homelab-runtime-publisher
39 lines
5.2 KiB
JSON
39 lines
5.2 KiB
JSON
{
|
|
"schema_version": 1,
|
|
"channel": "homelab-runtime",
|
|
"command_id": "NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21",
|
|
"status": "OK",
|
|
"rc": 0,
|
|
"host": "pve01",
|
|
"mode": "read-only",
|
|
"component": "newfi-stagingedge-canonical-template-cert-cloudflare-readonly",
|
|
"started_at_utc": "2026-09-08T14:41:13Z",
|
|
"finished_at_utc": "2026-09-08T14:41:14Z",
|
|
"reference_register_checked": true,
|
|
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
|
|
"error_register_checked": true,
|
|
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
|
|
"command_sha256": "d533a9324281348c67be4fa81dff3fc812849ac61bb394bf98a48126e543ac6e",
|
|
"duplicate_failed_command_blocked": false,
|
|
"block_reason": null,
|
|
"execution_started": true,
|
|
"change_declared": false,
|
|
"result_contract_valid": true,
|
|
"result_contract_status": null,
|
|
"result_contract_error": null,
|
|
"command_rc": 0,
|
|
"changes_made": false,
|
|
"rollback_started": false,
|
|
"rollback_restored": null,
|
|
"mutation_outcome": "NO_MUTATION",
|
|
"sanitized": true,
|
|
"secrets_included": false,
|
|
"private_addresses_included": false,
|
|
"raw_evidence_retained_locally": true,
|
|
"raw_evidence_sha256": "067929c922038b7ded9ac4d20fe7ece04f10ac1f162bb29e3ec7a4b945e4e8a6",
|
|
"sanitized_output_sha256": "067929c922038b7ded9ac4d20fe7ece04f10ac1f162bb29e3ec7a4b945e4e8a6",
|
|
"output_truncated_in_json": false,
|
|
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
|
|
"output": "CERTCF21_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21\nMODE=read-only\nMUTATIONS_PERFORMED=NO\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nRUNNER_SHA_MATCH=true\nTRUSTED_EDGEVM_MARKER=true\nPUBLIC_VPS_REJECT_MARKER=true\nCANONICAL_LIVE_USERS=debian\nPOST_REBOOT_USER_CONFIRM=true\nCANONICAL_USER_PROOF=true\nNETBIRD_STATUS_JSON_RC=0\nNETBIRD_STATUS_DETAIL_RC=0\nEDGEVM_OVERLAY_IP_COUNT=1\nEDGEVM_KNOWN_HOST_RC=0\nEDGEVM_KEYSCAN_RC=0\nEDGEVM_HOSTKEY_MATCH=true\nEDGEVM_HOSTKEY_ALGS=ssh-ed25519\nEDGEVM_SUDO_RC=0\nOUTER_CERTCF_GATE=true\nREMOTE_CERTCF_RC=0\nREMOTE_CERTCF_JSON={\"euid\":0,\"mutations_performed\":\"NO\",\"npmplus_row_count\":1,\"npmplus_healthy\":true,\"npmplus_image\":\"zoeyvid/npmplus:2026-06-17-b1\",\"npmplus_status\":\"Up 11 days (healthy)\",\"data_mount_count\":1,\"container_nginx_path\":\"/usr/local/nginx/sbin/nginx\",\"nginx_test_rc\":0,\"production_template_count\":1,\"production_template_files\":[\"998.conf\"],\"staging_route_hit_count\":0,\"production_template_file\":\"998.conf\",\"production_template_sha256\":\"dd443098bf4452f629597e9dd5cf26f844b2a6a64e6882ee401bb6925a6281b0\",\"production_host_occurrence_count\":4,\"production_host_occurrences\":[{\"line\":6,\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":14,\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":16,\"text\":\"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;\"},{\"line\":17,\"text\":\"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;\"}],\"template_directives\":[{\"line\":4,\"kind\":\"listen\",\"text\":\"listen 0.0.0.0:80;\"},{\"line\":5,\"kind\":\"listen\",\"text\":\"listen [::]:80;\"},{\"line\":6,\"kind\":\"server_name\",\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":12,\"kind\":\"listen\",\"text\":\"listen 0.0.0.0:443 ssl;\"},{\"line\":13,\"kind\":\"listen\",\"text\":\"listen [::]:443 ssl;\"},{\"line\":14,\"kind\":\"server_name\",\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":16,\"kind\":\"ssl_certificate\",\"text\":\"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;\"},{\"line\":17,\"kind\":\"ssl_certificate_key\",\"text\":\"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;\"},{\"line\":31,\"kind\":\"proxy_pass\",\"text\":\"proxy_pass http://[PRIVATE_IP]:80;\"}],\"template_directives_truncated\":false,\"cert_path_map_ok\":true,\"cert_file_exists\":true,\"key_file_exists\":true,\"renewal_file_exists\":true,\"cert_san_exact\":true,\"cert_san_count\":1,\"cert_expiry_days\":89,\"cert_key_match\":true,\"renew_auth_dns_cloudflare\":true,\"renew_credential_ref_present\":true,\"renew_credential_inside_sha256\":\"2ebc6b02844919c1222d982b801daae09444649043b00a4475774a2a859f8dfd\",\"credential_auth_type\":\"credential_file_missing\",\"credential_file_safety_ok\":false,\"credential_auth_supported\":false,\"cf_zone_lookup_success\":false,\"cf_zone_count\":0,\"cf_staging_query_success\":false,\"cf_staging_record_count\":-1,\"cf_reference_candidate_count\":0,\"cf_reference_candidates\":[],\"CERT_CRYPTO_OK\":true,\"RENEWAL_DNS_CLOUDFLARE_OK\":true,\"CREDENTIAL_FILE_SAFETY_OK\":false,\"CREDENTIAL_AUTH_SUPPORTED\":false,\"CLOUDFLARE_GET_ONLY_OK\":false,\"decision\":\"HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK\"}\nREMOTE_CERTCF_DECISION=HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK\nPRODUCTION_PUBLIC_CURL_RC=0\nPRODUCTION_PUBLIC_HTTP=200\nCERTCF21_DECISION=HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK\nCERTCF21_END=true\n"
|
|
}
|