homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity
Files
de41e9dcda73c3d32a1a60a2e1f9df5cad7e2ba5
homelab-public-context/runtime/latest.json
T
homelab-runtime-publisher de41e9dcda runtime: publish SUPPORT-261005-HOME-GRAM1-EDGE-VPN-DNS-RCA-99595R1
2026-10-05 09:25:35 +00:00

39 lines
73 KiB
JSON
Raw Blame History

{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "SUPPORT-261005-HOME-GRAM1-EDGE-VPN-DNS-RCA-99595R1",
"status": "OK",
"rc": 0,
"host": "pve01",
"mode": "read-only",
"component": "home-gram1-edge-vpn-dns-rca",
"started_at_utc": "2026-10-05T09:25:29Z",
"finished_at_utc": "2026-10-05T09:25:35Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "8373cbc8cc09222185a3eea30f811f59cdfd6c7e88118f3aa80c8fa2ce6e6027",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": false,
"result_contract_valid": true,
"result_contract_status": null,
"result_contract_error": null,
"command_rc": 0,
"changes_made": false,
"rollback_started": false,
"rollback_restored": null,
"mutation_outcome": "NO_MUTATION",
"sanitized": true,
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "8d2e00550474afe9ffde1aee1364664e74e5775593673837f2b262320065fd0e",
"sanitized_output_sha256": "e222f8b364b0ef3aed91333615ff2ea31a541a9169bdbcb53347e0231495293b",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "HOME_GRAM1_EDGE_VPN_DNS_RCA=V1\nNO_MAIL_SEND=true\nNO_SERVICE_RESTART=true\nNO_TIMER_MUTATION=true\nNO_NETWORK_MUTATION=true\nNO_SOURCE_MUTATION=true\nNO_DNS_MUTATION=true\nNO_PROXY_MUTATION=true\nNO_CONTAINER_MUTATION=true\nNO_ACCESS_LIST_MUTATION=true\nNO_LOCAL_WINDOWS_MUTATION=true\nMODE=read-only\nHOST_PVE01=true\nLOCAL_DIAG_OK=true \nLOCAL_NETBIRD_PRESENT=true \nLOCAL_NETBIRD_SERVICE_FOUND=true \nLOCAL_NETBIRD_SERVICE_RUNNING=true \nLOCAL_NETBIRD_STATUS_RC=0 \nLOCAL_NETBIRD_CONNECTED_HINT=true \nLOCAL_NETBIRD_DISCONNECTED_HINT=false \nLOCAL_NETBIRD_MANAGEMENT_HINT=true \nLOCAL_NETBIRD_SIGNAL_HINT=true \nLOCAL_NETBIRD_OUTPUT_SHA=99aa8ce33befabc416914dd33b1af56e247c8e25960e4cb74a4a797ce330a880 \nLOCAL_HOME_DNS_COUNT=0 \nLOCAL_HOME_DNS_PRIVATE_COUNT=0 \nLOCAL_HOME_DNS_PUBLIC_COUNT=0 \nLOCAL_HOME_HTTPS_STATUS=0 \nLOCAL_HOMEVPN_DNS_COUNT=0 \nLOCAL_HOMEVPN_DNS_PRIVATE_COUNT=0 \nLOCAL_HOMEVPN_DNS_PUBLIC_COUNT=0 \nLOCAL_HOMEVPN_HTTPS_STATUS=0 \nSERVER_HOME_DNS_COUNT=1\nSERVER_HOME_DNS_PRIVATE_COUNT=1\nSERVER_HOME_DNS_PUBLIC_COUNT=0\nSERVER_HOME_HTTPS_STATUS=200\nSERVER_HOME_CURL_RC=0\nSERVER_HOMEVPN_DNS_COUNT=0\nSERVER_HOMEVPN_DNS_PRIVATE_COUNT=0\nSERVER_HOMEVPN_DNS_PUBLIC_COUNT=0\nSERVER_HOMEVPN_HTTPS_STATUS=000\nSERVER_HOMEVPN_CURL_RC=6\nEDGE_VM_FOUND=true\nEDGE_VM_NODE=pve03\nEDGE_VM_STATUS=running\nEDGE_VM_NAME=edge-vm\nPVE03_EDGE_INSPECT_RC=0\nPVE03_EDGE_INSPECT_STDERR_SHA=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_QM_GUEST_EXEC_RC=0\nEDGE_QM_STDERR_SHA=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_QGA_JSON=true\nEDGE_GUEST_EXITCODE=0\nEDGE_HOSTNAME=edge-vm\nEDGE_DOCKER_PRESENT=yes\nEDGE_NETBIRD_PRESENT=yes\nEDGE_NETBIRD_STATUS_SHA=7de6bb08abbcd58a722827794738dd523a1cbb4119b3cf8a5cba3d617b99b459\nEDGE_NETBIRD_CONNECTED_HINT=true\nEDGE_RELEVANT_CONTAINER_COUNT=2\nEDGE_CONTAINER_1_NAME=npmplus\nEDGE_CONTAINER_1_IMAGE=zoeyvid/npmplus:2026-06-17-b1\nEDGE_CONTAINER_1_STATUS=Up 5 weeks (healthy)\nEDGE_CONTAINER_2_NAME=socket-proxy\nEDGE_CONTAINER_2_IMAGE=lscr.io/linuxserver/socket-proxy:latest\nEDGE_CONTAINER_2_STATUS=Up 5 weeks\nEDGE_HOMEPAGE_CONTAINER_COUNT=0\nEDGE_DOMAIN_CONFIG_MATCH_COUNT=120\nEDGE_DOMAINCFG_1_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-certificate-expiry-audit-20260621/index.html\nEDGE_DOMAINCFG_1_HAS_HOME=true\nEDGE_DOMAINCFG_1_HAS_VPN=false\nEDGE_DOMAINCFG_1_HAS_ALLOW=false\nEDGE_DOMAINCFG_1_HAS_DENY=false\nEDGE_DOMAINCFG_1_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_2_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-services-prepatch-snapshot-20260621/index.html\nEDGE_DOMAINCFG_2_HAS_HOME=true\nEDGE_DOMAINCFG_2_HAS_VPN=true\nEDGE_DOMAINCFG_2_HAS_ALLOW=false\nEDGE_DOMAINCFG_2_HAS_DENY=false\nEDGE_DOMAINCFG_2_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_3_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-warning-monitoring-closure-20260621/index.html\nEDGE_DOMAINCFG_3_HAS_HOME=true\nEDGE_DOMAINCFG_3_HAS_VPN=false\nEDGE_DOMAINCFG_3_HAS_ALLOW=false\nEDGE_DOMAINCFG_3_HAS_DENY=false\nEDGE_DOMAINCFG_3_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_4_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-post-ui-final-closure-20260621/index.html\nEDGE_DOMAINCFG_4_HAS_HOME=true\nEDGE_DOMAINCFG_4_HAS_VPN=false\nEDGE_DOMAINCFG_4_HAS_ALLOW=false\nEDGE_DOMAINCFG_4_HAS_DENY=false\nEDGE_DOMAINCFG_4_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_5_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-services-full-npmplus-visibility-patch-20260621/index.html\nEDGE_DOMAINCFG_5_HAS_HOME=true\nEDGE_DOMAINCFG_5_HAS_VPN=true\nEDGE_DOMAINCFG_5_HAS_ALLOW=false\nEDGE_DOMAINCFG_5_HAS_DENY=false\nEDGE_DOMAINCFG_5_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_6_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homelab-service-visibility-strict-audit-20260621/index.html\nEDGE_DOMAINCFG_6_HAS_HOME=true\nEDGE_DOMAINCFG_6_HAS_VPN=true\nEDGE_DOMAINCFG_6_HAS_ALLOW=false\nEDGE_DOMAINCFG_6_HAS_DENY=false\nEDGE_DOMAINCFG_6_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_7_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/vpn-domain-route-and-homepage-hostvalidation-fix-20260623/index.html\nEDGE_DOMAINCFG_7_HAS_HOME=false\nEDGE_DOMAINCFG_7_HAS_VPN=true\nEDGE_DOMAINCFG_7_HAS_ALLOW=false\nEDGE_DOMAINCFG_7_HAS_DENY=false\nEDGE_DOMAINCFG_7_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_8_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-all-runtime-services-visible-patch-20260621/index.html\nEDGE_DOMAINCFG_8_HAS_HOME=true\nEDGE_DOMAINCFG_8_HAS_VPN=true\nEDGE_DOMAINCFG_8_HAS_ALLOW=false\nEDGE_DOMAINCFG_8_HAS_DENY=false\nEDGE_DOMAINCFG_8_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_9_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-runtime-full-visibility-final-closure-20260621/index.html\nEDGE_DOMAINCFG_9_HAS_HOME=true\nEDGE_DOMAINCFG_9_HAS_VPN=true\nEDGE_DOMAINCFG_9_HAS_ALLOW=false\nEDGE_DOMAINCFG_9_HAS_DENY=false\nEDGE_DOMAINCFG_9_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_10_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-fix-schema-preflight-20260621/index.html\nEDGE_DOMAINCFG_10_HAS_HOME=true\nEDGE_DOMAINCFG_10_HAS_VPN=false\nEDGE_DOMAINCFG_10_HAS_ALLOW=false\nEDGE_DOMAINCFG_10_HAS_DENY=false\nEDGE_DOMAINCFG_10_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_11_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-vpn-alias-cards-patch-20260622/index.html\nEDGE_DOMAINCFG_11_HAS_HOME=false\nEDGE_DOMAINCFG_11_HAS_VPN=true\nEDGE_DOMAINCFG_11_HAS_ALLOW=false\nEDGE_DOMAINCFG_11_HAS_DENY=false\nEDGE_DOMAINCFG_11_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_12_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/vpn-domain-route-recovery-v2-20260623/index.html\nEDGE_DOMAINCFG_12_HAS_HOME=false\nEDGE_DOMAINCFG_12_HAS_VPN=true\nEDGE_DOMAINCFG_12_HAS_ALLOW=false\nEDGE_DOMAINCFG_12_HAS_DENY=false\nEDGE_DOMAINCFG_12_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_13_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-vpn-route-batch-1-retry-20260622/index.html\nEDGE_DOMAINCFG_13_HAS_HOME=false\nEDGE_DOMAINCFG_13_HAS_VPN=true\nEDGE_DOMAINCFG_13_HAS_ALLOW=false\nEDGE_DOMAINCFG_13_HAS_DENY=false\nEDGE_DOMAINCFG_13_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_14_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-warning-checker-patch-20260621/index.html\nEDGE_DOMAINCFG_14_HAS_HOME=true\nEDGE_DOMAINCFG_14_HAS_VPN=false\nEDGE_DOMAINCFG_14_HAS_ALLOW=false\nEDGE_DOMAINCFG_14_HAS_DENY=false\nEDGE_DOMAINCFG_14_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_15_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-public-dns-blocker-audit-20260621/index.html\nEDGE_DOMAINCFG_15_HAS_HOME=true\nEDGE_DOMAINCFG_15_HAS_VPN=false\nEDGE_DOMAINCFG_15_HAS_ALLOW=false\nEDGE_DOMAINCFG_15_HAS_DENY=false\nEDGE_DOMAINCFG_15_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_16_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/cloudflare-remaining-token-post-revoke-check-20260622/index.html\nEDGE_DOMAINCFG_16_HAS_HOME=false\nEDGE_DOMAINCFG_16_HAS_VPN=true\nEDGE_DOMAINCFG_16_HAS_ALLOW=false\nEDGE_DOMAINCFG_16_HAS_DENY=false\nEDGE_DOMAINCFG_16_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_17_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-certbot-path-layout-preflight-20260621/index.html\nEDGE_DOMAINCFG_17_HAS_HOME=true\nEDGE_DOMAINCFG_17_HAS_VPN=false\nEDGE_DOMAINCFG_17_HAS_ALLOW=false\nEDGE_DOMAINCFG_17_HAS_DENY=false\nEDGE_DOMAINCFG_17_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_18_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-clickability-grouping-audit-20260621/index.html\nEDGE_DOMAINCFG_18_HAS_HOME=true\nEDGE_DOMAINCFG_18_HAS_VPN=true\nEDGE_DOMAINCFG_18_HAS_ALLOW=false\nEDGE_DOMAINCFG_18_HAS_DENY=false\nEDGE_DOMAINCFG_18_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_19_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-vpn-dns-wildcard-patch-20260621/index.html\nEDGE_DOMAINCFG_19_HAS_HOME=false\nEDGE_DOMAINCFG_19_HAS_VPN=true\nEDGE_DOMAINCFG_19_HAS_ALLOW=false\nEDGE_DOMAINCFG_19_HAS_DENY=false\nEDGE_DOMAINCFG_19_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_20_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-checker-prepatch-inspect-20260621/index.html\nEDGE_DOMAINCFG_20_HAS_HOME=true\nEDGE_DOMAINCFG_20_HAS_VPN=false\nEDGE_DOMAINCFG_20_HAS_ALLOW=false\nEDGE_DOMAINCFG_20_HAS_DENY=false\nEDGE_DOMAINCFG_20_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_21_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/post-revoke-final-docs-runtime-closure-20260622/index.html\nEDGE_DOMAINCFG_21_HAS_HOME=false\nEDGE_DOMAINCFG_21_HAS_VPN=true\nEDGE_DOMAINCFG_21_HAS_ALLOW=false\nEDGE_DOMAINCFG_21_HAS_DENY=false\nEDGE_DOMAINCFG_21_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_22_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-vpn-route-batch-2-20260622/index.html\nEDGE_DOMAINCFG_22_HAS_HOME=false\nEDGE_DOMAINCFG_22_HAS_VPN=true\nEDGE_DOMAINCFG_22_HAS_ALLOW=false\nEDGE_DOMAINCFG_22_HAS_DENY=false\nEDGE_DOMAINCFG_22_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_23_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-supported-vpn-routes-closeout-20260623/index.html\nEDGE_DOMAINCFG_23_HAS_HOME=false\nEDGE_DOMAINCFG_23_HAS_VPN=true\nEDGE_DOMAINCFG_23_HAS_ALLOW=false\nEDGE_DOMAINCFG_23_HAS_DENY=false\nEDGE_DOMAINCFG_23_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_24_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-grouping-href-patch-20260622/index.html\nEDGE_DOMAINCFG_24_HAS_HOME=true\nEDGE_DOMAINCFG_24_HAS_VPN=false\nEDGE_DOMAINCFG_24_HAS_ALLOW=false\nEDGE_DOMAINCFG_24_HAS_DENY=false\nEDGE_DOMAINCFG_24_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_25_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-zero-cert-routes-strict-tls-audit-20260621/index.html\nEDGE_DOMAINCFG_25_HAS_HOME=true\nEDGE_DOMAINCFG_25_HAS_VPN=false\nEDGE_DOMAINCFG_25_HAS_ALLOW=false\nEDGE_DOMAINCFG_25_HAS_DENY=false\nEDGE_DOMAINCFG_25_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_26_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/homepage-full-visibility-closure-rescan-fixed-20260621/index.html\nEDGE_DOMAINCFG_26_HAS_HOME=true\nEDGE_DOMAINCFG_26_HAS_VPN=true\nEDGE_DOMAINCFG_26_HAS_ALLOW=false\nEDGE_DOMAINCFG_26_HAS_DENY=false\nEDGE_DOMAINCFG_26_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_27_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/reports/npmplus-production-update-20260619/index.html\nEDGE_DOMAINCFG_27_HAS_HOME=true\nEDGE_DOMAINCFG_27_HAS_VPN=false\nEDGE_DOMAINCFG_27_HAS_ALLOW=false\nEDGE_DOMAINCFG_27_HAS_DENY=false\nEDGE_DOMAINCFG_27_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_28_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/search/search_index.json\nEDGE_DOMAINCFG_28_HAS_HOME=true\nEDGE_DOMAINCFG_28_HAS_VPN=true\nEDGE_DOMAINCFG_28_HAS_ALLOW=true\nEDGE_DOMAINCFG_28_HAS_DENY=true\nEDGE_DOMAINCFG_28_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_29_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/index.html\nEDGE_DOMAINCFG_29_HAS_HOME=true\nEDGE_DOMAINCFG_29_HAS_VPN=false\nEDGE_DOMAINCFG_29_HAS_ALLOW=false\nEDGE_DOMAINCFG_29_HAS_DENY=false\nEDGE_DOMAINCFG_29_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_30_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/inventory/domains.csv\nEDGE_DOMAINCFG_30_HAS_HOME=true\nEDGE_DOMAINCFG_30_HAS_VPN=false\nEDGE_DOMAINCFG_30_HAS_ALLOW=false\nEDGE_DOMAINCFG_30_HAS_DENY=false\nEDGE_DOMAINCFG_30_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_31_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/inventory/ports/index.html\nEDGE_DOMAINCFG_31_HAS_HOME=true\nEDGE_DOMAINCFG_31_HAS_VPN=false\nEDGE_DOMAINCFG_31_HAS_ALLOW=false\nEDGE_DOMAINCFG_31_HAS_DENY=false\nEDGE_DOMAINCFG_31_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_32_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/runbooks/01-add-new-service/index.html\nEDGE_DOMAINCFG_32_HAS_HOME=true\nEDGE_DOMAINCFG_32_HAS_VPN=false\nEDGE_DOMAINCFG_32_HAS_ALLOW=false\nEDGE_DOMAINCFG_32_HAS_DENY=false\nEDGE_DOMAINCFG_32_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_33_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/runbooks/00-restore-from-zero-for-beginners/index.html\nEDGE_DOMAINCFG_33_HAS_HOME=true\nEDGE_DOMAINCFG_33_HAS_VPN=false\nEDGE_DOMAINCFG_33_HAS_ALLOW=false\nEDGE_DOMAINCFG_33_HAS_DENY=false\nEDGE_DOMAINCFG_33_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_34_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618/index.html\nEDGE_DOMAINCFG_34_HAS_HOME=false\nEDGE_DOMAINCFG_34_HAS_VPN=true\nEDGE_DOMAINCFG_34_HAS_ALLOW=false\nEDGE_DOMAINCFG_34_HAS_DENY=false\nEDGE_DOMAINCFG_34_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_35_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/99-current-state-summary/index.html\nEDGE_DOMAINCFG_35_HAS_HOME=true\nEDGE_DOMAINCFG_35_HAS_VPN=true\nEDGE_DOMAINCFG_35_HAS_ALLOW=false\nEDGE_DOMAINCFG_35_HAS_DENY=false\nEDGE_DOMAINCFG_35_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_36_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/05-service-catalog/index.html\nEDGE_DOMAINCFG_36_HAS_HOME=true\nEDGE_DOMAINCFG_36_HAS_VPN=false\nEDGE_DOMAINCFG_36_HAS_ALLOW=false\nEDGE_DOMAINCFG_36_HAS_DENY=false\nEDGE_DOMAINCFG_36_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_37_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/HANDOFF-20260618-authentik-npmplus/index.html\nEDGE_DOMAINCFG_37_HAS_HOME=false\nEDGE_DOMAINCFG_37_HAS_VPN=true\nEDGE_DOMAINCFG_37_HAS_ALLOW=false\nEDGE_DOMAINCFG_37_HAS_DENY=false\nEDGE_DOMAINCFG_37_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_38_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/06-certificates-troubleshooting/index.html\nEDGE_DOMAINCFG_38_HAS_HOME=true\nEDGE_DOMAINCFG_38_HAS_VPN=false\nEDGE_DOMAINCFG_38_HAS_ALLOW=false\nEDGE_DOMAINCFG_38_HAS_DENY=false\nEDGE_DOMAINCFG_38_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_39_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/ERRORS-LESSONS-20260618/index.html\nEDGE_DOMAINCFG_39_HAS_HOME=false\nEDGE_DOMAINCFG_39_HAS_VPN=true\nEDGE_DOMAINCFG_39_HAS_ALLOW=false\nEDGE_DOMAINCFG_39_HAS_DENY=false\nEDGE_DOMAINCFG_39_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_40_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/service-url-catalog/index.html\nEDGE_DOMAINCFG_40_HAS_HOME=true\nEDGE_DOMAINCFG_40_HAS_VPN=true\nEDGE_DOMAINCFG_40_HAS_ALLOW=false\nEDGE_DOMAINCFG_40_HAS_DENY=false\nEDGE_DOMAINCFG_40_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_41_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T024129Z/docs/SERVICES-BOOTSTRAP-20260617/index.html\nEDGE_DOMAINCFG_41_HAS_HOME=false\nEDGE_DOMAINCFG_41_HAS_VPN=true\nEDGE_DOMAINCFG_41_HAS_ALLOW=false\nEDGE_DOMAINCFG_41_HAS_DENY=false\nEDGE_DOMAINCFG_41_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_42_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-certificate-expiry-audit-20260621/index.html\nEDGE_DOMAINCFG_42_HAS_HOME=true\nEDGE_DOMAINCFG_42_HAS_VPN=false\nEDGE_DOMAINCFG_42_HAS_ALLOW=false\nEDGE_DOMAINCFG_42_HAS_DENY=false\nEDGE_DOMAINCFG_42_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_43_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-services-prepatch-snapshot-20260621/index.html\nEDGE_DOMAINCFG_43_HAS_HOME=true\nEDGE_DOMAINCFG_43_HAS_VPN=true\nEDGE_DOMAINCFG_43_HAS_ALLOW=false\nEDGE_DOMAINCFG_43_HAS_DENY=false\nEDGE_DOMAINCFG_43_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_44_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-warning-monitoring-closure-20260621/index.html\nEDGE_DOMAINCFG_44_HAS_HOME=true\nEDGE_DOMAINCFG_44_HAS_VPN=false\nEDGE_DOMAINCFG_44_HAS_ALLOW=false\nEDGE_DOMAINCFG_44_HAS_DENY=false\nEDGE_DOMAINCFG_44_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_45_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-post-ui-final-closure-20260621/index.html\nEDGE_DOMAINCFG_45_HAS_HOME=true\nEDGE_DOMAINCFG_45_HAS_VPN=false\nEDGE_DOMAINCFG_45_HAS_ALLOW=false\nEDGE_DOMAINCFG_45_HAS_DENY=false\nEDGE_DOMAINCFG_45_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_46_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-services-full-npmplus-visibility-patch-20260621/index.html\nEDGE_DOMAINCFG_46_HAS_HOME=true\nEDGE_DOMAINCFG_46_HAS_VPN=true\nEDGE_DOMAINCFG_46_HAS_ALLOW=false\nEDGE_DOMAINCFG_46_HAS_DENY=false\nEDGE_DOMAINCFG_46_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_47_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homelab-service-visibility-strict-audit-20260621/index.html\nEDGE_DOMAINCFG_47_HAS_HOME=true\nEDGE_DOMAINCFG_47_HAS_VPN=true\nEDGE_DOMAINCFG_47_HAS_ALLOW=false\nEDGE_DOMAINCFG_47_HAS_DENY=false\nEDGE_DOMAINCFG_47_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_48_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/vpn-domain-route-and-homepage-hostvalidation-fix-20260623/index.html\nEDGE_DOMAINCFG_48_HAS_HOME=false\nEDGE_DOMAINCFG_48_HAS_VPN=true\nEDGE_DOMAINCFG_48_HAS_ALLOW=false\nEDGE_DOMAINCFG_48_HAS_DENY=false\nEDGE_DOMAINCFG_48_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_49_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-all-runtime-services-visible-patch-20260621/index.html\nEDGE_DOMAINCFG_49_HAS_HOME=true\nEDGE_DOMAINCFG_49_HAS_VPN=true\nEDGE_DOMAINCFG_49_HAS_ALLOW=false\nEDGE_DOMAINCFG_49_HAS_DENY=false\nEDGE_DOMAINCFG_49_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_50_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-runtime-full-visibility-final-closure-20260621/index.html\nEDGE_DOMAINCFG_50_HAS_HOME=true\nEDGE_DOMAINCFG_50_HAS_VPN=true\nEDGE_DOMAINCFG_50_HAS_ALLOW=false\nEDGE_DOMAINCFG_50_HAS_DENY=false\nEDGE_DOMAINCFG_50_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_51_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-fix-schema-preflight-20260621/index.html\nEDGE_DOMAINCFG_51_HAS_HOME=true\nEDGE_DOMAINCFG_51_HAS_VPN=false\nEDGE_DOMAINCFG_51_HAS_ALLOW=false\nEDGE_DOMAINCFG_51_HAS_DENY=false\nEDGE_DOMAINCFG_51_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_52_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-vpn-alias-cards-patch-20260622/index.html\nEDGE_DOMAINCFG_52_HAS_HOME=false\nEDGE_DOMAINCFG_52_HAS_VPN=true\nEDGE_DOMAINCFG_52_HAS_ALLOW=false\nEDGE_DOMAINCFG_52_HAS_DENY=false\nEDGE_DOMAINCFG_52_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_53_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/vpn-domain-route-recovery-v2-20260623/index.html\nEDGE_DOMAINCFG_53_HAS_HOME=false\nEDGE_DOMAINCFG_53_HAS_VPN=true\nEDGE_DOMAINCFG_53_HAS_ALLOW=false\nEDGE_DOMAINCFG_53_HAS_DENY=false\nEDGE_DOMAINCFG_53_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_54_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-vpn-route-batch-1-retry-20260622/index.html\nEDGE_DOMAINCFG_54_HAS_HOME=false\nEDGE_DOMAINCFG_54_HAS_VPN=true\nEDGE_DOMAINCFG_54_HAS_ALLOW=false\nEDGE_DOMAINCFG_54_HAS_DENY=false\nEDGE_DOMAINCFG_54_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_55_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-warning-checker-patch-20260621/index.html\nEDGE_DOMAINCFG_55_HAS_HOME=true\nEDGE_DOMAINCFG_55_HAS_VPN=false\nEDGE_DOMAINCFG_55_HAS_ALLOW=false\nEDGE_DOMAINCFG_55_HAS_DENY=false\nEDGE_DOMAINCFG_55_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_56_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-public-dns-blocker-audit-20260621/index.html\nEDGE_DOMAINCFG_56_HAS_HOME=true\nEDGE_DOMAINCFG_56_HAS_VPN=false\nEDGE_DOMAINCFG_56_HAS_ALLOW=false\nEDGE_DOMAINCFG_56_HAS_DENY=false\nEDGE_DOMAINCFG_56_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_57_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/cloudflare-remaining-token-post-revoke-check-20260622/index.html\nEDGE_DOMAINCFG_57_HAS_HOME=false\nEDGE_DOMAINCFG_57_HAS_VPN=true\nEDGE_DOMAINCFG_57_HAS_ALLOW=false\nEDGE_DOMAINCFG_57_HAS_DENY=false\nEDGE_DOMAINCFG_57_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_58_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-certbot-path-layout-preflight-20260621/index.html\nEDGE_DOMAINCFG_58_HAS_HOME=true\nEDGE_DOMAINCFG_58_HAS_VPN=false\nEDGE_DOMAINCFG_58_HAS_ALLOW=false\nEDGE_DOMAINCFG_58_HAS_DENY=false\nEDGE_DOMAINCFG_58_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_59_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-clickability-grouping-audit-20260621/index.html\nEDGE_DOMAINCFG_59_HAS_HOME=true\nEDGE_DOMAINCFG_59_HAS_VPN=true\nEDGE_DOMAINCFG_59_HAS_ALLOW=false\nEDGE_DOMAINCFG_59_HAS_DENY=false\nEDGE_DOMAINCFG_59_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_60_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-vpn-dns-wildcard-patch-20260621/index.html\nEDGE_DOMAINCFG_60_HAS_HOME=false\nEDGE_DOMAINCFG_60_HAS_VPN=true\nEDGE_DOMAINCFG_60_HAS_ALLOW=false\nEDGE_DOMAINCFG_60_HAS_DENY=false\nEDGE_DOMAINCFG_60_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_61_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-checker-prepatch-inspect-20260621/index.html\nEDGE_DOMAINCFG_61_HAS_HOME=true\nEDGE_DOMAINCFG_61_HAS_VPN=false\nEDGE_DOMAINCFG_61_HAS_ALLOW=false\nEDGE_DOMAINCFG_61_HAS_DENY=false\nEDGE_DOMAINCFG_61_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_62_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/post-revoke-final-docs-runtime-closure-20260622/index.html\nEDGE_DOMAINCFG_62_HAS_HOME=false\nEDGE_DOMAINCFG_62_HAS_VPN=true\nEDGE_DOMAINCFG_62_HAS_ALLOW=false\nEDGE_DOMAINCFG_62_HAS_DENY=false\nEDGE_DOMAINCFG_62_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_63_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-vpn-route-batch-2-20260622/index.html\nEDGE_DOMAINCFG_63_HAS_HOME=false\nEDGE_DOMAINCFG_63_HAS_VPN=true\nEDGE_DOMAINCFG_63_HAS_ALLOW=false\nEDGE_DOMAINCFG_63_HAS_DENY=false\nEDGE_DOMAINCFG_63_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_64_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-grouping-href-patch-20260622/index.html\nEDGE_DOMAINCFG_64_HAS_HOME=true\nEDGE_DOMAINCFG_64_HAS_VPN=false\nEDGE_DOMAINCFG_64_HAS_ALLOW=false\nEDGE_DOMAINCFG_64_HAS_DENY=false\nEDGE_DOMAINCFG_64_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_65_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-zero-cert-routes-strict-tls-audit-20260621/index.html\nEDGE_DOMAINCFG_65_HAS_HOME=true\nEDGE_DOMAINCFG_65_HAS_VPN=false\nEDGE_DOMAINCFG_65_HAS_ALLOW=false\nEDGE_DOMAINCFG_65_HAS_DENY=false\nEDGE_DOMAINCFG_65_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_66_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/homepage-full-visibility-closure-rescan-fixed-20260621/index.html\nEDGE_DOMAINCFG_66_HAS_HOME=true\nEDGE_DOMAINCFG_66_HAS_VPN=true\nEDGE_DOMAINCFG_66_HAS_ALLOW=false\nEDGE_DOMAINCFG_66_HAS_DENY=false\nEDGE_DOMAINCFG_66_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_67_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/reports/npmplus-production-update-20260619/index.html\nEDGE_DOMAINCFG_67_HAS_HOME=true\nEDGE_DOMAINCFG_67_HAS_VPN=false\nEDGE_DOMAINCFG_67_HAS_ALLOW=false\nEDGE_DOMAINCFG_67_HAS_DENY=false\nEDGE_DOMAINCFG_67_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_68_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/search/search_index.json\nEDGE_DOMAINCFG_68_HAS_HOME=true\nEDGE_DOMAINCFG_68_HAS_VPN=true\nEDGE_DOMAINCFG_68_HAS_ALLOW=true\nEDGE_DOMAINCFG_68_HAS_DENY=true\nEDGE_DOMAINCFG_68_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_69_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/index.html\nEDGE_DOMAINCFG_69_HAS_HOME=true\nEDGE_DOMAINCFG_69_HAS_VPN=false\nEDGE_DOMAINCFG_69_HAS_ALLOW=false\nEDGE_DOMAINCFG_69_HAS_DENY=false\nEDGE_DOMAINCFG_69_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_70_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/inventory/domains.csv\nEDGE_DOMAINCFG_70_HAS_HOME=true\nEDGE_DOMAINCFG_70_HAS_VPN=false\nEDGE_DOMAINCFG_70_HAS_ALLOW=false\nEDGE_DOMAINCFG_70_HAS_DENY=false\nEDGE_DOMAINCFG_70_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_71_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/inventory/ports/index.html\nEDGE_DOMAINCFG_71_HAS_HOME=true\nEDGE_DOMAINCFG_71_HAS_VPN=false\nEDGE_DOMAINCFG_71_HAS_ALLOW=false\nEDGE_DOMAINCFG_71_HAS_DENY=false\nEDGE_DOMAINCFG_71_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_72_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/runbooks/01-add-new-service/index.html\nEDGE_DOMAINCFG_72_HAS_HOME=true\nEDGE_DOMAINCFG_72_HAS_VPN=false\nEDGE_DOMAINCFG_72_HAS_ALLOW=false\nEDGE_DOMAINCFG_72_HAS_DENY=false\nEDGE_DOMAINCFG_72_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_73_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/runbooks/00-restore-from-zero-for-beginners/index.html\nEDGE_DOMAINCFG_73_HAS_HOME=true\nEDGE_DOMAINCFG_73_HAS_VPN=false\nEDGE_DOMAINCFG_73_HAS_ALLOW=false\nEDGE_DOMAINCFG_73_HAS_DENY=false\nEDGE_DOMAINCFG_73_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_74_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618/index.html\nEDGE_DOMAINCFG_74_HAS_HOME=false\nEDGE_DOMAINCFG_74_HAS_VPN=true\nEDGE_DOMAINCFG_74_HAS_ALLOW=false\nEDGE_DOMAINCFG_74_HAS_DENY=false\nEDGE_DOMAINCFG_74_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_75_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/99-current-state-summary/index.html\nEDGE_DOMAINCFG_75_HAS_HOME=true\nEDGE_DOMAINCFG_75_HAS_VPN=true\nEDGE_DOMAINCFG_75_HAS_ALLOW=false\nEDGE_DOMAINCFG_75_HAS_DENY=false\nEDGE_DOMAINCFG_75_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_76_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/05-service-catalog/index.html\nEDGE_DOMAINCFG_76_HAS_HOME=true\nEDGE_DOMAINCFG_76_HAS_VPN=false\nEDGE_DOMAINCFG_76_HAS_ALLOW=false\nEDGE_DOMAINCFG_76_HAS_DENY=false\nEDGE_DOMAINCFG_76_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_77_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/HANDOFF-20260618-authentik-npmplus/index.html\nEDGE_DOMAINCFG_77_HAS_HOME=false\nEDGE_DOMAINCFG_77_HAS_VPN=true\nEDGE_DOMAINCFG_77_HAS_ALLOW=false\nEDGE_DOMAINCFG_77_HAS_DENY=false\nEDGE_DOMAINCFG_77_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_78_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/06-certificates-troubleshooting/index.html\nEDGE_DOMAINCFG_78_HAS_HOME=true\nEDGE_DOMAINCFG_78_HAS_VPN=false\nEDGE_DOMAINCFG_78_HAS_ALLOW=false\nEDGE_DOMAINCFG_78_HAS_DENY=false\nEDGE_DOMAINCFG_78_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_79_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/ERRORS-LESSONS-20260618/index.html\nEDGE_DOMAINCFG_79_HAS_HOME=false\nEDGE_DOMAINCFG_79_HAS_VPN=true\nEDGE_DOMAINCFG_79_HAS_ALLOW=false\nEDGE_DOMAINCFG_79_HAS_DENY=false\nEDGE_DOMAINCFG_79_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_80_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/service-url-catalog/index.html\nEDGE_DOMAINCFG_80_HAS_HOME=true\nEDGE_DOMAINCFG_80_HAS_VPN=true\nEDGE_DOMAINCFG_80_HAS_ALLOW=false\nEDGE_DOMAINCFG_80_HAS_DENY=false\nEDGE_DOMAINCFG_80_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_81_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T021333Z/docs/SERVICES-BOOTSTRAP-20260617/index.html\nEDGE_DOMAINCFG_81_HAS_HOME=false\nEDGE_DOMAINCFG_81_HAS_VPN=true\nEDGE_DOMAINCFG_81_HAS_ALLOW=false\nEDGE_DOMAINCFG_81_HAS_DENY=false\nEDGE_DOMAINCFG_81_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_82_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-certificate-expiry-audit-20260621/index.html\nEDGE_DOMAINCFG_82_HAS_HOME=true\nEDGE_DOMAINCFG_82_HAS_VPN=false\nEDGE_DOMAINCFG_82_HAS_ALLOW=false\nEDGE_DOMAINCFG_82_HAS_DENY=false\nEDGE_DOMAINCFG_82_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_83_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-services-prepatch-snapshot-20260621/index.html\nEDGE_DOMAINCFG_83_HAS_HOME=true\nEDGE_DOMAINCFG_83_HAS_VPN=true\nEDGE_DOMAINCFG_83_HAS_ALLOW=false\nEDGE_DOMAINCFG_83_HAS_DENY=false\nEDGE_DOMAINCFG_83_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_84_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-warning-monitoring-closure-20260621/index.html\nEDGE_DOMAINCFG_84_HAS_HOME=true\nEDGE_DOMAINCFG_84_HAS_VPN=false\nEDGE_DOMAINCFG_84_HAS_ALLOW=false\nEDGE_DOMAINCFG_84_HAS_DENY=false\nEDGE_DOMAINCFG_84_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_85_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-post-ui-final-closure-20260621/index.html\nEDGE_DOMAINCFG_85_HAS_HOME=true\nEDGE_DOMAINCFG_85_HAS_VPN=false\nEDGE_DOMAINCFG_85_HAS_ALLOW=false\nEDGE_DOMAINCFG_85_HAS_DENY=false\nEDGE_DOMAINCFG_85_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_86_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-services-full-npmplus-visibility-patch-20260621/index.html\nEDGE_DOMAINCFG_86_HAS_HOME=true\nEDGE_DOMAINCFG_86_HAS_VPN=true\nEDGE_DOMAINCFG_86_HAS_ALLOW=false\nEDGE_DOMAINCFG_86_HAS_DENY=false\nEDGE_DOMAINCFG_86_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_87_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homelab-service-visibility-strict-audit-20260621/index.html\nEDGE_DOMAINCFG_87_HAS_HOME=true\nEDGE_DOMAINCFG_87_HAS_VPN=true\nEDGE_DOMAINCFG_87_HAS_ALLOW=false\nEDGE_DOMAINCFG_87_HAS_DENY=false\nEDGE_DOMAINCFG_87_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_88_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/vpn-domain-route-and-homepage-hostvalidation-fix-20260623/index.html\nEDGE_DOMAINCFG_88_HAS_HOME=false\nEDGE_DOMAINCFG_88_HAS_VPN=true\nEDGE_DOMAINCFG_88_HAS_ALLOW=false\nEDGE_DOMAINCFG_88_HAS_DENY=false\nEDGE_DOMAINCFG_88_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_89_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-all-runtime-services-visible-patch-20260621/index.html\nEDGE_DOMAINCFG_89_HAS_HOME=true\nEDGE_DOMAINCFG_89_HAS_VPN=true\nEDGE_DOMAINCFG_89_HAS_ALLOW=false\nEDGE_DOMAINCFG_89_HAS_DENY=false\nEDGE_DOMAINCFG_89_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_90_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-runtime-full-visibility-final-closure-20260621/index.html\nEDGE_DOMAINCFG_90_HAS_HOME=true\nEDGE_DOMAINCFG_90_HAS_VPN=true\nEDGE_DOMAINCFG_90_HAS_ALLOW=false\nEDGE_DOMAINCFG_90_HAS_DENY=false\nEDGE_DOMAINCFG_90_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_91_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-fix-schema-preflight-20260621/index.html\nEDGE_DOMAINCFG_91_HAS_HOME=true\nEDGE_DOMAINCFG_91_HAS_VPN=false\nEDGE_DOMAINCFG_91_HAS_ALLOW=false\nEDGE_DOMAINCFG_91_HAS_DENY=false\nEDGE_DOMAINCFG_91_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_92_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-vpn-alias-cards-patch-20260622/index.html\nEDGE_DOMAINCFG_92_HAS_HOME=false\nEDGE_DOMAINCFG_92_HAS_VPN=true\nEDGE_DOMAINCFG_92_HAS_ALLOW=false\nEDGE_DOMAINCFG_92_HAS_DENY=false\nEDGE_DOMAINCFG_92_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_93_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/vpn-domain-route-recovery-v2-20260623/index.html\nEDGE_DOMAINCFG_93_HAS_HOME=false\nEDGE_DOMAINCFG_93_HAS_VPN=true\nEDGE_DOMAINCFG_93_HAS_ALLOW=false\nEDGE_DOMAINCFG_93_HAS_DENY=false\nEDGE_DOMAINCFG_93_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_94_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-vpn-route-batch-1-retry-20260622/index.html\nEDGE_DOMAINCFG_94_HAS_HOME=false\nEDGE_DOMAINCFG_94_HAS_VPN=true\nEDGE_DOMAINCFG_94_HAS_ALLOW=false\nEDGE_DOMAINCFG_94_HAS_DENY=false\nEDGE_DOMAINCFG_94_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_95_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-warning-checker-patch-20260621/index.html\nEDGE_DOMAINCFG_95_HAS_HOME=true\nEDGE_DOMAINCFG_95_HAS_VPN=false\nEDGE_DOMAINCFG_95_HAS_ALLOW=false\nEDGE_DOMAINCFG_95_HAS_DENY=false\nEDGE_DOMAINCFG_95_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_96_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-public-dns-blocker-audit-20260621/index.html\nEDGE_DOMAINCFG_96_HAS_HOME=true\nEDGE_DOMAINCFG_96_HAS_VPN=false\nEDGE_DOMAINCFG_96_HAS_ALLOW=false\nEDGE_DOMAINCFG_96_HAS_DENY=false\nEDGE_DOMAINCFG_96_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_97_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/cloudflare-remaining-token-post-revoke-check-20260622/index.html\nEDGE_DOMAINCFG_97_HAS_HOME=false\nEDGE_DOMAINCFG_97_HAS_VPN=true\nEDGE_DOMAINCFG_97_HAS_ALLOW=false\nEDGE_DOMAINCFG_97_HAS_DENY=false\nEDGE_DOMAINCFG_97_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_98_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-certbot-path-layout-preflight-20260621/index.html\nEDGE_DOMAINCFG_98_HAS_HOME=true\nEDGE_DOMAINCFG_98_HAS_VPN=false\nEDGE_DOMAINCFG_98_HAS_ALLOW=false\nEDGE_DOMAINCFG_98_HAS_DENY=false\nEDGE_DOMAINCFG_98_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_99_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-clickability-grouping-audit-20260621/index.html\nEDGE_DOMAINCFG_99_HAS_HOME=true\nEDGE_DOMAINCFG_99_HAS_VPN=true\nEDGE_DOMAINCFG_99_HAS_ALLOW=false\nEDGE_DOMAINCFG_99_HAS_DENY=false\nEDGE_DOMAINCFG_99_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_100_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-vpn-dns-wildcard-patch-20260621/index.html\nEDGE_DOMAINCFG_100_HAS_HOME=false\nEDGE_DOMAINCFG_100_HAS_VPN=true\nEDGE_DOMAINCFG_100_HAS_ALLOW=false\nEDGE_DOMAINCFG_100_HAS_DENY=false\nEDGE_DOMAINCFG_100_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_101_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-checker-prepatch-inspect-20260621/index.html\nEDGE_DOMAINCFG_101_HAS_HOME=true\nEDGE_DOMAINCFG_101_HAS_VPN=false\nEDGE_DOMAINCFG_101_HAS_ALLOW=false\nEDGE_DOMAINCFG_101_HAS_DENY=false\nEDGE_DOMAINCFG_101_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_102_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/post-revoke-final-docs-runtime-closure-20260622/index.html\nEDGE_DOMAINCFG_102_HAS_HOME=false\nEDGE_DOMAINCFG_102_HAS_VPN=true\nEDGE_DOMAINCFG_102_HAS_ALLOW=false\nEDGE_DOMAINCFG_102_HAS_DENY=false\nEDGE_DOMAINCFG_102_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_103_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-vpn-route-batch-2-20260622/index.html\nEDGE_DOMAINCFG_103_HAS_HOME=false\nEDGE_DOMAINCFG_103_HAS_VPN=true\nEDGE_DOMAINCFG_103_HAS_ALLOW=false\nEDGE_DOMAINCFG_103_HAS_DENY=false\nEDGE_DOMAINCFG_103_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_104_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-grouping-href-patch-20260622/index.html\nEDGE_DOMAINCFG_104_HAS_HOME=true\nEDGE_DOMAINCFG_104_HAS_VPN=false\nEDGE_DOMAINCFG_104_HAS_ALLOW=false\nEDGE_DOMAINCFG_104_HAS_DENY=false\nEDGE_DOMAINCFG_104_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_105_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-zero-cert-routes-strict-tls-audit-20260621/index.html\nEDGE_DOMAINCFG_105_HAS_HOME=true\nEDGE_DOMAINCFG_105_HAS_VPN=false\nEDGE_DOMAINCFG_105_HAS_ALLOW=false\nEDGE_DOMAINCFG_105_HAS_DENY=false\nEDGE_DOMAINCFG_105_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_106_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/homepage-full-visibility-closure-rescan-fixed-20260621/index.html\nEDGE_DOMAINCFG_106_HAS_HOME=true\nEDGE_DOMAINCFG_106_HAS_VPN=true\nEDGE_DOMAINCFG_106_HAS_ALLOW=false\nEDGE_DOMAINCFG_106_HAS_DENY=false\nEDGE_DOMAINCFG_106_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_107_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/reports/npmplus-production-update-20260619/index.html\nEDGE_DOMAINCFG_107_HAS_HOME=true\nEDGE_DOMAINCFG_107_HAS_VPN=false\nEDGE_DOMAINCFG_107_HAS_ALLOW=false\nEDGE_DOMAINCFG_107_HAS_DENY=false\nEDGE_DOMAINCFG_107_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_108_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/search/search_index.json\nEDGE_DOMAINCFG_108_HAS_HOME=true\nEDGE_DOMAINCFG_108_HAS_VPN=true\nEDGE_DOMAINCFG_108_HAS_ALLOW=true\nEDGE_DOMAINCFG_108_HAS_DENY=true\nEDGE_DOMAINCFG_108_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_109_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/index.html\nEDGE_DOMAINCFG_109_HAS_HOME=true\nEDGE_DOMAINCFG_109_HAS_VPN=false\nEDGE_DOMAINCFG_109_HAS_ALLOW=false\nEDGE_DOMAINCFG_109_HAS_DENY=false\nEDGE_DOMAINCFG_109_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_110_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/inventory/domains.csv\nEDGE_DOMAINCFG_110_HAS_HOME=true\nEDGE_DOMAINCFG_110_HAS_VPN=false\nEDGE_DOMAINCFG_110_HAS_ALLOW=false\nEDGE_DOMAINCFG_110_HAS_DENY=false\nEDGE_DOMAINCFG_110_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_111_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/inventory/ports/index.html\nEDGE_DOMAINCFG_111_HAS_HOME=true\nEDGE_DOMAINCFG_111_HAS_VPN=false\nEDGE_DOMAINCFG_111_HAS_ALLOW=false\nEDGE_DOMAINCFG_111_HAS_DENY=false\nEDGE_DOMAINCFG_111_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_112_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/runbooks/01-add-new-service/index.html\nEDGE_DOMAINCFG_112_HAS_HOME=true\nEDGE_DOMAINCFG_112_HAS_VPN=false\nEDGE_DOMAINCFG_112_HAS_ALLOW=false\nEDGE_DOMAINCFG_112_HAS_DENY=false\nEDGE_DOMAINCFG_112_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_113_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/runbooks/00-restore-from-zero-for-beginners/index.html\nEDGE_DOMAINCFG_113_HAS_HOME=true\nEDGE_DOMAINCFG_113_HAS_VPN=false\nEDGE_DOMAINCFG_113_HAS_ALLOW=false\nEDGE_DOMAINCFG_113_HAS_DENY=false\nEDGE_DOMAINCFG_113_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_114_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618/index.html\nEDGE_DOMAINCFG_114_HAS_HOME=false\nEDGE_DOMAINCFG_114_HAS_VPN=true\nEDGE_DOMAINCFG_114_HAS_ALLOW=false\nEDGE_DOMAINCFG_114_HAS_DENY=false\nEDGE_DOMAINCFG_114_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_115_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/99-current-state-summary/index.html\nEDGE_DOMAINCFG_115_HAS_HOME=true\nEDGE_DOMAINCFG_115_HAS_VPN=true\nEDGE_DOMAINCFG_115_HAS_ALLOW=false\nEDGE_DOMAINCFG_115_HAS_DENY=false\nEDGE_DOMAINCFG_115_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_116_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/05-service-catalog/index.html\nEDGE_DOMAINCFG_116_HAS_HOME=true\nEDGE_DOMAINCFG_116_HAS_VPN=false\nEDGE_DOMAINCFG_116_HAS_ALLOW=false\nEDGE_DOMAINCFG_116_HAS_DENY=false\nEDGE_DOMAINCFG_116_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_117_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/HANDOFF-20260618-authentik-npmplus/index.html\nEDGE_DOMAINCFG_117_HAS_HOME=false\nEDGE_DOMAINCFG_117_HAS_VPN=true\nEDGE_DOMAINCFG_117_HAS_ALLOW=false\nEDGE_DOMAINCFG_117_HAS_DENY=false\nEDGE_DOMAINCFG_117_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_118_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/06-certificates-troubleshooting/index.html\nEDGE_DOMAINCFG_118_HAS_HOME=true\nEDGE_DOMAINCFG_118_HAS_VPN=false\nEDGE_DOMAINCFG_118_HAS_ALLOW=false\nEDGE_DOMAINCFG_118_HAS_DENY=false\nEDGE_DOMAINCFG_118_HAS_AUTH_REQUEST=false\nEDGE_DOMAINCFG_119_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/ERRORS-LESSONS-20260618/index.html\nEDGE_DOMAINCFG_119_HAS_HOME=false\nEDGE_DOMAINCFG_119_HAS_VPN=true\nEDGE_DOMAINCFG_119_HAS_ALLOW=false\nEDGE_DOMAINCFG_119_HAS_DENY=false\nEDGE_DOMAINCFG_119_HAS_AUTH_REQUEST=true\nEDGE_DOMAINCFG_120_PATH=/opt/stacks/mkdocs/site.prev-runtime-20260623T023348Z/docs/service-url-catalog/index.html\nEDGE_DOMAINCFG_120_HAS_HOME=true\nEDGE_DOMAINCFG_120_HAS_VPN=true\nEDGE_DOMAINCFG_120_HAS_ALLOW=false\nEDGE_DOMAINCFG_120_HAS_DENY=false\nEDGE_DOMAINCFG_120_HAS_AUTH_REQUEST=false\nEDGE_PROXY_CONTAINER_COUNT=1\nEDGE_PROXY_DB_CANDIDATE_COUNT=1\nEDGE_PROXY_DB_SELECTED=true\nEDGE_PROXY_DB_PATH_SHA=36a7644962bc77f6f2ab31bf092004ded1daf0d1eb4421ac479f92a54b4c4c60\nEDGE_PROXY_MATCH_COUNT=2\nEDGE_PROXY_1_ID=8\nEDGE_PROXY_1_DOMAINS=[\"home.gram1.ru\"]\nEDGE_PROXY_1_FORWARD_SCHEME=http\nEDGE_PROXY_1_FORWARD_HOST_CLASS=private\nEDGE_PROXY_1_FORWARD_HOST_SHA=3eb2319e39eac307b3c7bd11f67663c0a0c814fd603989f5965083f9d1c80fb0\nEDGE_PROXY_1_FORWARD_PORT=3000\nEDGE_PROXY_1_ACCESS_LIST_ID=1\nEDGE_PROXY_1_SSL_FORCED=1\nEDGE_PROXY_1_ENABLED=1\nEDGE_PROXY_1_ADV_HAS_ALLOW=false\nEDGE_PROXY_1_ADV_HAS_DENY=false\nEDGE_PROXY_1_ADV_HAS_AUTH=false\nEDGE_PROXY_1_BACKEND_HTTP=200\nEDGE_PROXY_2_ID=17\nEDGE_PROXY_2_DOMAINS=[\"homepage.vpn.gram1.ru\"]\nEDGE_PROXY_2_FORWARD_SCHEME=http\nEDGE_PROXY_2_FORWARD_HOST_CLASS=private\nEDGE_PROXY_2_FORWARD_HOST_SHA=3eb2319e39eac307b3c7bd11f67663c0a0c814fd603989f5965083f9d1c80fb0\nEDGE_PROXY_2_FORWARD_PORT=3000\nEDGE_PROXY_2_ACCESS_LIST_ID=1\nEDGE_PROXY_2_SSL_FORCED=1\nEDGE_PROXY_2_ENABLED=1\nEDGE_PROXY_2_ADV_HAS_ALLOW=false\nEDGE_PROXY_2_ADV_HAS_DENY=false\nEDGE_PROXY_2_ADV_HAS_AUTH=false\nEDGE_PROXY_2_BACKEND_HTTP=200\nEDGE_USED_ACL_COUNT=1\nEDGE_ACL_1_ID=1\nEDGE_ACL_1_NAME=LAN only\nEDGE_ACL_1_SATISFY_ANY=0\nEDGE_ACL_1_PASS_AUTH=0\nEDGE_ACL_1_RULE_COUNT=4\nEDGE_ACL_1_RULE_1_CLASS=private\nEDGE_ACL_1_RULE_1_SHA=3bc5d8aba5c1426425a0ad3770bf77782d3f16a12d4455ad3d3a7ce324a5910a\nEDGE_ACL_1_RULE_1_DIRECTIVE=allow\nEDGE_ACL_1_RULE_2_CLASS=private\nEDGE_ACL_1_RULE_2_SHA=d01a825c13311b46a70c53405baab8c9aab1ceda5076cf56ef86d1d8c8673f5a\nEDGE_ACL_1_RULE_2_DIRECTIVE=allow\nEDGE_ACL_1_RULE_3_CLASS=private\nEDGE_ACL_1_RULE_3_SHA=783712746109b3d66507177fc2ac066b768aac772e5c9d7f20b28f4c7b5ef641\nEDGE_ACL_1_RULE_3_DIRECTIVE=allow\nEDGE_ACL_1_RULE_4_CLASS=private\nEDGE_ACL_1_RULE_4_SHA=9422ac7ba7ba4ebf2d71db387c71b97ed1709669d2d2e55408128148cfae4daf\nEDGE_ACL_1_RULE_4_DIRECTIVE=allow\nEDGE_RECENT_403_COUNT=0\nSOURCE_1_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_1_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-backup:53: echo \"NETBIRD_ACTIVE=$(systemctl is-active netbird 2>/dev/null || true)\"\nSOURCE_2_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_2_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:197: facts[\"netbird_route\"] = route\nSOURCE_3_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_3_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:199: problems.append(\"netbird_route_not_wt0\")\nSOURCE_4_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_4_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:290: f\"- NetBird route: {facts.get('netbird_route')}\",\nSOURCE_5_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_5_LINE=tests/test_cr_2026_0005.py:33: for forbidden in (\"paperless\", \"netbird\", \"vm160\", \"pve02\", \"pve03\", \"cluster/backup\"):\nSOURCE_6_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_6_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-status:51:section \"EDGE-VM: монитор, NetBird и расширения\"\nSOURCE_7_REPO_SHA=d8c882972d5d8aca9fdfa610a6ca2c73dd33459baa509ac09193a55cfc7426cc\nSOURCE_7_LINE=tasks/skladchik-reports-monitor-controlled-reauth-v1/assets/pve01/skladchik-reports-monitor-supervisor:290: f\"- NetBird route: {facts.get('netbird_route')}\",\nSOURCE_8_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_8_LINE=.gitea/workflows/validate-kb.yml:59: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2\nSOURCE_9_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_9_LINE=kb/integration/validate-kb.yml.template:31: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2\nSOURCE_10_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_10_LINE=kb/lessons/known_failures.json:423: \"netbird\",\nSOURCE_11_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_11_LINE=kb/lessons/known_failures_public.json:247: \"netbird\",\nSOURCE_12_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_12_LINE=kb/private/access.json:88: \"id\": \"new_usa_netbird\",\nSOURCE_13_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_13_LINE=kb/private/archive/2026-08-19/docs/03_SERVICE_CATALOG.md:104:- `netbird.service`\nSOURCE_14_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_14_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:66:`/root/netbird-cutover-20260818T145807Z`\nSOURCE_15_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_15_LINE=kb/private/archive/2026-08-19/docs/27_SECURITY_ACCESS_CURRENT_DELTA_2026-08-19.md:6:`[SENSITIVE_PATH]\nSOURCE_16_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_16_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:15: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_17_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_17_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:25: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_18_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_18_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:36: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_19_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_19_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:463: \"netbird.service\",\nSOURCE_20_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_20_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:682: \"netbird.service\",\nSOURCE_21_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_21_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:686: \"skladchik-ct200-netbird-egress.service\",\nSOURCE_22_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_22_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:771: \"udp UNCONN 0 0 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=38)) \",\nSOURCE_23_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_23_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:776: \"udp UNCONN 0 0 [IP_REDACTED]:3128 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=27)) \",\nSOURCE_24_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_24_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:819: \"tcp LISTEN 0 4096 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=39)) \",\nSOURCE_25_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_25_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:40:netbird:\nSOURCE_26_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_26_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:53: old_secondary_netbird_ipv4: \"[IP_REDACTED]\"\nSOURCE_27_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_27_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:54: netbird_server: STOPPED\nSOURCE_28_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_28_LINE=KB_START_HERE.md:27:- Не считать NetBird 0.73.2 `/api/health` или `:9000/health` обязательным readiness gate.\nSOURCE_29_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_29_LINE=deploy/homelab-command-stack/payload/homelab-command-portal:651:<p>Ссылка одноразовая и уже привязана к этому NetBird-адресу.</p>\nSOURCE_30_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_30_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:18:- NetBird service must be `active`.\nSOURCE_31_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_31_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:72:This document supersedes older observer assumptions that require `nc.gram1.ru` or Nextcloud availability. It does not change Mailcow, NetBird routing, Gotify, firewall policy, or Snikket.\nSOURCE_32_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_32_LINE=docs/superpowers/specs/2026-08-31-cr0103-command-stack-boot-readiness-design.md:92:- change NetBird configuration;\nSOURCE_33_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_33_LINE=kb/AI_CONTEXT.md:15:- pve01 `[IP_REDACTED]`, operator historical NetBird path `root@[IP_REDACTED]`, MobaXterm key label `eddsa-key-20260617`.\nSOURCE_34_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_34_LINE=kb/AI_CONTEXT.md:30:## NetBird migration\nSOURCE_35_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_35_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.\nSOURCE_36_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_36_LINE=kb/AI_CONTEXT_PUBLIC.md:20:- New USA is current NetBird production on version 0.73.2. Its historical `/api/health` and combined `:9000/health` responses are not valid generic readiness gates.\nSOURCE_37_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_37_LINE=kb/current/01_CURRENT_STATE.md:12:- old Mailcow/old NetBird server architecture is retired from production; rollback window remains.\nSOURCE_38_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_38_LINE=kb/current/04_P0_NEXT.md:5:3. Canonical post-migration CR including NetBird new USA, Postbox/Null MX, Moldova V3/Gotify, old-USA retirement window and dependencies.\nSOURCE_39_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_39_LINE=kb/current/04_P0_NEXT.md:12:Do not mix unrelated changes into these gates (e.g. NetBird version upgrade/hostname change during SSH hardening).\nSOURCE_40_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_40_LINE=kb/inventory/guests.json:59: \"role\": \"edge-vm: домашний ingress/NPMplus, NetBird/WireGuard, edge observability/backup services\",\nSOURCE_41_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_41_LINE=kb/lessons/known_failures.json:430: \"incident\": \"On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.\",\nSOURCE_42_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_42_LINE=kb/lessons/known_failures_public.json:250: \"incident\": \"On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.\",\nSOURCE_43_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_43_LINE=kb/private/archive/2026-08-19/README_FIRST.md:11:- добавлены NetBird/Mailcow/Postbox/Moldova/AlexHost/forum tails;\nSOURCE_44_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_44_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:16:6. SSH-hardening нового USA NetBird VPS.\nSOURCE_45_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_45_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:24:- NetBird production перенесён на `[IP_REDACTED]`.\nSOURCE_46_REPO_SHA=58c56c4f28c229efb3ca4d09891e4070e176e047f78342121c8b9ce639a4291a\nSOURCE_46_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production\nSOURCE_47_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_47_LINE=.gitea/workflows/validate-kb.yml:31: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2\nSOURCE_48_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_48_LINE=kb/integration/validate-kb.yml.template:31: python3 kb/scripts/command_guard.py --target netbird-0.73.2 --command 'curl -f http://[IP_REDACTED]:9000/health' && exit 1 || test $? -eq 2\nSOURCE_49_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_49_LINE=kb/lessons/known_failures.json:423: \"netbird\",\nSOURCE_50_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_50_LINE=kb/lessons/known_failures_public.json:247: \"netbird\",\nSOURCE_51_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_51_LINE=kb/private/access.json:88: \"id\": \"new_usa_netbird\",\nSOURCE_52_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_52_LINE=kb/private/archive/2026-08-19/docs/03_SERVICE_CATALOG.md:104:- `netbird.service`\nSOURCE_53_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_53_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:66:`/root/netbird-cutover-20260818T145807Z`\nSOURCE_54_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_54_LINE=kb/private/archive/2026-08-19/docs/27_SECURITY_ACCESS_CURRENT_DELTA_2026-08-19.md:6:`[SENSITIVE_PATH]\nSOURCE_55_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_55_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:15: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_56_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_56_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:25: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_57_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_57_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:36: \"netbird\": \"[IP_REDACTED]\",\nSOURCE_58_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_58_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:463: \"netbird.service\",\nSOURCE_59_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_59_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:682: \"netbird.service\",\nSOURCE_60_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_60_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:686: \"skladchik-ct200-netbird-egress.service\",\nSOURCE_61_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_61_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:771: \"udp UNCONN 0 0 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=38)) \",\nSOURCE_62_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_62_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:776: \"udp UNCONN 0 0 [IP_REDACTED]:3128 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=27)) \",\nSOURCE_63_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_63_LINE=kb/private/archive/2026-08-19/machine/cluster_inventory.json:819: \"tcp LISTEN 0 4096 [IP_REDACTED]:53 [IP_REDACTED]:* users:((\\\"netbird\\\",pid=705,fd=39)) \",\nSOURCE_64_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_64_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:40:netbird:\nSOURCE_65_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_65_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:53: old_secondary_netbird_ipv4: \"[IP_REDACTED]\"\nSOURCE_66_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_66_LINE=kb/private/archive/2026-08-19/machine/current_state.yaml:54: netbird_server: STOPPED\nSOURCE_67_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_67_LINE=KB_START_HERE.md:27:- Не считать NetBird 0.73.2 `/api/health` или `:9000/health` обязательным readiness gate.\nSOURCE_68_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_68_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:18:- NetBird service must be `active`.\nSOURCE_69_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_69_LINE=docs/MAIL-PVEPRO-DR-OBSERVER-CONTRACT-2026-08-17.md:72:This document supersedes older observer assumptions that require `nc.gram1.ru` or Nextcloud availability. It does not change Mailcow, NetBird routing, Gotify, firewall policy, or Snikket.\nSOURCE_70_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_70_LINE=kb/AI_CONTEXT.md:15:- pve01 `[IP_REDACTED]`, operator historical NetBird path `root@[IP_REDACTED]`, MobaXterm key label `eddsa-key-20260617`.\nSOURCE_71_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_71_LINE=kb/AI_CONTEXT.md:30:## NetBird migration\nSOURCE_72_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_72_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.\nSOURCE_73_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_73_LINE=kb/AI_CONTEXT_PUBLIC.md:20:- New USA is current NetBird production on version 0.73.2. Its historical `/api/health` and combined `:9000/health` responses are not valid generic readiness gates.\nSOURCE_74_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_74_LINE=kb/current/01_CURRENT_STATE.md:12:- old Mailcow/old NetBird server architecture is retired from production; rollback window remains.\nSOURCE_75_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_75_LINE=kb/current/04_P0_NEXT.md:5:3. Canonical post-migration CR including NetBird new USA, Postbox/Null MX, Moldova V3/Gotify, old-USA retirement window and dependencies.\nSOURCE_76_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_76_LINE=kb/current/04_P0_NEXT.md:12:Do not mix unrelated changes into these gates (e.g. NetBird version upgrade/hostname change during SSH hardening).\nSOURCE_77_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_77_LINE=kb/inventory/guests.json:59: \"role\": \"edge-vm: домашний ingress/NPMplus, NetBird/WireGuard, edge observability/backup services\",\nSOURCE_78_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_78_LINE=kb/lessons/known_failures.json:430: \"incident\": \"On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.\",\nSOURCE_79_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_79_LINE=kb/lessons/known_failures_public.json:250: \"incident\": \"On exact NetBird 0.73.2 deployment /api/health returned 404 and combined :9000/health returned 503; first rollback was triggered by assuming those were mandatory readiness.\",\nSOURCE_80_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_80_LINE=kb/private/archive/2026-08-19/README_FIRST.md:11:- добавлены NetBird/Mailcow/Postbox/Moldova/AlexHost/forum tails;\nSOURCE_81_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_81_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:16:6. SSH-hardening нового USA NetBird VPS.\nSOURCE_82_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_82_LINE=kb/private/archive/2026-08-19/docs/00_START_HERE.md:24:- NetBird production перенесён на `[IP_REDACTED]`.\nSOURCE_83_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_83_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production\nSOURCE_84_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_84_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:211:- NetBird server SHA `efa4e50dbc556ccd7bdc5b0d977ff29fe21bdee3b7e312cba6e3fa53bbeec60b`\nSOURCE_85_REPO_SHA=2a829b2765d95641aac83ee239582027e35fb801358950022c180f08f6b3d9bb\nSOURCE_85_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:215:NetBird server:\nSOURCE_86_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_86_LINE=README.md:9:- Homepage: https://home.gram1.ru\nSOURCE_87_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_87_LINE=README.md:53:- https://home.gram1.ru\nSOURCE_88_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_88_LINE=configs/sanitized/edge-vm/homepage-compose.yaml:9: HOMEPAGE_ALLOWED_HOSTS: home.gram1.ru,homepage.vpn.gram1.ru\nSOURCE_89_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_89_LINE=configs/sanitized/edge-vm/homepage-services.yaml:3: href: https://home.gram1.ru\nSOURCE_90_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_90_LINE=docs/05-service-catalog.md:67:- Domain: https://home.gram1.ru\nSOURCE_91_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_91_LINE=docs/06-certificates-troubleshooting.md:62:Observed with home.gram1.ru and git.gram1.ru before certificate completion.\nSOURCE_92_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_92_LINE=docs/06-certificates-troubleshooting.md:96:- home.gram1.ru: Lets Encrypt via Cloudflare DNS challenge.\nSOURCE_93_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_93_LINE=docs/99-current-state-summary.md:113:- URL: https://home.gram1.ru\nSOURCE_94_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_94_LINE=docs/99-current-state-summary.md:147:- https://home.gram1.ru\nSOURCE_95_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_95_LINE=docs/operations/p0-healthchecks-restore-proof-preflight-20260624T190801Z.md:65:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru\nSOURCE_96_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_96_LINE=docs/operations/p0-restore-drill-matrix-edge-index-20260624T183747Z.md:112:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru\nSOURCE_97_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_97_LINE=docs/operations/p0-restore-drill-matrix-quality-offhost-20260624T183931Z.md:126:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru\nSOURCE_98_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_98_LINE=docs/operations/p0-vikunja-restore-proof-preflight-20260624T191408Z.md:63:id=16 active=1 interval=300 type=http name=Homepage HTTPS target=https://home.gram1.ru\nSOURCE_99_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_99_LINE=docs/operations/p1-exposure-matrix-npmplus-route-inventory-20260625T212426Z.json:123: \"home.gram1.ru\"\nSOURCE_100_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_100_LINE=docs/operations/p1-exposure-matrix-npmplus-route-inventory-20260625T212426Z.md:34:| 8 | public_or_unknown | home.gram1.ru | yes | http | [IP_REDACTED]:3000 | present | 8 |\nSOURCE_101_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_101_LINE=docs/operations/p1-exposure-ownership-matrix-20260625T212704Z.json:103: \"domain\": \"home.gram1.ru\",\nSOURCE_102_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_102_LINE=docs/operations/p1-exposure-ownership-matrix-20260625T212704Z.json:105: \"home.gram1.ru\"\nSOURCE_103_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_103_LINE=docs/operations/p1-exposure-ownership-matrix-20260625T212704Z.md:39:| 8 | home.gram1.ru | public-domain | homepage | edge-local | http://[IP_REDACTED]:3000 | yes | present | OK_PUBLIC_INTENTIONAL | keep_monitoring |\nSOURCE_104_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_104_LINE=docs/operations/p2-dependency-risk-classification-20260625T221747Z.json:905: \"domain\": \"home.gram1.ru\",\nSOURCE_105_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_105_LINE=docs/operations/p2-dependency-risk-classification-20260625T221747Z.md:68:| 8 | home.gram1.ru | http://[IP_REDACTED]:3000 | homepage | PUBLIC_OR_UNKNOWN_ROUTE, ACCESS_HINT_REVIEW |\nSOURCE_106_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_106_LINE=configs/sanitized/edge-vm/homepage-compose.yaml:9: HOMEPAGE_ALLOWED_HOSTS: home.gram1.ru,homepage.vpn.gram1.ru\nSOURCE_107_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_107_LINE=configs/sanitized/edge-vm/homepage-services.yaml:7: href: https://homepage.vpn.gram1.ru\nSOURCE_108_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_108_LINE=docs/99-current-state-summary.md:2333:- `homepage.vpn.gram1.ru`: HTTP `200`\nSOURCE_109_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_109_LINE=docs/ERRORS-LESSONS-20260618.md:61:Correct value: only https://homepage.vpn.gram1.ru.\nSOURCE_110_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_110_LINE=docs/ERRORS-LESSONS-20260618.md:108:Correction: use local direct Authentik outpost checks with homepage.vpn.gram1.ru forwarded headers before enabling NPMplus auth. Do not require the public auth.vpn outpost auth endpoint to match the Homepage provider.\nSOURCE_111_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_111_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:11:homepage.vpn.gram1.ru proxy id 17 cert id 32 access 1 ssl forced\nSOURCE_112_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_112_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:33:Launch URL: https://homepage.vpn.gram1.ru\nSOURCE_113_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_113_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:42:Only after provider and outpost verification, enable npmplus_auth_request authentik for homepage.vpn.gram1.ru. Keep rollback ready by setting it back to none.\nSOURCE_114_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_114_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:54:The public check through auth.vpn.gram1.ru returned 404 for /outpost.goauthentik.io/auth/nginx, while the local direct outpost check for homepage.vpn.gram1.ru returned a valid auth response. Treat the public auth.vpn auth endpoint as a wrong validation path for Homepage. Next safe step: enable npmplus_auth_request=authentik only for homepage proxy id 17 with rollback ready.\nSOURCE_115_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_115_LINE=docs/HANDOFF-20260618-authentik-npmplus.md:73:host: homepage.vpn.gram1.ru\nSOURCE_116_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_116_LINE=docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618.md:22:homepage.vpn.gram1.ru -> [IP_REDACTED] -> NPMplus -> [IP_REDACTED]:3000\nSOURCE_117_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_117_LINE=docs/RUNBOOK-PRIVATE-VPN-HOSTS-20260618.md:55:EDGE_HOST=edge-vm;DOCKER_IMAGES=actual-budget=actualbudget/actual-server:latest;authentik-postgresql-1=postgres:16-alpine;authentik-server-1=ghcr.io/goauthentik/server:2026.5.3;authentik-worker-1=ghcr.io/goauthentik/server:2026.5.3;beszel=henrygd/beszel:latest;crowdsec=crowdsecurity/crowdsec:latest;dockge=louislam/dockge:1;dozzle=amir20/dozzle:latest;filebrowser=filebrowser/filebrowser:latest;gitea=docker.gitea.com/gitea:1.26.2;gotify=gotify/server:latest;grafana=grafana/grafana:latest;homeassistant=ghcr.io/home-assistant/home-assistant:stable;homebox=ghcr.io/sysadminsmedia/homebox:latest-rootless;homepage=ghcr.io/gethomepage/homepage:latest;immi\nSOURCE_118_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_118_LINE=docs/SERVICES-BOOTSTRAP-20260617.md:208:homepage.vpn.gram1.ru -> [IP_REDACTED] -> [IP_REDACTED]:3000\nSOURCE_119_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_119_LINE=docs/SERVICES-BOOTSTRAP-20260617.md:216:BINDING= - NPM_IPV4_BINDING=[IP_REDACTED]; - IPV4_BINDING=[IP_REDACTED];;ACCESS=5|access_list_id=1|address=[IP_REDACTED]|directive=allow;6|access_list_id=1|address=[IP_REDACTED]|directive=allow;7|access_list_id=1|address=[IP_REDACTED]|directive=allow;8|access_list_id=1|address=[IP_REDACTED]|directive=allow;;PROXIES=16|[\"kuma.vpn.gram1.ru\"]|forward=http://[IP_REDACTED]:3001|cert=32|access=1|enabled=1|ssl_forced=1|hsts=0;17|[\"homepage.vpn.gram1.ru\"]|forward=http://[IP_REDACTED]:3000|cert=32|access=1|enabled=1|ssl_forced=1|hsts=0;18|[\"gitea.vpn.gram1.ru\"]|forward=http://[IP_REDACTED]:3002|cert=32|access=1|enabled=1|ssl_forced=1|hsts=0;19|[\"fileb\nSOURCE_120_REPO_SHA=bda448179d6d1f16a6340a95e7cf3b4f963deeb55630695f814993ac8c8ff65e\nSOURCE_120_LINE=docs/SERVICES-BOOTSTRAP-20260617.md:222:kuma.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=302|CERT=issuer=C=US, O=Let's Encrypt, CN=YE2;notAfter=Sep 15 20:18:29 2026 GMT;X509v3 Subject Alternative Name: ; DNS:*.vpn.gram1.ru, DNS:vpn.gram1.ru;;homepage.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=200|CERT=issuer=C=US, O=Let's Encrypt, CN=YE2;notAfter=Sep 15 20:18:29 2026 GMT;X509v3 Subject Alternative Name: ; DNS:*.vpn.gram1.ru, DNS:vpn.gram1.ru;;gitea.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=200|CERT=issuer=C=US, O=Let's Encrypt, CN=YE2;notAfter=Sep 15 20:18:29 2026 GMT;X509v3 Subject Alternative Name: ; DNS:*.vpn.gram1.ru, DNS:vpn.gram1.ru;;filebrowser.vpn.gram1.ru|DNS=[IP_REDACTED]|HTTPS=200|CERT=iss\nSOURCE_MATCH_COUNT=120\nPVE01_NETBIRD_UNIT_MATCH_COUNT=3\nPVE01_NETBIRD_PRESENT=true\nPVE01_NETBIRD_STATUS_SHA=0cf182820b4c45584910a7a7b5bff12370f80c8707f9104557b0a61e643bbf11\nPVE01_NETBIRD_CONNECTED_HINT=true\nNEW_PC_NETBIRD_MISSING=true\nNEW_PC_NETBIRD_NOT_RUNNING=false\nNEW_PC_NETBIRD_NOT_CONNECTED=false\nNEW_PC_HOME_DNS_MISSING=true\nNEW_PC_HOME_PRIVATE_DNS_PRESENT=false\nNEW_PC_HOME_HTTPS_WORKING=false\nREPAIR_CLASS=REPAIR_NEW_PC_NETBIRD_INSTALL\nDECISION=ANALYZE_HOME_GRAM1_EDGE_VPN_DNS\nNEXT_GATE=HOME_GRAM1_NEW_PC_TARGETED_REPAIR\nTASK_RESULT=HOME_GRAM1_EDGE_VPN_DNS_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\n"
}
View Git Blame Copy Permalink