From e0108639ef9627ed4e2c9c8c402908003ff31ae8 Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Wed, 9 Sep 2026 07:33:40 +0000 Subject: [PATCH] runtime: publish SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030 --- ...PORT-260909-GRAM-XF-HTTP-SECURITY-030.json | 38 ++++++++++++++++++ ...PPORT-260909-GRAM-XF-HTTP-SECURITY-030.txt | 40 +++++++++++++++++++ runtime/latest.json | 16 ++++---- runtime/latest.txt | 18 ++++----- 4 files changed, 95 insertions(+), 17 deletions(-) create mode 100644 runtime/history/SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030.json create mode 100644 runtime/history/SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030.txt diff --git a/runtime/history/SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030.json b/runtime/history/SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030.json new file mode 100644 index 00000000..676a85f6 --- /dev/null +++ b/runtime/history/SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "gram-support-xenforo-http-security-baseline", + "started_at_utc": "2026-09-09T07:33:35Z", + "finished_at_utc": "2026-09-09T07:33:40Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "f99eb7b1a870bdc865cb888c3b9543c05174c9a845179bc7c6f6d82d9c970c6f", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "586bae7f497139bd131032ccce3b35165a3e175a5a6073f6d2d37dc62975c1ee", + "sanitized_output_sha256": "586bae7f497139bd131032ccce3b35165a3e175a5a6073f6d2d37dc62975c1ee", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nSUPPORT030_HTTP_SECURITY={\"production\":[{\"vmid\":160,\"root\":\"/var/www/forums/codevipe/public\",\"board_url\":\"https://codevipe.ru\",\"board_active\":\"1\",\"probes\":{\"root\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true},\"login\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false},{\"name\":\"xf_session\",\"secure\":true,\"httponly\":true,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true}}},{\"vmid\":160,\"root\":\"/var/www/forums/dsmods/public\",\"board_url\":\"https://dsmods.ru\",\"board_active\":\"1\",\"probes\":{\"root\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true},\"login\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false},{\"name\":\"xf_session\",\"secure\":true,\"httponly\":true,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true}}},{\"vmid\":160,\"root\":\"/var/www/forums/gamevipe/public\",\"board_url\":\"https://gamevipe.ru\",\"board_active\":\"1\",\"probes\":{\"root\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true},\"login\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false},{\"name\":\"xf_session\",\"secure\":true,\"httponly\":true,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true}}},{\"vmid\":160,\"root\":\"/var/www/forums/hkmods/public\",\"board_url\":\"https://hkmods.ru\",\"board_active\":\"1\",\"probes\":{\"root\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true},\"login\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false},{\"name\":\"xf_session\",\"secure\":true,\"httponly\":true,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true}}},{\"vmid\":160,\"root\":\"/var/www/forums/kingofwolk/public\",\"board_url\":\"https://kingofwolk.ru\",\"board_active\":\"1\",\"probes\":{\"root\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"],\"strict-transport-security\":[\"max-age=31536000\"],\"permissions-policy\":[\"geolocation=(), microphone=(), camera=()\"],\"content-security-policy-report-only\":[\"default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com/; script-src-elem 'self' 'nonce-' https://challenges.cloudflare.com/; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/; font-src 'self' data:; connect-src 'self' https://challenges.cloudflare.com/; frame-src 'self' https://challenges.cloudflare.com/; worker-src 'self'; manifest-src 'self'; media-src 'self'; report-uri /__csp-report-v1;\"],\"content-security-policy\":[\"base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; worker-src 'self'; manifest-src 'self'; img-src 'self' data: blob: https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/; connect-src 'self' https://challenges.cloudflare.com/; frame-src 'self' https://challenges.cloudflare.com/; font-src 'self' data:; media-src 'self';\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true},\"login\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"],\"strict-transport-security\":[\"max-age=31536000\"],\"permissions-policy\":[\"geolocation=(), microphone=(), camera=()\"],\"content-security-policy-report-only\":[\"default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com/; script-src-elem 'self' 'nonce-' https://challenges.cloudflare.com/; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/; font-src 'self' data:; connect-src 'self' https://challenges.cloudflare.com/; frame-src 'self' https://challenges.cloudflare.com/; worker-src 'self'; manifest-src 'self'; media-src 'self'; report-uri /__csp-report-v1;\"],\"content-security-policy\":[\"base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; worker-src 'self'; manifest-src 'self'; img-src 'self' data: blob: https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/; connect-src 'self' https://challenges.cloudflare.com/; frame-src 'self' https://challenges.cloudflare.com/; font-src 'self' data:; media-src 'self';\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false},{\"name\":\"xf_session\",\"secure\":true,\"httponly\":true,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true}}},{\"vmid\":160,\"root\":\"/var/www/forums/zakrutim/public\",\"board_url\":\"https://zakrutim.ru\",\"board_active\":\"1\",\"probes\":{\"root\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true},\"login\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false},{\"name\":\"xf_session\",\"secure\":true,\"httponly\":true,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true}}},{\"vmid\":210,\"root\":\"/var/www/forums/newfi/public\",\"board_url\":\"https://newfi.ru\",\"board_active\":\"1\",\"probes\":{\"root\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"],\"strict-transport-security\":[\"max-age=31536000\"],\"permissions-policy\":[\"geolocation=(), microphone=(), camera=()\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true},\"login\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx/1.28.3 (Ubuntu)\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"],\"referrer-policy\":[\"strict-origin-when-cross-origin\"],\"strict-transport-security\":[\"max-age=31536000\"],\"permissions-policy\":[\"geolocation=(), microphone=(), camera=()\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":true,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false},{\"name\":\"xf_session\",\"secure\":true,\"httponly\":true,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true}}}],\"staging\":{\"root\":\"/var/www/forums/newfi/public\",\"options\":{\"state\":\"OK\",\"db_name\":\"xf_newfi\",\"board_url\":\"http://newfi-staging.gram1.ru\",\"board_active\":\"0\"},\"local_staging_probes\":{\"root\":{\"state\":\"OK\",\"status\":503,\"headers\":{\"server\":[\"nginx\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":false,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true},\"login\":{\"state\":\"OK\",\"status\":200,\"headers\":{\"server\":[\"nginx\"],\"x-frame-options\":[\"SAMEORIGIN\"],\"x-content-type-options\":[\"nosniff\"],\"cache-control\":[\"private, no-cache, max-age=0\"]},\"cookies\":[{\"name\":\"xf_csrf\",\"secure\":false,\"httponly\":false,\"samesite\":null,\"path_present\":true,\"domain_present\":false},{\"name\":\"xf_session\",\"secure\":false,\"httponly\":true,\"samesite\":null,\"path_present\":true,\"domain_present\":false}],\"tls_verified\":true}}},\"kingofwolk_csp_present\":true,\"holds\":[]}\nSUPPORT030_HOLDS=[]\nSUPPORT030_MUTATION_SCOPE=NONE_READ_ONLY\nSUPPORT030_DECISION=XENFORO_HTTP_SECURITY_BASELINE_CAPTURED\n" +} diff --git a/runtime/history/SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030.txt b/runtime/history/SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030.txt new file mode 100644 index 00000000..c33e397b --- /dev/null +++ b/runtime/history/SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030.txt @@ -0,0 +1,40 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=gram-support-xenforo-http-security-baseline +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=f99eb7b1a870bdc865cb888c3b9543c05174c9a845179bc7c6f6d82d9c970c6f +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=586bae7f497139bd131032ccce3b35165a3e175a5a6073f6d2d37dc62975c1ee +SANITIZED_OUTPUT_SHA256=586bae7f497139bd131032ccce3b35165a3e175a5a6073f6d2d37dc62975c1ee +OUTPUT_BEGIN +ERROR_REGISTER_CHECK=OK +REFERENCE_CHECK=OK +AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED +RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +SUPPORT030_HTTP_SECURITY={"production":[{"vmid":160,"root":"/var/www/forums/codevipe/public","board_url":"https://codevipe.ru","board_active":"1","probes":{"root":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true},"login":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false},{"name":"xf_session","secure":true,"httponly":true,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true}}},{"vmid":160,"root":"/var/www/forums/dsmods/public","board_url":"https://dsmods.ru","board_active":"1","probes":{"root":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true},"login":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false},{"name":"xf_session","secure":true,"httponly":true,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true}}},{"vmid":160,"root":"/var/www/forums/gamevipe/public","board_url":"https://gamevipe.ru","board_active":"1","probes":{"root":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true},"login":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false},{"name":"xf_session","secure":true,"httponly":true,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true}}},{"vmid":160,"root":"/var/www/forums/hkmods/public","board_url":"https://hkmods.ru","board_active":"1","probes":{"root":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true},"login":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false},{"name":"xf_session","secure":true,"httponly":true,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true}}},{"vmid":160,"root":"/var/www/forums/kingofwolk/public","board_url":"https://kingofwolk.ru","board_active":"1","probes":{"root":{"state":"OK","status":200,"headers":{"server":["nginx"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"],"strict-transport-security":["max-age=31536000"],"permissions-policy":["geolocation=(), microphone=(), camera=()"],"content-security-policy-report-only":["default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com/; script-src-elem 'self' 'nonce-' https://challenges.cloudflare.com/; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/; font-src 'self' data:; connect-src 'self' https://challenges.cloudflare.com/; frame-src 'self' https://challenges.cloudflare.com/; worker-src 'self'; manifest-src 'self'; media-src 'self'; report-uri /__csp-report-v1;"],"content-security-policy":["base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; worker-src 'self'; manifest-src 'self'; img-src 'self' data: blob: https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/; connect-src 'self' https://challenges.cloudflare.com/; frame-src 'self' https://challenges.cloudflare.com/; font-src 'self' data:; media-src 'self';"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true},"login":{"state":"OK","status":200,"headers":{"server":["nginx"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"],"strict-transport-security":["max-age=31536000"],"permissions-policy":["geolocation=(), microphone=(), camera=()"],"content-security-policy-report-only":["default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com/; script-src-elem 'self' 'nonce-' https://challenges.cloudflare.com/; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/; font-src 'self' data:; connect-src 'self' https://challenges.cloudflare.com/; frame-src 'self' https://challenges.cloudflare.com/; worker-src 'self'; manifest-src 'self'; media-src 'self'; report-uri /__csp-report-v1;"],"content-security-policy":["base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; worker-src 'self'; manifest-src 'self'; img-src 'self' data: blob: https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/; connect-src 'self' https://challenges.cloudflare.com/; frame-src 'self' https://challenges.cloudflare.com/; font-src 'self' data:; media-src 'self';"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false},{"name":"xf_session","secure":true,"httponly":true,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true}}},{"vmid":160,"root":"/var/www/forums/zakrutim/public","board_url":"https://zakrutim.ru","board_active":"1","probes":{"root":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true},"login":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false},{"name":"xf_session","secure":true,"httponly":true,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true}}},{"vmid":210,"root":"/var/www/forums/newfi/public","board_url":"https://newfi.ru","board_active":"1","probes":{"root":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"],"strict-transport-security":["max-age=31536000"],"permissions-policy":["geolocation=(), microphone=(), camera=()"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true},"login":{"state":"OK","status":200,"headers":{"server":["nginx/1.28.3 (Ubuntu)"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"],"referrer-policy":["strict-origin-when-cross-origin"],"strict-transport-security":["max-age=31536000"],"permissions-policy":["geolocation=(), microphone=(), camera=()"]},"cookies":[{"name":"xf_csrf","secure":true,"httponly":false,"samesite":null,"path_present":true,"domain_present":false},{"name":"xf_session","secure":true,"httponly":true,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true}}}],"staging":{"root":"/var/www/forums/newfi/public","options":{"state":"OK","db_name":"xf_newfi","board_url":"http://newfi-staging.gram1.ru","board_active":"0"},"local_staging_probes":{"root":{"state":"OK","status":503,"headers":{"server":["nginx"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"]},"cookies":[{"name":"xf_csrf","secure":false,"httponly":false,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true},"login":{"state":"OK","status":200,"headers":{"server":["nginx"],"x-frame-options":["SAMEORIGIN"],"x-content-type-options":["nosniff"],"cache-control":["private, no-cache, max-age=0"]},"cookies":[{"name":"xf_csrf","secure":false,"httponly":false,"samesite":null,"path_present":true,"domain_present":false},{"name":"xf_session","secure":false,"httponly":true,"samesite":null,"path_present":true,"domain_present":false}],"tls_verified":true}}},"kingofwolk_csp_present":true,"holds":[]} +SUPPORT030_HOLDS=[] +SUPPORT030_MUTATION_SCOPE=NONE_READ_ONLY +SUPPORT030_DECISION=XENFORO_HTTP_SECURITY_BASELINE_CAPTURED + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 87c37627..676a85f6 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260909-GRAM-XF-TEMPLATE-COMPACT-029", + "command_id": "SUPPORT-260909-GRAM-XF-HTTP-SECURITY-030", "status": "OK", "rc": 0, "host": "pve01", "mode": "read-only", - "component": "gram-support-xenforo-template-insertion-compact-contract", - "started_at_utc": "2026-09-09T07:27:03Z", - "finished_at_utc": "2026-09-09T07:27:06Z", + "component": "gram-support-xenforo-http-security-baseline", + "started_at_utc": "2026-09-09T07:33:35Z", + "finished_at_utc": "2026-09-09T07:33:40Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "7ff88f70c1f72daf55e0520ab9cb87bf820fd6bcebb1dc9b7f9283b80f423dbd", + "command_sha256": "f99eb7b1a870bdc865cb888c3b9543c05174c9a845179bc7c6f6d82d9c970c6f", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "3d9dd405890894455374eb4d9d47b965f8c38cef6b5d5f3ff08cae36506f8363", - "sanitized_output_sha256": "3d9dd405890894455374eb4d9d47b965f8c38cef6b5d5f3ff08cae36506f8363", + "raw_evidence_sha256": "586bae7f497139bd131032ccce3b35165a3e175a5a6073f6d2d37dc62975c1ee", + "sanitized_output_sha256": "586bae7f497139bd131032ccce3b35165a3e175a5a6073f6d2d37dc62975c1ee", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nSUPPORT029_RESULTS=[{\"vmid\":160,\"node\":\"pve02\",\"probe\":\"OK\",\"guest_rc\":0,\"data\":{\"state\":\"OK\",\"host\":\"forum-prod\",\"instances\":[{\"state\":\"OK\",\"db_name\":\"xf_codevipe\",\"board_url\":\"https://codevipe.ru\",\"styles\":[{\"style_id\":\"1\",\"parent_id\":\"0\",\"title\":\"Default style\",\"user_selectable\":\"0\",\"designer_mode\":null},{\"style_id\":\"2\",\"parent_id\":\"1\",\"title\":\"Default style 2\",\"user_selectable\":\"1\",\"designer_mode\":null}],\"selected_templates\":[{\"template_id\":\"591\",\"type\":\"public\",\"title\":\"PAGE_CONTAINER\",\"style_id\":\"0\",\"addon_id\":\"XF\",\"body_bytes\":37088,\"body_sha256\":\"61e21108a8e66fb6021693c66f0fb7679a259115e95da2527efd7e4a2afb9180\",\"line_count\":901,\"anchor_counts\":{\"BODY_OPEN\":1,\"BODY_CLOSE\":1,\"P_BODY\":15,\"P_NAV\":7,\"P_HEADER\":4,\"P_FOOTER\":10,\"XF_AD\":11,\"XF_WIDGET\":0,\"XF_INCLUDE\":1,\"XF_MACRO\":43,\"DATA_XF_INIT\":15},\"anchor_first\":{\"BODY_OPEN\":[{\"line\":88,\"marker\":\"BODY_OPEN\",\"classes\":[],\"ids\":[],\"xf_tags\":[],\"attrs\":{\"template\":\"{$template}\"},\"excerpt\":\"\"}],\"BODY_CLOSE\":[{\"line\":758,\"marker\":\"BODY_CLOSE\",\"classes\":[],\"ids\":[],\"xf_tags\":[],\"attrs\":[],\"excerpt\":\"\"}],\"P_BODY\":[{\"line\":508,\"marker\":\"P_BODY\",\"classes\":[\"p-body\"],\"ids\":[],\"xf_tags\":[],\"attrs\":[],\"excerpt\":\"
\"},{\"line\":509,\"marker\":\"P_BODY\",\"classes\":[\"p-body-inner\"],\"ids\":[],\"xf_tags\":[],\"attrs\":[],\"excerpt\":\"
\"},{\"line\":531,\"marker\":\"P_BODY\",\"classes\":[\"p-body-header\"],\"ids\":[],\"xf_tags\":[],\"attrs\":[],\"excerpt\":\"
\"}],\"P_NAV\":[{\"line\":160,\"marker\":\"P_NAV\",\"classes\":[\"p-nav\"],\"ids\":[],\"xf_tags\":[],\"attrs\":[],\"excerpt\":\"