20260621/index.html -EDGE_DOMAINCFG_42_HAS_HOME=true -EDGE_DOMAINCFG_42_HAS_VPN=false -EDGE_DOMAINCFG_42_HAS_ALLOW=false -EDGE_DOMAINCFG_42_HAS_DENY=false -EDGE_DOMAINCFG_42_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_43_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-services-prepatch-snapshot-20260621/index.html -EDGE_DOMAINCFG_43_HAS_HOME=true -EDGE_DOMAINCFG_43_HAS_VPN=true -EDGE_DOMAINCFG_43_HAS_ALLOW=false -EDGE_DOMAINCFG_43_HAS_DENY=false -EDGE_DOMAINCFG_43_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_44_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-warning-monitoring-closure-20260621/index.html -EDGE_DOMAINCFG_44_HAS_HOME=true -EDGE_DOMAINCFG_44_HAS_VPN=false -EDGE_DOMAINCFG_44_HAS_ALLOW=false -EDGE_DOMAINCFG_44_HAS_DENY=false -EDGE_DOMAINCFG_44_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_45_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-post-ui-final-closure-20260621/index.html -EDGE_DOMAINCFG_45_HAS_HOME=true -EDGE_DOMAINCFG_45_HAS_VPN=false -EDGE_DOMAINCFG_45_HAS_ALLOW=false -EDGE_DOMAINCFG_45_HAS_DENY=false -EDGE_DOMAINCFG_45_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_46_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-services-full-npmplus-visibility-patch-20260621/index.html -EDGE_DOMAINCFG_46_HAS_HOME=true -EDGE_DOMAINCFG_46_HAS_VPN=true -EDGE_DOMAINCFG_46_HAS_ALLOW=false -EDGE_DOMAINCFG_46_HAS_DENY=false -EDGE_DOMAINCFG_46_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_47_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homelab-service-visibility-strict-audit-20260621/index.html -EDGE_DOMAINCFG_47_HAS_HOME=true -EDGE_DOMAINCFG_47_HAS_VPN=true -EDGE_DOMAINCFG_47_HAS_ALLOW=false -EDGE_DOMAINCFG_47_HAS_DENY=false -EDGE_DOMAINCFG_47_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_48_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/vpn-domain-route-and-homepage-hostvalidation-fix-20260623/index.html -EDGE_DOMAINCFG_48_HAS_HOME=false -EDGE_DOMAINCFG_48_HAS_VPN=true -EDGE_DOMAINCFG_48_HAS_ALLOW=false -EDGE_DOMAINCFG_48_HAS_DENY=false -EDGE_DOMAINCFG_48_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_49_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-all-runtime-services-visible-patch-20260621/index.html -EDGE_DOMAINCFG_49_HAS_HOME=true -EDGE_DOMAINCFG_49_HAS_VPN=true -EDGE_DOMAINCFG_49_HAS_ALLOW=false -EDGE_DOMAINCFG_49_HAS_DENY=false -EDGE_DOMAINCFG_49_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_50_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-runtime-full-visibility-final-closure-20260621/index.html -EDGE_DOMAINCFG_50_HAS_HOME=true -EDGE_DOMAINCFG_50_HAS_VPN=true -EDGE_DOMAINCFG_50_HAS_ALLOW=false -EDGE_DOMAINCFG_50_HAS_DENY=false -EDGE_DOMAINCFG_50_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_51_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-fix-schema-preflight-20260621/index.html -EDGE_DOMAINCFG_51_HAS_HOME=true -EDGE_DOMAINCFG_51_HAS_VPN=false -EDGE_DOMAINCFG_51_HAS_ALLOW=false -EDGE_DOMAINCFG_51_HAS_DENY=false -EDGE_DOMAINCFG_51_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_52_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-vpn-alias-cards-patch-20260622/index.html -EDGE_DOMAINCFG_52_HAS_HOME=false -EDGE_DOMAINCFG_52_HAS_VPN=true -EDGE_DOMAINCFG_52_HAS_ALLOW=false -EDGE_DOMAINCFG_52_HAS_DENY=false -EDGE_DOMAINCFG_52_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_53_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/vpn-domain-route-recovery-v2-20260623/index.html -EDGE_DOMAINCFG_53_HAS_HOME=false -EDGE_DOMAINCFG_53_HAS_VPN=true -EDGE_DOMAINCFG_53_HAS_ALLOW=false -EDGE_DOMAINCFG_53_HAS_DENY=false -EDGE_DOMAINCFG_53_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_54_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-vpn-route-batch-1-retry-20260622/index.html -EDGE_DOMAINCFG_54_HAS_HOME=false -EDGE_DOMAINCFG_54_HAS_VPN=true -EDGE_DOMAINCFG_54_HAS_ALLOW=false -EDGE_DOMAINCFG_54_HAS_DENY=false -EDGE_DOMAINCFG_54_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_55_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-warning-checker-patch-20260621/index.html -EDGE_DOMAINCFG_55_HAS_HOME=true -EDGE_DOMAINCFG_55_HAS_VPN=false -EDGE_DOMAINCFG_55_HAS_ALLOW=false -EDGE_DOMAINCFG_55_HAS_DENY=false -EDGE_DOMAINCFG_55_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_56_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-public-dns-blocker-audit-20260621/index.html -EDGE_DOMAINCFG_56_HAS_HOME=true -EDGE_DOMAINCFG_56_HAS_VPN=false -EDGE_DOMAINCFG_56_HAS_ALLOW=false -EDGE_DOMAINCFG_56_HAS_DENY=false -EDGE_DOMAINCFG_56_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_57_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/cloudflare-remaining-token-post-revoke-check-20260622/index.html -EDGE_DOMAINCFG_57_HAS_HOME=false -EDGE_DOMAINCFG_57_HAS_VPN=true -EDGE_DOMAINCFG_57_HAS_ALLOW=false -EDGE_DOMAINCFG_57_HAS_DENY=false -EDGE_DOMAINCFG_57_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_58_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-certbot-path-layout-preflight-20260621/index.html -EDGE_DOMAINCFG_58_HAS_HOME=true -EDGE_DOMAINCFG_58_HAS_VPN=false -EDGE_DOMAINCFG_58_HAS_ALLOW=false -EDGE_DOMAINCFG_58_HAS_DENY=false -EDGE_DOMAINCFG_58_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_59_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-clickability-grouping-audit-20260621/index.html -EDGE_DOMAINCFG_59_HAS_HOME=true -EDGE_DOMAINCFG_59_HAS_VPN=true -EDGE_DOMAINCFG_59_HAS_ALLOW=false -EDGE_DOMAINCFG_59_HAS_DENY=false -EDGE_DOMAINCFG_59_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_60_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-vpn-dns-wildcard-patch-20260621/index.html -EDGE_DOMAINCFG_60_HAS_HOME=false -EDGE_DOMAINCFG_60_HAS_VPN=true -EDGE_DOMAINCFG_60_HAS_ALLOW=false -EDGE_DOMAINCFG_60_HAS_DENY=false -EDGE_DOMAINCFG_60_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_61_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-checker-prepatch-inspect-20260621/index.html -EDGE_DOMAINCFG_61_HAS_HOME=true -EDGE_DOMAINCFG_61_HAS_VPN=false -EDGE_DOMAINCFG_61_HAS_ALLOW=false -EDGE_DOMAINCFG_61_HAS_DENY=false -EDGE_DOMAINCFG_61_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_62_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/post-revoke-final-docs-runtime-closure-20260622/index.html -EDGE_DOMAINCFG_62_HAS_HOME=false -EDGE_DOMAINCFG_62_HAS_VPN=true -EDGE_DOMAINCFG_62_HAS_ALLOW=false -EDGE_DOMAINCFG_62_HAS_DENY=false -EDGE_DOMAINCFG_62_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_63_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-vpn-route-batch-2-20260622/index.html -EDGE_DOMAINCFG_63_HAS_HOME=false -EDGE_DOMAINCFG_63_HAS_VPN=true -EDGE_DOMAINCFG_63_HAS_ALLOW=false -EDGE_DOMAINCFG_63_HAS_DENY=false -EDGE_DOMAINCFG_63_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_64_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-grouping-href-patch-20260622/index.html -EDGE_DOMAINCFG_64_HAS_HOME=true -EDGE_DOMAINCFG_64_HAS_VPN=false -EDGE_DOMAINCFG_64_HAS_ALLOW=false -EDGE_DOMAINCFG_64_HAS_DENY=false -EDGE_DOMAINCFG_64_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_65_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-routes-strict-tls-audit-20260621/index.html -EDGE_DOMAINCFG_65_HAS_HOME=true -EDGE_DOMAINCFG_65_HAS_VPN=false -EDGE_DOMAINCFG_65_HAS_ALLOW=false -EDGE_DOMAINCFG_65_HAS_DENY=false -EDGE_DOMAINCFG_65_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_66_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-full-visibility-closure-rescan-fixed-20260621/index.html -EDGE_DOMAINCFG_66_HAS_HOME=true -EDGE_DOMAINCFG_66_HAS_VPN=true -EDGE_DOMAINCFG_66_HAS_ALLOW=false -EDGE_DOMAINCFG_66_HAS_DENY=false -EDGE_DOMAINCFG_66_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_67_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-production-update-20260619/index.html -EDGE_DOMAINCFG_67_HAS_HOME=true -EDGE_DOMAINCFG_67_HAS_VPN=false -EDGE_DOMAINCFG_67_HAS_ALLOW=false -EDGE_DOMAINCFG_67_HAS_DENY=false -EDGE_DOMAINCFG_67_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_68_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/search/search_index.json -EDGE_DOMAINCFG_68_HAS_HOME=true -EDGE_DOMAINCFG_68_HAS_VPN=true -EDGE_DOMAINCFG_68_HAS_ALLOW=true -EDGE_DOMAINCFG_68_HAS_DENY=true -EDGE_DOMAINCFG_68_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_69_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/index.html -EDGE_DOMAINCFG_69_HAS_HOME=true -EDGE_DOMAINCFG_69_HAS_VPN=false -EDGE_DOMAINCFG_69_HAS_ALLOW=false -EDGE_DOMAINCFG_69_HAS_DENY=false -EDGE_DOMAINCFG_69_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_70_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/inventory/domains.csv -EDGE_DOMAINCFG_70_HAS_HOME=true -EDGE_DOMAINCFG_70_HAS_VPN=false -EDGE_DOMAINCFG_70_HAS_ALLOW=false -EDGE_DOMAINCFG_70_HAS_DENY=false -EDGE_DOMAINCFG_70_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_71_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/inventory/ports/index.html -EDGE_DOMAINCFG_71_HAS_HOME=true -EDGE_DOMAINCFG_71_HAS_VPN=false -EDGE_DOMAINCFG_71_HAS_ALLOW=false -EDGE_DOMAINCFG_71_HAS_DENY=false -EDGE_DOMAINCFG_71_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_72_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/runbooks/01-add-new-service/index.html -EDGE_DOMAINCFG_72_HAS_HOME=true -EDGE_DOMAINCFG_72_HAS_VPN=false -EDGE_DOMAINCFG_72_HAS_ALLOW=false -EDGE_DOMAINCFG_72_HAS_DENY=false -EDGE_DOMAINCFG_72_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_73_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/runbooks/00-restore-from-zero-for-beginners/index.html -EDGE_DOMAINCFG_73_HAS_HOME=true -EDGE_DOMAINCFG_73_HAS_VPN=false -EDGE_DOMAINCFG_73_HAS_ALLOW=false -EDGE_DOMAINCFG_73_HAS_DENY=false -EDGE_DOMAINCFG_73_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_74_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618/index.html -EDGE_DOMAINCFG_74_HAS_HOME=false -EDGE_DOMAINCFG_74_HAS_VPN=true -EDGE_DOMAINCFG_74_HAS_ALLOW=false -EDGE_DOMAINCFG_74_HAS_DENY=false -EDGE_DOMAINCFG_74_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_75_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/99-current-state-summary/index.html -EDGE_DOMAINCFG_75_HAS_HOME=true -EDGE_DOMAINCFG_75_HAS_VPN=true -EDGE_DOMAINCFG_75_HAS_ALLOW=false -EDGE_DOMAINCFG_75_HAS_DENY=false -EDGE_DOMAINCFG_75_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_76_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/05-service-catalog/index.html -EDGE_DOMAINCFG_76_HAS_HOME=true -EDGE_DOMAINCFG_76_HAS_VPN=false -EDGE_DOMAINCFG_76_HAS_ALLOW=false -EDGE_DOMAINCFG_76_HAS_DENY=false -EDGE_DOMAINCFG_76_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_77_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/HANDOFF-20260618-authentik-npmplus/index.html -EDGE_DOMAINCFG_77_HAS_HOME=false -EDGE_DOMAINCFG_77_HAS_VPN=true -EDGE_DOMAINCFG_77_HAS_ALLOW=false -EDGE_DOMAINCFG_77_HAS_DENY=false -EDGE_DOMAINCFG_77_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_78_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/06-certificates-troubleshooting/index.html -EDGE_DOMAINCFG_78_HAS_HOME=true -EDGE_DOMAINCFG_78_HAS_VPN=false -EDGE_DOMAINCFG_78_HAS_ALLOW=false -EDGE_DOMAINCFG_78_HAS_DENY=false -EDGE_DOMAINCFG_78_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_79_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/ERRORS-LESSONS-20260618/index.html -EDGE_DOMAINCFG_79_HAS_HOME=false -EDGE_DOMAINCFG_79_HAS_VPN=true -EDGE_DOMAINCFG_79_HAS_ALLOW=false -EDGE_DOMAINCFG_79_HAS_DENY=false -EDGE_DOMAINCFG_79_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_80_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/service-url-catalog/index.html -EDGE_DOMAINCFG_80_HAS_HOME=true -EDGE_DOMAINCFG_80_HAS_VPN=true -EDGE_DOMAINCFG_80_HAS_ALLOW=false -EDGE_DOMAINCFG_80_HAS_DENY=false -EDGE_DOMAINCFG_80_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_81_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/SERVICES-BOOTSTRAP-20260617/index.html -EDGE_DOMAINCFG_81_HAS_HOME=false -EDGE_DOMAINCFG_81_HAS_VPN=true -EDGE_DOMAINCFG_81_HAS_ALLOW=false -EDGE_DOMAINCFG_81_HAS_DENY=false -EDGE_DOMAINCFG_81_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_82_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-certificate-expiry-audit-20260621/index.html -EDGE_DOMAINCFG_82_HAS_HOME=true -EDGE_DOMAINCFG_82_HAS_VPN=false -EDGE_DOMAINCFG_82_HAS_ALLOW=false -EDGE_DOMAINCFG_82_HAS_DENY=false -EDGE_DOMAINCFG_82_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_83_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-services-prepatch-snapshot-20260621/index.html -EDGE_DOMAINCFG_83_HAS_HOME=true -EDGE_DOMAINCFG_83_HAS_VPN=true -EDGE_DOMAINCFG_83_HAS_ALLOW=false -EDGE_DOMAINCFG_83_HAS_DENY=false -EDGE_DOMAINCFG_83_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_84_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-warning-monitoring-closure-20260621/index.html -EDGE_DOMAINCFG_84_HAS_HOME=true -EDGE_DOMAINCFG_84_HAS_VPN=false -EDGE_DOMAINCFG_84_HAS_ALLOW=false -EDGE_DOMAINCFG_84_HAS_DENY=false -EDGE_DOMAINCFG_84_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_85_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-post-ui-final-closure-20260621/index.html -EDGE_DOMAINCFG_85_HAS_HOME=true -EDGE_DOMAINCFG_85_HAS_VPN=false -EDGE_DOMAINCFG_85_HAS_ALLOW=false -EDGE_DOMAINCFG_85_HAS_DENY=false -EDGE_DOMAINCFG_85_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_86_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-services-full-npmplus-visibility-patch-20260621/index.html -EDGE_DOMAINCFG_86_HAS_HOME=true -EDGE_DOMAINCFG_86_HAS_VPN=true -EDGE_DOMAINCFG_86_HAS_ALLOW=false -EDGE_DOMAINCFG_86_HAS_DENY=false -EDGE_DOMAINCFG_86_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_87_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homelab-service-visibility-strict-audit-20260621/index.html -EDGE_DOMAINCFG_87_HAS_HOME=true -EDGE_DOMAINCFG_87_HAS_VPN=true -EDGE_DOMAINCFG_87_HAS_ALLOW=false -EDGE_DOMAINCFG_87_HAS_DENY=false -EDGE_DOMAINCFG_87_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_88_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/vpn-domain-route-and-homepage-hostvalidation-fix-20260623/index.html -EDGE_DOMAINCFG_88_HAS_HOME=false -EDGE_DOMAINCFG_88_HAS_VPN=true -EDGE_DOMAINCFG_88_HAS_ALLOW=false -EDGE_DOMAINCFG_88_HAS_DENY=false -EDGE_DOMAINCFG_88_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_89_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-all-runtime-services-visible-patch-20260621/index.html -EDGE_DOMAINCFG_89_HAS_HOME=true -EDGE_DOMAINCFG_89_HAS_VPN=true -EDGE_DOMAINCFG_89_HAS_ALLOW=false -EDGE_DOMAINCFG_89_HAS_DENY=false -EDGE_DOMAINCFG_89_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_90_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-runtime-full-visibility-final-closure-20260621/index.html -EDGE_DOMAINCFG_90_HAS_HOME=true -EDGE_DOMAINCFG_90_HAS_VPN=true -EDGE_DOMAINCFG_90_HAS_ALLOW=false -EDGE_DOMAINCFG_90_HAS_DENY=false -EDGE_DOMAINCFG_90_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_91_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-fix-schema-preflight-20260621/index.html -EDGE_DOMAINCFG_91_HAS_HOME=true -EDGE_DOMAINCFG_91_HAS_VPN=false -EDGE_DOMAINCFG_91_HAS_ALLOW=false -EDGE_DOMAINCFG_91_HAS_DENY=false -EDGE_DOMAINCFG_91_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_92_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-vpn-alias-cards-patch-20260622/index.html -EDGE_DOMAINCFG_92_HAS_HOME=false -EDGE_DOMAINCFG_92_HAS_VPN=true -EDGE_DOMAINCFG_92_HAS_ALLOW=false -EDGE_DOMAINCFG_92_HAS_DENY=false -EDGE_DOMAINCFG_92_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_93_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/vpn-domain-route-recovery-v2-20260623/index.html -EDGE_DOMAINCFG_93_HAS_HOME=false -EDGE_DOMAINCFG_93_HAS_VPN=true -EDGE_DOMAINCFG_93_HAS_ALLOW=false -EDGE_DOMAINCFG_93_HAS_DENY=false -EDGE_DOMAINCFG_93_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_94_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-vpn-route-batch-1-retry-20260622/index.html -EDGE_DOMAINCFG_94_HAS_HOME=false -EDGE_DOMAINCFG_94_HAS_VPN=true -EDGE_DOMAINCFG_94_HAS_ALLOW=false -EDGE_DOMAINCFG_94_HAS_DENY=false -EDGE_DOMAINCFG_94_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_95_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-warning-checker-patch-20260621/index.html -EDGE_DOMAINCFG_95_HAS_HOME=true -EDGE_DOMAINCFG_95_HAS_VPN=false -EDGE_DOMAINCFG_95_HAS_ALLOW=false -EDGE_DOMAINCFG_95_HAS_DENY=false -EDGE_DOMAINCFG_95_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_96_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-public-dns-blocker-audit-20260621/index.html -EDGE_DOMAINCFG_96_HAS_HOME=true -EDGE_DOMAINCFG_96_HAS_VPN=false -EDGE_DOMAINCFG_96_HAS_ALLOW=false -EDGE_DOMAINCFG_96_HAS_DENY=false -EDGE_DOMAINCFG_96_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_97_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/cloudflare-remaining-token-post-revoke-check-20260622/index.html -EDGE_DOMAINCFG_97_HAS_HOME=false -EDGE_DOMAINCFG_97_HAS_VPN=true -EDGE_DOMAINCFG_97_HAS_ALLOW=false -EDGE_DOMAINCFG_97_HAS_DENY=false -EDGE_DOMAINCFG_97_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_98_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-certbot-path-layout-preflight-20260621/index.html -EDGE_DOMAINCFG_98_HAS_HOME=true -EDGE_DOMAINCFG_98_HAS_VPN=false -EDGE_DOMAINCFG_98_HAS_ALLOW=false -EDGE_DOMAINCFG_98_HAS_DENY=false -EDGE_DOMAINCFG_98_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_99_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-clickability-grouping-audit-20260621/index.html -EDGE_DOMAINCFG_99_HAS_HOME=true -EDGE_DOMAINCFG_99_HAS_VPN=true -EDGE_DOMAINCFG_99_HAS_ALLOW=false -EDGE_DOMAINCFG_99_HAS_DENY=false -EDGE_DOMAINCFG_99_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_100_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-vpn-dns-wildcard-patch-20260621/index.html -EDGE_DOMAINCFG_100_HAS_HOME=false -EDGE_DOMAINCFG_100_HAS_VPN=true -EDGE_DOMAINCFG_100_HAS_ALLOW=false -EDGE_DOMAINCFG_100_HAS_DENY=false -EDGE_DOMAINCFG_100_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_101_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-checker-prepatch-inspect-20260621/index.html -EDGE_DOMAINCFG_101_HAS_HOME=true -EDGE_DOMAINCFG_101_HAS_VPN=false -EDGE_DOMAINCFG_101_HAS_ALLOW=false -EDGE_DOMAINCFG_101_HAS_DENY=false -EDGE_DOMAINCFG_101_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_102_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/post-revoke-final-docs-runtime-closure-20260622/index.html -EDGE_DOMAINCFG_102_HAS_HOME=false -EDGE_DOMAINCFG_102_HAS_VPN=true -EDGE_DOMAINCFG_102_HAS_ALLOW=false -EDGE_DOMAINCFG_102_HAS_DENY=false -EDGE_DOMAINCFG_102_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_103_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-vpn-route-batch-2-20260622/index.html -EDGE_DOMAINCFG_103_HAS_HOME=false -EDGE_DOMAINCFG_103_HAS_VPN=true -EDGE_DOMAINCFG_103_HAS_ALLOW=false -EDGE_DOMAINCFG_103_HAS_DENY=false -EDGE_DOMAINCFG_103_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_104_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-grouping-href-patch-20260622/index.html -EDGE_DOMAINCFG_104_HAS_HOME=true -EDGE_DOMAINCFG_104_HAS_VPN=false -EDGE_DOMAINCFG_104_HAS_ALLOW=false -EDGE_DOMAINCFG_104_HAS_DENY=false -EDGE_DOMAINCFG_104_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_105_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-routes-strict-tls-audit-20260621/index.html -EDGE_DOMAINCFG_105_HAS_HOME=true -EDGE_DOMAINCFG_105_HAS_VPN=false -EDGE_DOMAINCFG_105_HAS_ALLOW=false -EDGE_DOMAINCFG_105_HAS_DENY=false -EDGE_DOMAINCFG_105_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_106_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-full-visibility-closure-rescan-fixed-20260621/index.html -EDGE_DOMAINCFG_106_HAS_HOME=true -EDGE_DOMAINCFG_106_HAS_VPN=true -EDGE_DOMAINCFG_106_HAS_ALLOW=false -EDGE_DOMAINCFG_106_HAS_DENY=false -EDGE_DOMAINCFG_106_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_107_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-production-update-20260619/index.html -EDGE_DOMAINCFG_107_HAS_HOME=true -EDGE_DOMAINCFG_107_HAS_VPN=false -EDGE_DOMAINCFG_107_HAS_ALLOW=false -EDGE_DOMAINCFG_107_HAS_DENY=false -EDGE_DOMAINCFG_107_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_108_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/search/search_index.json -EDGE_DOMAINCFG_108_HAS_HOME=true -EDGE_DOMAINCFG_108_HAS_VPN=true -EDGE_DOMAINCFG_108_HAS_ALLOW=true -EDGE_DOMAINCFG_108_HAS_DENY=true -EDGE_DOMAINCFG_108_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_109_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/index.html -EDGE_DOMAINCFG_109_HAS_HOME=true -EDGE_DOMAINCFG_109_HAS_VPN=false -EDGE_DOMAINCFG_109_HAS_ALLOW=false -EDGE_DOMAINCFG_109_HAS_DENY=false -EDGE_DOMAINCFG_109_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_110_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/inventory/domains.csv -EDGE_DOMAINCFG_110_HAS_HOME=true -EDGE_DOMAINCFG_110_HAS_VPN=false -EDGE_DOMAINCFG_110_HAS_ALLOW=false -EDGE_DOMAINCFG_110_HAS_DENY=false -EDGE_DOMAINCFG_110_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_111_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/inventory/ports/index.html -EDGE_DOMAINCFG_111_HAS_HOME=true -EDGE_DOMAINCFG_111_HAS_VPN=false -EDGE_DOMAINCFG_111_HAS_ALLOW=false -EDGE_DOMAINCFG_111_HAS_DENY=false -EDGE_DOMAINCFG_111_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_112_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/runbooks/01-add-new-service/index.html -EDGE_DOMAINCFG_112_HAS_HOME=true -EDGE_DOMAINCFG_112_HAS_VPN=false -EDGE_DOMAINCFG_112_HAS_ALLOW=false -EDGE_DOMAINCFG_112_HAS_DENY=false -EDGE_DOMAINCFG_112_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_113_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/runbooks/00-restore-from-zero-for-beginners/index.html -EDGE_DOMAINCFG_113_HAS_HOME=true -EDGE_DOMAINCFG_113_HAS_VPN=false -EDGE_DOMAINCFG_113_HAS_ALLOW=false -EDGE_DOMAINCFG_113_HAS_DENY=false -EDGE_DOMAINCFG_113_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_114_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618/index.html -EDGE_DOMAINCFG_114_HAS_HOME=false -EDGE_DOMAINCFG_114_HAS_VPN=true -EDGE_DOMAINCFG_114_HAS_ALLOW=false -EDGE_DOMAINCFG_114_HAS_DENY=false -EDGE_DOMAINCFG_114_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_115_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/99-current-state-summary/index.html -EDGE_DOMAINCFG_115_HAS_HOME=true -EDGE_DOMAINCFG_115_HAS_VPN=true -EDGE_DOMAINCFG_115_HAS_ALLOW=false -EDGE_DOMAINCFG_115_HAS_DENY=false -EDGE_DOMAINCFG_115_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_116_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/05-service-catalog/index.html -EDGE_DOMAINCFG_116_HAS_HOME=true -EDGE_DOMAINCFG_116_HAS_VPN=false -EDGE_DOMAINCFG_116_HAS_ALLOW=false -EDGE_DOMAINCFG_116_HAS_DENY=false -EDGE_DOMAINCFG_116_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_117_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/HANDOFF-20260618-authentik-npmplus/index.html -EDGE_DOMAINCFG_117_HAS_HOME=false -EDGE_DOMAINCFG_117_HAS_VPN=true -EDGE_DOMAINCFG_117_HAS_ALLOW=false -EDGE_DOMAINCFG_117_HAS_DENY=false -EDGE_DOMAINCFG_117_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_118_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/06-certificates-troubleshooting/index.html -EDGE_DOMAINCFG_118_HAS_HOME=true -EDGE_DOMAINCFG_118_HAS_VPN=false -EDGE_DOMAINCFG_118_HAS_ALLOW=false -EDGE_DOMAINCFG_118_HAS_DENY=false -EDGE_DOMAINCFG_118_HAS_AUTH_REQUEST=false -EDGE_DOMAINCFG_119_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/ERRORS-LESSONS-20260618/index.html -EDGE_DOMAINCFG_119_HAS_HOME=false -EDGE_DOMAINCFG_119_HAS_VPN=true -EDGE_DOMAINCFG_119_HAS_ALLOW=false -EDGE_DOMAINCFG_119_HAS_DENY=false -EDGE_DOMAINCFG_119_HAS_AUTH_REQUEST=true -EDGE_DOMAINCFG_120_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/service-url-catalog/index.html -EDGE_DOMAINCFG_120_HAS_HOME=true -EDGE_DOMAINCFG_120_HAS_VPN=true -EDGE_DOMAINCFG_120_HAS_ALLOW=false -EDGE_DOMAINCFG_120_HAS_DENY=false -EDGE_DOMAINCFG_120_HAS_AUTH_REQUEST=false -EDGE_PROXY_CONTAINER_COUNT=1 -EDGE_PROXY_DB_CANDIDATE_COUNT=1 -EDGE_PROXY_DB_SELECTED=true -EDGE_PROXY_DB_PATH_SHA=36a7644962bc77f6f2ab31bf092004ded1daf0d1eb4421ac479f92a54b4c4c60 -EDGE_PROXY_MATCH_COUNT=2 -EDGE_PROXY_1_ID=8 -EDGE_PROXY_1_DOMAINS=["home.gram1.ru"] -EDGE_PROXY_1_FORWARD_SCHEME=http -EDGE_PROXY_1_FORWARD_HOST_CLASS=private -EDGE_PROXY_1_FORWARD_HOST_SHA=3eb2319e39eac307b3c7bd11f67663c0a0c814fd603989f5965083f9d1c80fb0 -EDGE_PROXY_1_FORWARD_PORT=3000 -EDGE_PROXY_1_ACCESS_LIST_ID=1 -EDGE_PROXY_1_SSL_FORCED=1 -EDGE_PROXY_1_ENABLED=1 -EDGE_PROXY_1_ADV_HAS_ALLOW=false -EDGE_PROXY_1_ADV_HAS_DENY=false -EDGE_PROXY_1_ADV_HAS_AUTH=false -EDGE_PROXY_1_BACKEND_HTTP=200 -EDGE_PROXY_2_ID=17 -EDGE_PROXY_2_DOMAINS=["homepage.vpn.gram1.ru"] -EDGE_PROXY_2_FORWARD_SCHEME=http -EDGE_PROXY_2_FORWARD_HOST_CLASS=private -EDGE_PROXY_2_FORWARD_HOST_SHA=3eb2319e39eac307b3c7bd11f67663c0a0c814fd603989f5965083f9d1c80fb0 -EDGE_PROXY_2_FORWARD_PORT=3000 -EDGE_PROXY_2_ACCESS_LIST_ID=1 -EDGE_PROXY_2_SSL_FORCED=1 -EDGE_PROXY_2_ENABLED=1 -EDGE_PROXY_2_ADV_HAS_ALLOW=false -EDGE_PROXY_2_ADV_HAS_DENY=false -EDGE_PROXY_2_ADV_HAS_AUTH=false -EDGE_PROXY_2_BACKEND_HTTP=200 -EDGE_USED_ACL_COUNT=1 -EDGE_ACL_1_ID=1 -EDGE_ACL_1_NAME=LAN only -EDGE_ACL_1_SATISFY_ANY=0 -EDGE_ACL_1_PASS_AUTH=0 -EDGE_ACL_1_RULE_COUNT=4 -EDGE_ACL_1_RULE_1_CLASS=private -EDGE_ACL_1_RULE_1_SHA=3bc5d8aba5c1426425a0ad3770bf77782d3f16a12d4455ad3d3a7ce324a5910a -EDGE_ACL_1_RULE_1_DIRECTIVE=allow -EDGE_ACL_1_RULE_2_CLASS=private -EDGE_ACL_1_RULE_2_SHA=d01a825c13311b46a70c53405baab8c9aab1ceda5076cf56ef86d1d8c8673f5a -EDGE_ACL_1_RULE_2_DIRECTIVE=allow -EDGE_ACL_1_RULE_3_CLASS=private -EDGE_ACL_1_RULE_3_SHA=783712746109b3d66507177fc2ac066b768aac772e5c9d7f20b28f4c7b5ef641 -EDGE_ACL_1_RULE_3_DIRECTIVE=allow -EDGE_ACL_1_RULE_4_CLASS=private -EDGE_ACL_1_RULE_4_SHA=9422ac7ba7ba4ebf2d71db387c71b97ed1709669d2d2e55408128148cfae4daf -EDGE_ACL_1_RULE_4_DIRECTIVE=allow -EDGE_RECENT_403_COUNT=0 -SOURCE_1_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc -SOURCE_1_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-backup:53: echo "NETBIRD_ACTIVE=$(systemctl is-active netbird 2>/dev/null || true)" -SOURCE_2_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc -SOURCE_2_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:197: facts["netbird_route"] = route -SOURCE_3_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc -SOURCE_3_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:199: problems.append("netbird_route_not_wt0") -SOURCE_4_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc -SOURCE_4_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:290: f"- NetBird route: {facts.get('netbird_route')}", -SOURCE_5_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc -SOURCE_5_LINE=tests/test_cr_2026_0005.py:33: for forbidden in ("paperless", "netbird", "vm160", "pve02", "pve03", "cluster/backup"): -SOURCE_6_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc -SOURCE_6_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-status:51:section "EDGE-VM: монитор, NetBird и расширения" -SOURCE_7_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc -SOURCE_7_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:290: f"- NetBird route: {facts.get('netbird_route')}", -SOURCE_8_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_8_LINE=.gitea/workflows/validate-kb.yml:59: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2 -SOURCE_9_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_9_LINE=kb/integration/validate-kb.yml.template:31: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2 -SOURCE_10_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_10_LINE=kb/lessons/known_failures.json:423: "netbird", -SOURCE_11_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_11_LINE=kb/lessons/known_failures_public.json:247: "netbird", -SOURCE_12_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_12_LINE=kb/private/access.json:88: "id": "new_usa_netbird", -SOURCE_13_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_13_LINE=kb/private/archive/2026-08-19/docs/03_SERVICE_CATALOG.md:104:- `netbird.service` -SOURCE_14_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_14_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:66:`/root/netbird-cutover-20260818T145807Z` -SOURCE_15_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_15_LINE=kb/private/archive/2026-08-19/docs/27_SECURITY_ACCESS_CURRENT_DELTA_2026-08-19.md:6:`[SENSITIVE_PATH] -SOURCE_16_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_16_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:15: "netbird": "[IP_REDACTED]", -SOURCE_17_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_17_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:25: "netbird": "[IP_REDACTED]", -SOURCE_18_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_18_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:36: "netbird": "[IP_REDACTED]", -SOURCE_19_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_19_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:463: "netbird.service", -SOURCE_20_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_20_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:682: "netbird.service", -SOURCE_21_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_21_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:686: "skladchik-ct200-netbird-egress.service", -SOURCE_22_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_22_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:771: "udp UNCONN 0 0 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\"netbird\",pid=705,fd=38)) ", -SOURCE_23_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_23_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:776: "udp UNCONN 0 0 [IP_REDACTED]:3128 [IP_REDACTED]:* users:((\"netbird\",pid=705,fd=27)) ", -SOURCE_24_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_24_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:819: "tcp LISTEN 0 4096 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\"netbird\",pid=705,fd=39)) ", -SOURCE_25_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_25_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:40:netbird: -SOURCE_26_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_26_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:53: old_secondary_netbird_ipv4: "[IP_REDACTED]" -SOURCE_27_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_27_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:54: netbird_server: STOPPED -SOURCE_28_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_28_LINE=KB_START_HERE.md:27:- Не считать NetBird 0.73.2 `/api/health` или `:9000/health` обязательным readiness gate. -SOURCE_29_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_29_LINE=deploy/homelab-command-stack/payload/homelab-command-portal:651:

Ссылка одноразовая и уже привязана к этому NetBird-адресу.

-SOURCE_30_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_30_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:18:- NetBird service must be `active`. -SOURCE_31_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_31_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:72:This document supersedes older observer assumptions that require `nc.gram1.ru` or Nextcloud availability. It does not change Mailcow, NetBird routing, Gotify, firewall policy, or Snikket. -SOURCE_32_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_32_LINE=docs/superpowers/specs/2026-08-31-cr0103-command-stack-boot-readiness-design.md:92:- change NetBird configuration; -SOURCE_33_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_33_LINE=kb/AI_CONTEXT.md:15:- pve01 `[IP_REDACTED]`, operator historical NetBird path `root@[IP_REDACTED]`, MobaXterm key label `eddsa-key-20260617`. -SOURCE_34_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_34_LINE=kb/AI_CONTEXT.md:30:## NetBird migration -SOURCE_35_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_35_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0. -SOURCE_36_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_36_LINE=kb/AI_CONTEXT_PUBLIC.md:20:- New USA is current NetBird production on version 0.73.2. Its historical `/api/health` and combined `:9000/health` responses are not valid generic readiness gates. -SOURCE_37_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_37_LINE=kb/current/01_CURRENT_STATE.md:12:- old Mailcow/old NetBird server architecture is retired from production; rollback window remains. -SOURCE_38_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_38_LINE=kb/current/04_P0_NEXT.md:5:3. Canonical post-migration CR including NetBird new USA, Postbox/Null MX, Moldova V3/Gotify, old-USA retirement window and dependencies. -SOURCE_39_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_39_LINE=kb/current/04_P0_NEXT.md:12:Do not mix unrelated changes into these gates (e.g. NetBird version upgrade/hostname change during SSH hardening). -SOURCE_40_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_40_LINE=kb/inventory/guests.json:59: "role": "edge-vm: домашний ingress/NPMplus, NetBird/WireGuard, edge observability/backup services", -SOURCE_41_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_41_LINE=kb/lessons/known_failures.json:430: "incident": "On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.", -SOURCE_42_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_42_LINE=kb/lessons/known_failures_public.json:250: "incident": "On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.", -SOURCE_43_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_43_LINE=kb/private/archive/2026-08-19/README_FIRST.md:11:- добавлены NetBird/Mailcow/Postbox/Moldova/AlexHost/forum tails; -SOURCE_44_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_44_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:16:6. SSH-hardening нового USA NetBird VPS. -SOURCE_45_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_45_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:24:- NetBird production перенесён на `[IP_REDACTED]`. -SOURCE_46_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a -SOURCE_46_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production -SOURCE_47_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_47_LINE=.gitea/workflows/validate-kb.yml:31: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2 -SOURCE_48_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_48_LINE=kb/integration/validate-kb.yml.template:31: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2 -SOURCE_49_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_49_LINE=kb/lessons/known_failures.json:423: "netbird", -SOURCE_50_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_50_LINE=kb/lessons/known_failures_public.json:247: "netbird", -SOURCE_51_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_51_LINE=kb/private/access.json:88: "id": "new_usa_netbird", -SOURCE_52_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_52_LINE=kb/private/archive/2026-08-19/docs/03_SERVICE_CATALOG.md:104:- `netbird.service` -SOURCE_53_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_53_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:66:`/root/netbird-cutover-20260818T145807Z` -SOURCE_54_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_54_LINE=kb/private/archive/2026-08-19/docs/27_SECURITY_ACCESS_CURRENT_DELTA_2026-08-19.md:6:`[SENSITIVE_PATH] -SOURCE_55_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_55_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:15: "netbird": "[IP_REDACTED]", -SOURCE_56_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_56_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:25: "netbird": "[IP_REDACTED]", -SOURCE_57_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_57_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:36: "netbird": "[IP_REDACTED]", -SOURCE_58_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_58_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:463: "netbird.service", -SOURCE_59_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_59_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:682: "netbird.service", -SOURCE_60_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_60_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:686: "skladchik-ct200-netbird-egress.service", -SOURCE_61_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_61_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:771: "udp UNCONN 0 0 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\"netbird\",pid=705,fd=38)) ", -SOURCE_62_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_62_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:776: "udp UNCONN 0 0 [IP_REDACTED]:3128 [IP_REDACTED]:* users:((\"netbird\",pid=705,fd=27)) ", -SOURCE_63_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_63_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:819: "tcp LISTEN 0 4096 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\"netbird\",pid=705,fd=39)) ", -SOURCE_64_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_64_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:40:netbird: -SOURCE_65_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_65_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:53: old_secondary_netbird_ipv4: "[IP_REDACTED]" -SOURCE_66_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_66_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:54: netbird_server: STOPPED -SOURCE_67_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_67_LINE=KB_START_HERE.md:27:- Не считать NetBird 0.73.2 `/api/health` или `:9000/health` обязательным readiness gate. -SOURCE_68_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_68_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:18:- NetBird service must be `active`. -SOURCE_69_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_69_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:72:This document supersedes older observer assumptions that require `nc.gram1.ru` or Nextcloud availability. It does not change Mailcow, NetBird routing, Gotify, firewall policy, or Snikket. -SOURCE_70_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_70_LINE=kb/AI_CONTEXT.md:15:- pve01 `[IP_REDACTED]`, operator historical NetBird path `root@[IP_REDACTED]`, MobaXterm key label `eddsa-key-20260617`. -SOURCE_71_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_71_LINE=kb/AI_CONTEXT.md:30:## NetBird migration -SOURCE_72_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_72_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0. -SOURCE_73_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_73_LINE=kb/AI_CONTEXT_PUBLIC.md:20:- New USA is current NetBird production on version 0.73.2. Its historical `/api/health` and combined `:9000/health` responses are not valid generic readiness gates. -SOURCE_74_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_74_LINE=kb/current/01_CURRENT_STATE.md:12:- old Mailcow/old NetBird server architecture is retired from production; rollback window remains. -SOURCE_75_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_75_LINE=kb/current/04_P0_NEXT.md:5:3. Canonical post-migration CR including NetBird new USA, Postbox/Null MX, Moldova V3/Gotify, old-USA retirement window and dependencies. -SOURCE_76_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_76_LINE=kb/current/04_P0_NEXT.md:12:Do not mix unrelated changes into these gates (e.g. NetBird version upgrade/hostname change during SSH hardening). -SOURCE_77_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_77_LINE=kb/inventory/guests.json:59: "role": "edge-vm: домашний ingress/NPMplus, NetBird/WireGuard, edge observability/backup services", -SOURCE_78_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_78_LINE=kb/lessons/known_failures.json:430: "incident": "On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.", -SOURCE_79_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_79_LINE=kb/lessons/known_failures_public.json:250: "incident": "On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.", -SOURCE_80_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_80_LINE=kb/private/archive/2026-08-19/README_FIRST.md:11:- добавлены NetBird/Mailcow/Postbox/Moldova/AlexHost/forum tails; -SOURCE_81_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_81_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:16:6. SSH-hardening нового USA NetBird VPS. -SOURCE_82_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_82_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:24:- NetBird production перенесён на `[IP_REDACTED]`. -SOURCE_83_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_83_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production -SOURCE_84_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_84_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:211:- NetBird server SHA `efa4e50dbc556ccd7bdc5b0d977ff29fe21bdee3b7e312cba6e3fa53bbeec60b` -SOURCE_85_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb -SOURCE_85_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:215:NetBird server: -SOURCE_86_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_86_LINE=README.md:9:- Homepage: https://home.gram1.ru -SOURCE_87_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_87_LINE=README.md:53:- https://home.gram1.ru -SOURCE_88_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_88_LINE=configs/sanitized/edge-vm/homepage-compose.yaml:9: HOMEPAGE_ALLOWED_HOSTS: home.gram1.ru,homepage.vpn.gram1.ru -SOURCE_89_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_89_LINE=configs/sanitized/edge-vm/homepage-services.yaml:3: href: https://home.gram1.ru -SOURCE_90_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_90_LINE=docs/05-service-catalog.md:67:- Domain: https://home.gram1.ru -SOURCE_91_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_91_LINE=docs/06-certificates-troubleshooting.md:62:Observed with home.gram1.ru and git.gram1.ru before certificate completion. -SOURCE_92_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_92_LINE=docs/06-certificates-troubleshooting.md:96:- home.gram1.ru: Lets Encrypt via Cloudflare DNS challenge. -SOURCE_93_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_93_LINE=docs/99-current-state-summary.md:113:- URL: https://home.gram1.ru -SOURCE_94_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_94_LINE=docs/99-current-state-summary.md:147:- https://home.gram1.ru -SOURCE_95_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_95_LINE=docs/operations/p0-healthchecks-restore-proof-preflight-20260624T190801Z.md:65:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru -SOURCE_96_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_96_LINE=docs/operations/p0-restore-drill-matrix-edge-index-20260624T183747Z.md:112:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru -SOURCE_97_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_97_LINE=docs/operations/p0-restore-drill-matrix-quality-offhost-20260624T183931Z.md:126:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru -SOURCE_98_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_98_LINE=docs/operations/p0-vikunja-restore-proof-preflight-20260624T191408Z.md:63:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru -SOURCE_99_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_99_LINE=docs/operations/p1-exposure-matrix-npmplus-route-inventory-20260625T212426Z.json:123: "home.gram1.ru" -SOURCE_100_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_100_LINE=docs/operations/p1-exposure-matrix-npmplus-route-inventory-20260625T212426Z.md:34:| 8 | public_or_unknown | home.gram1.ru | yes | http | [IP_REDACTED]:3000 | present | 8 | -SOURCE_101_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_101_LINE=docs/operations/p1-exposure-ownership-matrix-20260625T212704Z.json:103: "domain": "home.gram1.ru", -SOURCE_102_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_102_LINE=docs/operations/p1-exposure-ownership-matrix-20260625T212704Z.json:105: "home.gram1.ru" -SOURCE_103_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_103_LINE=docs/operations/p1-exposure-ownership-matrix-20260625T212704Z.md:39:| 8 | home.gram1.ru | public-domain | homepage | edge-local | http://[IP_REDACTED]:3000 | yes | present | OK_PUBLIC_INTENTIONAL | keep_monitoring | -SOURCE_104_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_104_LINE=docs/operations/p2-dependency-risk-classification-20260625T221747Z.json:905: "domain": "home.gram1.ru", -SOURCE_105_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_105_LINE=docs/operations/p2-dependency-risk-classification-20260625T221747Z.md:68:| 8 | home.gram1.ru | http://[IP_REDACTED]:3000 | homepage | PUBLIC_OR_UNKNOWN_ROUTE, ACCESS_HINT_REVIEW | -SOURCE_106_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_106_LINE=configs/sanitized/edge-vm/homepage-compose.yaml:9: HOMEPAGE_ALLOWED_HOSTS: home.gram1.ru,homepage.vpn.gram1.ru -SOURCE_107_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_107_LINE=configs/sanitized/edge-vm/homepage-services.yaml:7: href: https://homepage.vpn.gram1.ru -SOURCE_108_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_108_LINE=docs/99-current-state-summary.md:2333:- `homepage.vpn.gram1.ru`: HTTP `200` -SOURCE_109_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_109_LINE=docs/ERRORS-LESSONS-20260618.md:61:Correct value: only https://homepage.vpn.gram1.ru. -SOURCE_110_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_110_LINE=docs/ERRORS-LESSONS-20260618.md:108:Correction: use local direct Authentik outpost checks with homepage.vpn.gram1.ru forwarded headers before enabling NPMplus auth. Do not require the public auth.vpn outpost auth endpoint to match the Homepage provider. -SOURCE_111_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_111_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:11:homepage.vpn.gram1.ru proxy id 17 cert id 32 access 1 ssl forced -SOURCE_112_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_112_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:33:Launch URL: https://homepage.vpn.gram1.ru -SOURCE_113_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_113_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:42:Only after provider and outpost verification, enable npmplus_auth_request authentik for homepage.vpn.gram1.ru. Keep rollback ready by setting it back to none. -SOURCE_114_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_114_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:54:The public check through auth.vpn.gram1.ru returned 404 for /outpost.goauthentik.io/auth/nginx, while the local direct outpost check for homepage.vpn.gram1.ru returned a valid auth response. Treat the public auth.vpn auth endpoint as a wrong validation path for Homepage. Next safe step: enable npmplus_auth_request=authentik only for homepage proxy id 17 with rollback ready. -SOURCE_115_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_115_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:73:host: homepage.vpn.gram1.ru -SOURCE_116_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_116_LINE=docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618.md:22:homepage.vpn.gram1.ru -> [IP_REDACTED] -> NPMplus -> [IP_REDACTED]:3000 -SOURCE_117_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_117_LINE=docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618.md:55:EDGE_HOST=edge-vm;DOCKER_IMAGES=actual-budget=actualbudget/actual-server:latest;authentik-postgresql-1=postgres:16-alpine;authentik-server-1=ghcr.io/goauthentik/server:2026.5.3;authentik-worker-1=ghcr.io/goauthentik/server:2026.5.3;beszel=henrygd/beszel:latest;crowdsec=crowdsecurity/crowdsec:latest;dockge=louislam/dockge:1;dozzle=amir20/dozzle:latest;filebrowser=filebrowser/filebrowser:latest;gitea=docker.gitea.com/gitea:1.26.2;gotify=gotify/server:latest;grafana=grafana/grafana:latest;homeassistant=ghcr.io/home-assistant/home-assistant:stable;homebox=ghcr.io/sysadminsmedia/homebox:latest-rootless;homepage=ghcr.io/gethomepage/homepage:latest;immi -SOURCE_118_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_118_LINE=docs/SERVICES-BOOTSTRAP-20260617.md:208:homepage.vpn.gram1.ru -> [IP_REDACTED] -> [IP_REDACTED]:3000 -SOURCE_119_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_119_LINE=docs/SERVICES-BOOTSTRAP-20260617.md:216:BINDING= - NPM_IPV4_BINDING=[IP_REDACTED]; - IPV4_BINDING=[IP_REDACTED];;ACCESS=5|access_list_id=1|address=[IP_REDACTED]|directive=allow;6|access_list_id=1|address=[IP_REDACTED]|directive=allow;7|access_list_id=1|address=[IP_REDACTED]|directive=allow;8|access_list_id=1|address=[IP_REDACTED]|directive=allow;;PROXIES=16|["kuma.vpn.gram1.ru"]|forward=http://[IP_REDACTED]:3001|cert=32|access=1|enabled=1|ssl_forced=1|hsts=0;17|["homepage.vpn.gram1.ru"]|forward=http://[IP_REDACTED]:3000|cert=32|access=1|enabled=1|ssl_forced=1|hsts=0;18|["gitea.vpn.gram1.ru"]|forward=http://[IP_REDACTED]:3002|cert=32|access=1|enabled=1|ssl_forced=1|hsts=0;19|["fileb -SOURCE_120_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e -SOURCE_120_LINE=docs/SERVICES-BOOTSTRAP-20260617.md:222:kuma.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=302|CERT=issuer=C=US, O=Let's Encrypt, CN=YE2;notAfter=Sep 15 20:18:29 2026 GMT;X509v3 Subject Alternative Name: ; DNS:*.vpn.gram1.ru, DNS:vpn.gram1.ru;;homepage.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=200|CERT=issuer=C=US, O=Let's Encrypt, CN=YE2;notAfter=Sep 15 20:18:29 2026 GMT;X509v3 Subject Alternative Name: ; DNS:*.vpn.gram1.ru, DNS:vpn.gram1.ru;;gitea.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=200|CERT=issuer=C=US, O=Let's Encrypt, CN=YE2;notAfter=Sep 15 20:18:29 2026 GMT;X509v3 Subject Alternative Name: ; DNS:*.vpn.gram1.ru, DNS:vpn.gram1.ru;;filebrowser.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=200|CERT=iss -SOURCE_MATCH_COUNT=120 -PVE01_NETBIRD_UNIT_MATCH_COUNT=3 -PVE01_NETBIRD_PRESENT=true -PVE01_NETBIRD_STATUS_SHA=0cf182820b4c45584910a7a7b5bff12370f80c8707f9104557b0a61e643bbf11 -PVE01_NETBIRD_CONNECTED_HINT=true -NEW_PC_NETBIRD_MISSING=true -NEW_PC_NETBIRD_NOT_RUNNING=false -NEW_PC_NETBIRD_NOT_CONNECTED=false -NEW_PC_HOME_DNS_MISSING=true -NEW_PC_HOME_PRIVATE_DNS_PRESENT=false -NEW_PC_HOME_HTTPS_WORKING=false -REPAIR_CLASS=REPAIR_NEW_PC_NETBIRD_INSTALL -DECISION=ANALYZE_HOME_GRAM1_EDGE_VPN_DNS -NEXT_GATE=HOME_GRAM1_NEW_PC_TARGETED_REPAIR -TASK_RESULT=HOME_GRAM1_EDGE_VPN_DNS_RCA +INGRESS_HOSTKEY_SELF_BOUND=true +VM150_RUNNING=true +VM150_QGA=true +VM150_CONFIG_SHA256=2e4c1ea46b27034a2efe7bfc00cd9f32c0641a43d8365aa21992f72493a43b0e +VM150_CONFIG_MATCH_99595_PRE=true +PROD_HOSTNAME_PRESENT=true +PROD_HOSTNAME_SHA256=3c7efeafc1bb10d0343c4790ae885d930ff08cf90396917fea962e3fce0e5e14 +PROD_HOSTNAME_IS_SNIKKET=true +PROD_STATIC_HOSTNAME_MATCH=true +PROD_SNIKKET_DOMAIN_OK=true +FRESH_STATE_PRESENT=true +FRESH_RESTORE_VALIDATION_PRESENT=true +STATE_GENERATION_MATCH=true +STATE_STATUS_SEALED=true +STATE_CLOUD_QUORUM_2=true +STATE_CLOUD_A_VERIFIED=true +STATE_CLOUD_B_VERIFIED=true +STATE_CLOUD_A_SEAL_VERIFIED=true +STATE_CLOUD_B_SEAL_VERIFIED=true +STATE_PART_HASHES_VERIFIED=true +STATE_SEAL_WRITTEN=true +STATE_LOCAL_CLEANUP_OK=true +STATE_LOCAL_PAYLOAD_ABSENT=true +RESTORE_RESULT_OK=true +RESTORE_PAYLOAD_SHA_VERIFIED=true +RESTORE_ARCHIVE_READBACK_VERIFIED=true +RESTORE_PROXMOX_CONFIG_EXTRACT_VERIFIED=true +STRICT_FRESH_EVIDENCE_PASS=true +FRESH_STATE_SHA256=d1633743b207d851dee72c59fb26a3071622bcbcbd63e943463ebada0081f10c +FRESH_RESTORE_SHA256=122ea17af4149a1fdbb42efb78d13256f3e49915cbff4a87d595fd1e13c18822 +FRESH_GENERATION_AGE_HOURS=0.167 +REMOTE_A_BASE_PRESENT=true +REMOTE_B_BASE_PRESENT=true +ARCHIVE_SHA256=f512b9e70dac503583643203a42a1c57cee0f061cf301152036408e0cf0abeac +ARCHIVE_SIZE_BYTES=935669734 +PART_COUNT=2 +PARTS_MANIFEST_SHA256=851e54c928f30d7f5064deb067caa26341364b5d6b6d0e156e496237cb434270 +REMOTE_A_BASE_PRESENT=true +REMOTE_A_GEN_PATH_MATCH=true +REMOTE_A_SEAL_JSON_READ_RC=0 +REMOTE_A_SEAL_JSON_NONEMPTY=true +REMOTE_A_PARTS_TSV_READ_RC=0 +REMOTE_A_PARTS_TSV_NONEMPTY=true +REMOTE_B_BASE_PRESENT=true +REMOTE_B_GEN_PATH_MATCH=true +REMOTE_B_SEAL_JSON_READ_RC=0 +REMOTE_B_SEAL_JSON_NONEMPTY=true +REMOTE_B_PARTS_TSV_READ_RC=0 +REMOTE_B_PARTS_TSV_NONEMPTY=true +EXPORT_STATE_OK=true +EXPORT_GENERATION_MATCH_FRESH=true +EXPORT_REMOTE_A_VALID=true +EXPORT_REMOTE_A_PART_COUNT=2 +EXPORT_REMOTE_B_VALID=true +EXPORT_REMOTE_B_PART_COUNT=2 +TEMP_VM_9600_PRESENT=false +RESTORE_STAGE_99595_RESIDUE_COUNT=0 +PROD_RUNNING_CONTAINER_COUNT=4 +PROD_RECON_RESULT_OK=true +PROD_RECON_EXEC_OK=true +PROD_RECON_SHA_OK=true +PUBLIC_DNS_OK_COUNT=3 +PUBLIC_HTTPS_OK_COUNT=3 +PUBLIC_STUN_3479_PASS=true +RECONCILE_COMPLETE=true +DECISION=ANALYZE_EXACT_99596 +NEXT_GATE=SNIKKET_ISOLATED_BOOT_REPROOF_OR_FINAL_SEAL +TASK_RESULT=SNIKKET_FRESH_BACKUP_RESTORE_RECONCILE CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null