From cc0fb962f357e06e0531fff8fa6b236927867b7d Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 26 Oct 2026 21:41:05 +0100 Subject: [PATCH] R-1300 CLOSED: controller 0.345.1 (cloudflared 2026.10.3) on every box; R-1301 filed (N100 host clock, chrony fails at boot); 01: cloudflared follows Cloudflare's security notices --- REPORT-cloudflared-2026-10-26.md | 76 + STATUS.md | 4 +- .../architecture/01-topology-and-trust.md | 7 + documentation/architecture/11-os-updates.md | 2 +- .../obs-n100-clock.txt | 57 + .../part4-build-0.345.1.log | 181 +++ .../part5-hp-n100-box.txt | 26 + .../part5-hp-n100-floor.txt | 8 + .../part5-hp-n100-tunnelprobe.txt | 1397 +++++++++++++++++ .../part5-https-only.txt | 34 + .../part5-hub-hosts-after.txt | 5 + .../part5-tester1-box.txt | 14 + .../part5-tester1-floor.txt | 3 + .../part5-tester1-probe.txt | 1269 +++++++++++++++ .../part5-tester1-tunnelprobe.txt | 1274 +++++++++++++++ .../part6-clear-perbox.txt | 6 + .../part6-floor-readback.txt | 7 + .../part6-global-floor.txt | 3 + .../part6-hub-final.txt | 11 + .../part6-watch.txt | 28 + documentation/backlog/CLOSED-ITEMS.md | 6 + documentation/backlog/OPEN-ITEMS.md | 6 +- documentation/lived-in/n100.md | 6 + 23 files changed, 4424 insertions(+), 6 deletions(-) create mode 100644 REPORT-cloudflared-2026-10-26.md create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/obs-n100-clock.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part4-build-0.345.1.log create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-box.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-floor.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-tunnelprobe.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-https-only.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hub-hosts-after.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-box.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-floor.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-probe.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-tunnelprobe.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-clear-perbox.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-floor-readback.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-global-floor.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-hub-final.txt create mode 100644 documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-watch.txt diff --git a/REPORT-cloudflared-2026-10-26.md b/REPORT-cloudflared-2026-10-26.md new file mode 100644 index 00000000..e2321b0f --- /dev/null +++ b/REPORT-cloudflared-2026-10-26.md @@ -0,0 +1,76 @@ +# REPORT — cloudflared 2026.10.3 on every box (R-1300), 2026-10-26 evening, attended + +> A sibling of `REPORT.md`: the night session (`TASK-night-burndown-and-tuesday-2026-10-26.md`) owns `REPORT.md` +> tonight. + +## In plain words + +1. **We run 3 cloudflared, one in each box's guest** (Tester 1, demo-hp, demo-felhom). None on DooPlex. Tester4 has no + tunnel; Tester 2 has no box. +2. **The https-origin trap does not apply.** Each tunnel sends to `https://traefik` with „No TLS Verify" on, and traefik + shows its own self-signed certificate — not an eMudhra one. +3. **0.345.1 is on every box: 4 of 4 reporting controllers** (the three above + Tester4); none left behind. +4. **Longest tunnel gap: about 11 seconds** (demo-hp). Tester 1 about 2 s, demo-felhom about 4 s. + +Decisions: the operator said yes to the build-gate exception (build from a pushed tag) and to the global floor. + +## Versions, digests, CI + +| What | Value | +|---|---| +| controller tag `v0.345.1` | commit `f3204024` = v0.345.0 `6bfb784` + one commit; CI job 2393 success (attempt 1) | +| controller `main` | `a1c65b3d` (same bump + `build.sh` tag path); CI job 2392 success (attempt 1) | +| controller image `0.345.1` / `:latest` | `sha256:7cfdf7e1f835628de9c7d536e0a60c06bad5bbe19e8133765cc0a6bb732dbff6` | +| cloudflared | `cloudflare/cloudflared:2026.10.3`, index `sha256:faa8e0a1475f137c910be6025f43c8e4092fdd35461b31e19fd1390657a1ff39` | +| MinAgent | 0.158.1 (unchanged, declared with the floor) | +| global floor | 0.345.1 at 20:08:39Z (`303 floor_set`; read back from the running hub: „Effective floor: v0.345.1 — source: DB") | +| per-box floors | set 20:05:08Z (Tester 1), 20:06:04Z (demo-hp, demo-felhom); cleared 20:39:54Z | + +Tests and gates: controller gates `--fast` green on both commits; `go test ./...` green on the tag commit; the new +reconcile test and the four build-gate cases red-proved. felhom.eu gates green on push. **Methods:** box state by +`docker ps`/`docker logs` in each guest; tunnel state by the hub's Hosts page and by a public name with no app +(`cfprobe.`: 404 = tunnel up, 530 = down), probed every 0.5–1 s from DooPlex. + +## Register + +Rows before **213**, after **214**, opened **2** (R-1300, R-1301), closed **1** (R-1300). + +## Observations + +- The N100 host's clock is 14 s slow; chrony fails at every boot — **FILED: R-1301** (and `lived-in/n100.md`). +- I put a test run and a commit in one command on the detached tag clone (standing rule 1). The commit was local; the + test result was then read on its own (green) before anything was pushed — **NOT-A-FINDING: my slip, caught before + push, recorded here.** +- `noTLSVerify` on every tunnel route (R-510) — **NOT-A-FINDING: a leg that never leaves the guest** (cloudflared and + traefik alone on the /29 tunnel network); now written in `01` as a recorded exception, with the rule „never turn off + a certificate check to make an update work". +- cloudflared 2026.10.4 (today, VULN-176088: metrics debug endpoints allowlist) — **NOT-A-FINDING: our metrics bind to + the container's own loopback**; not taken because it is under a day old and the notice names 2026.10.3. +- 0.345.1 is built with 0.345.0's Go builder; `main` moved to Go 1.27.3 tonight (R-972) — **NOT-A-FINDING: R-972 owns + it; the next release from `main` carries it.** +- Single-sample `000` answers at 20:13:37 (both Tester 1 probes at once) and 20:17:13 (demo-hp) — **NOT-A-FINDING: a + client-side timeout, no 530; the hub and the boxes showed the tunnel up throughout.** +- `internal/stacks` tests took 450 s under the night session's load (each R-442 remove test 26 s) — **NOT-A-FINDING: CI + green; slow only under load.** +- Tester4's agent reads `0.167.0-night1 floor held` on the Hosts page — the night session's agent; not touched. + +## What changed in documents + +- `architecture/01-topology-and-trust.md` „Tunnel placement": the version, the rule, the recorded exception. +- `architecture/11-os-updates.md` C8: the new pin. +- `STATUS.md`: one line (released; `main` and Sunday's golden carry it). The golden 0.344.0 still has 2026.9.3; a new + box moves to the floor in its first minutes. No extra bake (operator did not ask). +- System poster: none of the three needed — no fact on the poster changed (cloudflared still runs in the guest). +- Controller: `build.sh` may push from the pushed tag `v` (operator's yes). Controller report: + `felhom-controller/REPORT-cloudflared-0.345.1.md`. + +## For the operator + +- **Nothing to do.** If you want a second look: Cloudflare dashboard → Networking → Tunnels shows each connector's + version (CC holds no Cloudflare token). + +## Teardown + +Machine: the image pulled on scratch guest 9202 for the version check was removed. Host: nothing. Hub: the three +per-box floors cleared; the global floor stays at 0.345.1 by design. Clones `felhom-controller-sec`, +`felhom-controller-mainsec` and `felhom.eu-cfsec` on DooPlex are my work copies (all pushed); removed at the end. diff --git a/STATUS.md b/STATUS.md index 5aab0efa..29d05145 100644 --- a/STATUS.md +++ b/STATUS.md @@ -18,12 +18,12 @@ - The hub mails alarms and recoveries and keeps a weekly whole-box copy on ep0; CC uses its own limited token (map F1, F11, G15). ## What is broken -- **P1:** each box's tunnel trusts 8 bad certificates until 0.345.1 reaches it (R-1300, rolling out). Any hacked app on DooPlex can read the hub's nightly backups, and maybe the signing keys (R-1241, homelab session); about 12 homelab logins still use a password that was public, and the public Gitea repo is not decided (R-925, yours). +- **P1:** any hacked app on DooPlex can read the hub's nightly backups, and maybe the signing keys (R-1241, homelab session); about 12 homelab logins still use a password that was public, and the public Gitea repo is not decided (R-925, yours). - Tester 2 off since 10-04: old emergency password, no off-site check, no bootstrap (R-1139, R-1104, R-862). Scratch box: no agent features (R-1083). - DooPlex: something sets the shared checkout to „bare" (R-935). ## What we work on -- Built, not released: a BYO box removes our SSH file in the same update (R-1285; the agent waits for a live BYO proof); held apps reach you (R-1291, controller + hub, proven on a test hub). +- Released: 0.345.1 (cloudflared 2026.10.3, security), every box; `main` and Sunday's golden carry it. Built, not released: a BYO box removes our SSH file in the same update (R-1285; the agent waits for a live BYO proof); held apps reach you (R-1291, controller + hub, proven on a test hub). - Dated checks, run by CC. 2026-10-27: the qBittorrent line test on a seeding box, with DooPlex's qBittorrent as the peer (R-1250, your yes). Done 2026-10-26: the weekly clean-up windows removed only old copies and raised no false alarm. 2026-10-30: D35, website and installer to Cloudflare, starts (R-1228, ruled yes). ## Waiting on you — decide diff --git a/documentation/architecture/01-topology-and-trust.md b/documentation/architecture/01-topology-and-trust.md index 6eb867c6..3294b019 100644 --- a/documentation/architecture/01-topology-and-trust.md +++ b/documentation/architecture/01-topology-and-trust.md @@ -281,6 +281,13 @@ app. Controller down → the gated app answers an error, never the app. Measured tunnel. Since controller v0.286.0 it sits ALONE on the `felhom-tunnel` network at the fixed address `172.16.253.2` (traefik at `.3`), so traefik can believe forwarded headers from it and from nothing else (§5). Geo-restriction WAF is **hub-enforced** (the hub holds the CF API token; the controller only reports geo desired-state). + **Version and rule (2026-10-26, R-1300):** the image is `cloudflare/cloudflared:2026.10.3` since controller v0.345.1 + (`infra.CloudflaredImage`). **cloudflared follows Cloudflare's security notices** — a notice is a patch release of + the controller, and a controller update recreates the container on the new image by itself + (`TestEnsureCloudflared_ANewImageRecreatesTheTunnel`). **Never turn off a certificate check to make an update + work.** The one check that is off today is the route's own: `*.` → `https://traefik` with `noTLSVerify` + (R-510; traefik shows its self-signed default certificate on a leg that never leaves the guest) — a recorded + exception, not a pattern to copy. - **[DESIGN] The website's content comes from Gitea IN-CLUSTER** (2026-10-19). The `felhom-webpage` pod pulls `website/` (from `main`) and `scripts/` (from the `installer-v…` tag, R-110) with four git-syncs that read `http://gitea.gitea-system.svc.cluster.local:3000/admin/felhom.eu.git` — plain HTTP, safe only because it never diff --git a/documentation/architecture/11-os-updates.md b/documentation/architecture/11-os-updates.md index b51e404b..08361c8f 100644 --- a/documentation/architecture/11-os-updates.md +++ b/documentation/architecture/11-os-updates.md @@ -91,7 +91,7 @@ boxes installed. Nobody keeps a hand-written list. - **The Proxmox MAJOR upgrade** (PVE 9 → 10). It is a later step of its own, drilled first (R-808 item 5). - **`cloudflared` and the other infrastructure images** (traefik, filebrowser). **[FACT] (C8)** They are containers in the guest, pinned in the controller (`internal/infra/infra.go:26`: `cloudflare/cloudflared:2026.6.0`, since - 2026-06-11 — *`2026.9.3` today, corrected 2026-10-24*) and baked into the golden; upstream was `2026.9.3` on 2026-10-04. They move only by a controller release + 2026-06-11 — *`2026.9.3` from 2026-10-24; `2026.10.3` since controller v0.345.1, 2026-10-26 — Cloudflare's eMudhra notice, R-1300*) and baked into the golden; upstream was `2026.9.3` on 2026-10-04. They move only by a controller release — the app-image question (`09`), not an OS package. The gap is R-838. --- diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/obs-n100-clock.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/obs-n100-clock.txt new file mode 100644 index 00000000..261b0cc9 --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/obs-n100-clock.txt @@ -0,0 +1,57 @@ +System clock synchronized: no + NTP service: inactive +failed +inactive +× chrony.service - chrony, an NTP client/server + Loaded: loaded (/usr/lib/systemd/system/chrony.service; enabled; preset: enabled) + Active: failed (Result: exit-code) since Wed 2026-10-21 05:23:50 CEST; 5 days ago + Invocation: 135c8cdc305140c8ac2bf943db811094 + Docs: man:chronyd(8) + man:chronyc(1) +Oct 16 05:09:25 demo-felhom systemd[1]: Failed to start chrony.service - chrony, an NTP client/server. +-- Boot 56db71938b304a57bdedf30f89860e1f -- +Oct 21 05:23:50 demo-felhom systemd[1]: Starting chrony.service - chrony, an NTP client/server... +Oct 21 05:23:50 demo-felhom chronyd[676]: chronyd version 4.8 starting (+CMDMON +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +NTS +SECHASH +IPV6 -DEBUG) +Oct 21 05:23:50 demo-felhom chronyd[676]: Loaded 0 symmetric keys +Oct 21 05:23:50 demo-felhom chronyd[676]: Using leap second list /usr/share/zoneinfo/leap-seconds.list +Oct 21 05:23:50 demo-felhom chronyd[676]: Frequency -2.666 +/- 0.016 ppm read from /var/lib/chrony/chrony.drift +Oct 21 05:23:50 demo-felhom chronyd[676]: Loaded seccomp filter (level 1) +Oct 21 05:23:50 demo-felhom chronyd[676]: Fatal error : Could not send notification to $NOTIFY_SOCKET +Oct 21 05:23:50 demo-felhom chronyd[676]: Fatal error : Could not send notification to $NOTIFY_SOCKET +Oct 21 05:23:50 demo-felhom systemd[1]: chrony.service: Main process exited, code=exited, status=1/FAILURE +Oct 21 05:23:50 demo-felhom systemd[1]: chrony.service: Failed with result 'exit-code'. +Oct 21 05:23:50 demo-felhom systemd[1]: Failed to start chrony.service - chrony, an NTP client/server. +2026-10-21 05:23:45 +[Unit] +Description=chrony, an NTP client/server +Documentation=man:chronyd(8) man:chronyc(1) man:chrony.conf(5) +Conflicts=openntpd.service ntp.service ntpsec.service +ConditionVirtualization=|!container +ConditionVirtualization=|wsl +ConditionCapability=CAP_SYS_TIME +[Service] +Type=notify +PIDFile=/run/chrony/chronyd.pid +EnvironmentFile=-/etc/default/chrony +User=_chrony +ExecStart=!/usr/sbin/chronyd -n $DAEMON_OPTS +CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE +CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_KILL CAP_LEASE CAP_LINUX_IMMUTABLE +CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE CAP_MKNOD CAP_SYS_ADMIN +CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_CHROOT CAP_SYS_MODULE CAP_SYS_PACCT +CapabilityBoundingSet=~CAP_SYS_PTRACE CAP_SYS_RAWIO CAP_SYS_TTY_CONFIG CAP_WAKE_ALARM +DeviceAllow=char-pps rw +DeviceAllow=char-ptp rw +DeviceAllow=char-rtc rw +DevicePolicy=closed +LockPersonality=yes +MemoryDenyWriteExecute=yes +NoNewPrivileges=yes +PrivateTmp=yes +ProcSubset=pid +ProtectControlGroups=yes +ProtectHome=yes +ProtectHostname=yes + +DAEMON_OPTS="-F 1" +ii chrony 4.8-4~bpo13+2 amd64 Versatile implementation of the Network Time Protocol diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part4-build-0.345.1.log b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part4-build-0.345.1.log new file mode 100644 index 00000000..816317ba --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part4-build-0.345.1.log @@ -0,0 +1,181 @@ + +[INFO] ╔══════════════════════════════════════╗ +[INFO] ║ felhom-controller image builder ║ +[INFO] ╚══════════════════════════════════════╝ +[INFO] Version: 0.345.1 +[INFO] Commit: f3204024 +[INFO] Repo: /mnt/5_hdd/felhom.eu/git/felhom-controller-sec +[INFO] Source: /mnt/5_hdd/felhom.eu/git/felhom-controller-sec/controller +[INFO] Build dir: /mnt/5_hdd/felhom.eu/git/felhom-controller-mainsec/controller/workspace +[INFO] Image: gitea.dooplex.hu/admin/felhom-controller:0.345.1 + +[STEP] 0/4 — Checking the registry: is 0.345.1 already published? +[INFO] 0.345.1 is not present in the registry — proceeding. +[INFO] Source tree is clean and at the pushed tag v0.345.1 (not origin/main). +[STEP] 1/4 — Preparing build workspace... +[INFO] Source copied: 1079 Go files +[STEP] 2/4 — Syncing app assets... +[INFO] Synced 263 assets (52 SVG + 16 PNG logos, 195 screenshots) +[STEP] 3/4 — Preparing Go modules... +[INFO] Running go mod tidy... +[STEP] 4/4 — Building Docker image... +[INFO] Building for current platform + pushing... +#0 building with "default" instance using docker driver + +#1 [internal] load build definition from Dockerfile +#1 transferring dockerfile: 6.94kB done +#1 DONE 0.0s + +#2 [internal] load metadata for docker.io/library/golang:1.27.2-trixie@sha256:47667934874913a449b96faa7ef4777fa285d9ec29126ee80ed61c45b7cccf0e +#2 ... + +#3 [auth] library/golang:pull token for registry-1.docker.io +#3 DONE 0.0s + +#4 [auth] library/debian:pull token for registry-1.docker.io +#4 DONE 0.0s + +#5 [internal] load metadata for docker.io/library/debian:13.7-slim@sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f +#5 ... + +#2 [internal] load metadata for docker.io/library/golang:1.27.2-trixie@sha256:47667934874913a449b96faa7ef4777fa285d9ec29126ee80ed61c45b7cccf0e +#2 DONE 1.0s + +#5 [internal] load metadata for docker.io/library/debian:13.7-slim@sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f +#5 DONE 1.1s + +#6 [internal] load .dockerignore +#6 transferring context: 2B done +#6 DONE 0.0s + +#7 [restic 1/3] FROM docker.io/library/debian:13.7-slim@sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f +#7 resolve docker.io/library/debian:13.7-slim@sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f 0.0s done +#7 DONE 0.0s + +#8 [builder 1/7] FROM docker.io/library/golang:1.27.2-trixie@sha256:47667934874913a449b96faa7ef4777fa285d9ec29126ee80ed61c45b7cccf0e +#8 resolve docker.io/library/golang:1.27.2-trixie@sha256:47667934874913a449b96faa7ef4777fa285d9ec29126ee80ed61c45b7cccf0e 0.0s done +#8 DONE 0.0s + +#9 [internal] load build context +#9 transferring context: 36.99MB 0.4s done +#9 DONE 0.4s + +#10 [builder 3/7] COPY go.mod ./ +#10 CACHED + +#11 [builder 2/7] WORKDIR /build +#11 CACHED + +#12 [builder 4/7] RUN go mod download || true +#12 CACHED + +#13 [builder 5/7] COPY . . +#13 DONE 0.6s + +#14 [builder 6/7] RUN go mod tidy +#14 0.532 go: downloading gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 +#14 0.619 go: downloading github.com/google/pprof v0.0.0-20250317173921-a4b03ec1a45e +#14 0.619 go: downloading modernc.org/fileutil v1.3.40 +#14 0.698 go: downloading golang.org/x/term v0.47.0 +#14 1.291 go: downloading modernc.org/goabi0 v0.2.0 +#14 1.291 go: downloading modernc.org/ccgo/v4 v4.30.1 +#14 1.291 go: downloading modernc.org/cc/v4 v4.27.1 +#14 1.291 go: downloading golang.org/x/tools v0.38.0 +#14 1.422 go: downloading modernc.org/opt v0.1.4 +#14 1.422 go: downloading modernc.org/token v1.1.0 +#14 1.422 go: downloading modernc.org/sortutil v1.2.1 +#14 1.422 go: downloading modernc.org/strutil v1.2.1 +#14 1.598 go: downloading modernc.org/gc/v2 v2.6.5 +#14 1.598 go: downloading golang.org/x/mod v0.29.0 +#14 1.598 go: downloading modernc.org/gc/v3 v3.1.1 +#14 1.820 go: downloading github.com/hashicorp/golang-lru/v2 v2.0.7 +#14 2.038 go: downloading golang.org/x/sync v0.17.0 +#14 DONE 2.4s + +#15 [builder 7/7] RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X main.Version=0.345.1 -X main.BuildTime=$(date -u +%Y-%m-%dT%H:%M:%SZ) -X main.GitCommit=f3204024" -o /build/felhom-controller ./cmd/controller/ +#15 DONE 22.3s + +#16 [stage-2 3/7] COPY --from=restic /usr/local/bin/restic /usr/local/bin/restic +#16 CACHED + +#17 [stage-2 4/7] RUN curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /usr/share/keyrings/docker.gpg && . /etc/os-release && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker.gpg] https://download.docker.com/linux/debian ${VERSION_CODENAME} stable" > /etc/apt/sources.list.d/docker.list && apt-get update && apt-get install -y --no-install-recommends docker-ce-cli docker-compose-plugin && rm -rf /var/lib/apt/lists/* +#17 CACHED + +#18 [stage-2 2/7] RUN apt-get update && apt-get upgrade -y --no-install-recommends && apt-get install -y --no-install-recommends ca-certificates curl gnupg git util-linux rsync openssh-client && rm -rf /var/lib/apt/lists/* +#18 CACHED + +#19 [restic 2/3] COPY third_party/restic/restic-release-key.asc /tmp/restic-release-key.asc +#19 CACHED + +#20 [restic 3/3] RUN set -eu; apt-get update && apt-get install -y --no-install-recommends ca-certificates curl gnupg gpgv bzip2; case "amd64" in amd64) want="f415415624dcc452f2a02b8c33641791a8c6d6d3b65bbb3543fcf9a25151585c" ;; arm64) want="a5f64aaab53d51e311fa3829124c5b703f2d14cf187d8640b6be3b2b49376465" ;; *) echo "no pinned restic checksum for architecture 'amd64'" >&2; exit 1 ;; esac; f="restic_0.19.1_linux_amd64.bz2"; url="https://github.com/restic/restic/releases/download/v0.19.1"; cd /tmp; curl -fsSL -o "$f" "$url/$f"; curl -fsSL -o SHA256SUMS "$url/SHA256SUMS"; curl -fsSL -o SHA256SUMS.asc "$url/SHA256SUMS.asc"; gpg --dearmor < /tmp/restic-release-key.asc > /tmp/restic-release-key.gpg; gpgv --keyring /tmp/restic-release-key.gpg SHA256SUMS.asc SHA256SUMS; grep " ${f}\$" SHA256SUMS | sha256sum -c -; echo "${want} ${f}" | sha256sum -c -; bunzip2 -c "$f" > /usr/local/bin/restic; chmod 0755 /usr/local/bin/restic; /usr/local/bin/restic version | grep -q "^restic 0.19.1 " +#20 CACHED + +#21 [stage-2 5/7] RUN mkdir -p /opt/docker/felhom-controller/data +#21 CACHED + +#22 [stage-2 6/7] COPY --from=builder /build/felhom-controller /usr/local/bin/felhom-controller +#22 DONE 0.1s + +#23 [stage-2 7/7] COPY assets/ /usr/share/felhom/assets/ +#23 DONE 0.1s + +#24 exporting to image +#24 exporting layers +#24 exporting layers 2.6s done +#24 exporting manifest sha256:c64bc088431b2398ec209fe5b2971bfd33ead8bb1ba219dedf601f6b556ebb63 +#24 exporting manifest sha256:c64bc088431b2398ec209fe5b2971bfd33ead8bb1ba219dedf601f6b556ebb63 0.3s done +#24 exporting config sha256:94b98adfce1d5f7610e683f3f8a6855a7fb2a4bd5c668d19cf1415d6ba0327fa +#24 exporting config sha256:94b98adfce1d5f7610e683f3f8a6855a7fb2a4bd5c668d19cf1415d6ba0327fa 0.2s done +#24 exporting attestation manifest sha256:7368ba4d08db112ea8eb69a8e35f247298306710e6f9220005ce3220638bb891 +#24 exporting attestation manifest sha256:7368ba4d08db112ea8eb69a8e35f247298306710e6f9220005ce3220638bb891 0.3s done +#24 exporting manifest list sha256:7cfdf7e1f835628de9c7d536e0a60c06bad5bbe19e8133765cc0a6bb732dbff6 +#24 exporting manifest list sha256:7cfdf7e1f835628de9c7d536e0a60c06bad5bbe19e8133765cc0a6bb732dbff6 0.2s done +#24 naming to gitea.dooplex.hu/admin/felhom-controller:0.345.1 +#24 naming to gitea.dooplex.hu/admin/felhom-controller:0.345.1 0.0s done +#24 unpacking to gitea.dooplex.hu/admin/felhom-controller:0.345.1 +#24 unpacking to gitea.dooplex.hu/admin/felhom-controller:0.345.1 0.6s done +#24 naming to gitea.dooplex.hu/admin/felhom-controller:latest 0.0s done +#24 unpacking to gitea.dooplex.hu/admin/felhom-controller:latest 0.1s done +#24 DONE 4.5s +[INFO] Pushing... +The push refers to repository [gitea.dooplex.hu/admin/felhom-controller] +c3f83389ce1b: Waiting +44136fa355b3: Waiting +b2b4e3e31fd1: Waiting +ecc510c1e359: Waiting +c3f83389ce1b: Layer already exists +44136fa355b3: Already exists +b2b4e3e31fd1: Waiting +ecc510c1e359: Layer already exists +e81c1fce9826: Layer already exists +63a1406b1961: Waiting +d747c9b6922d: Waiting +8c5bc1ea4981: Waiting +63a1406b1961: Layer already exists +d747c9b6922d: Layer already exists +b2b4e3e31fd1: Pushed +8c5bc1ea4981: Pushed +bd4abb283803: Pushed +0.345.1: digest: sha256:7cfdf7e1f835628de9c7d536e0a60c06bad5bbe19e8133765cc0a6bb732dbff6 size: 856 +The push refers to repository [gitea.dooplex.hu/admin/felhom-controller] +b2b4e3e31fd1: Waiting +44136fa355b3: Waiting +c3f83389ce1b: Waiting +ecc510c1e359: Waiting +bd4abb283803: Layer already exists +44136fa355b3: Already exists +ecc510c1e359: Layer already exists +b2b4e3e31fd1: Already exists +d747c9b6922d: Layer already exists +c3f83389ce1b: Layer already exists +e81c1fce9826: Layer already exists +63a1406b1961: Layer already exists +8c5bc1ea4981: Layer already exists +latest: digest: sha256:7cfdf7e1f835628de9c7d536e0a60c06bad5bbe19e8133765cc0a6bb732dbff6 size: 856 + +[INFO] ╔══════════════════════════════════════╗ +[INFO] ║ Build complete ✓ ║ +[INFO] ╚══════════════════════════════════════╝ +[INFO] Image: gitea.dooplex.hu/admin/felhom-controller:0.345.1 +[INFO] Size: 486M + diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-box.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-box.txt new file mode 100644 index 00000000..e4243b6a --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-box.txt @@ -0,0 +1,26 @@ +== demo-hp +cloudflared cloudflare/cloudflared:2026.10.3 Up 11 seconds (healthy) +felhom-controller gitea.dooplex.hu/admin/felhom-controller:0.345.1 Up 27 seconds (healthy) +started=2026-10-26T20:06:31.171324386Z +2026-10-26T20:06:31Z INF Version 2026.10.3 (Checksum 919cd4640a5984b57ed420f1dd61e4155ee60abb52ac5fe2adb5f8dc71d0c2e5) +2026-10-26T20:06:31Z INF GOOS: linux, GOVersion: go1.27.3, GoArch: amd64 +2026-10-26T20:06:31Z INF Registered tunnel connection connIndex=0 connection=843ee444-05e8-4aec-9b3e-339cd75a0243 event=0 ip=198.41.200.113 location=vie06 protocol=quic +2026-10-26T20:06:31Z INF Updated to new configuration config="{\"ingress\":[{\"hostname\":\"*.enkisfelhom.hu\", \"originRequest\":{\"noTLSVerify\":true}, \"service\":\"https://traefik\"}, {\"service\":\"http_status:404\"}], \"warp-routing\":{\"enabled\":false}}" version=1 +2026-10-26T20:06:32Z INF Registered tunnel connection connIndex=1 connection=f4340b8a-6bb4-47b2-a781-d649bf2f8f58 event=0 ip=198.41.192.47 location=bud01 protocol=quic +2026-10-26T20:06:33Z INF Registered tunnel connection connIndex=2 connection=fc7d8940-2277-4687-8942-c9a84142d9c9 event=0 ip=198.41.192.77 location=bud01 protocol=quic +cloudflared version 2026.10.3 (built 2026-10-21-13:24 UTC) +2026/10/26 20:06:16 updater.go:855: [INFO] [selfupdate] Post-update startup: update successful (0.345.0 → 0.345.1) +2026/10/26 20:06:17 infra.go:188: [INFO] [infra] cloudflared compose changed (tunnel network true) — recreating cloudflared (the tunnel reconnects in seconds) +== felhom-pve +cloudflared cloudflare/cloudflared:2026.10.3 Up 25 seconds (healthy) +felhom-controller gitea.dooplex.hu/admin/felhom-controller:0.345.1 Up 30 seconds (healthy) +started=2026-10-26T20:06:04.399090267Z +2026-10-26T20:06:04Z INF Version 2026.10.3 (Checksum 919cd4640a5984b57ed420f1dd61e4155ee60abb52ac5fe2adb5f8dc71d0c2e5) +2026-10-26T20:06:04Z INF GOOS: linux, GOVersion: go1.27.3, GoArch: amd64 +2026-10-26T20:06:05Z INF Registered tunnel connection connIndex=0 connection=592e0ea3-9acc-4ed6-a5e6-cb68d2855353 event=0 ip=198.41.192.167 location=bud01 protocol=quic +2026-10-26T20:06:05Z INF Updated to new configuration config="{\"ingress\":[{\"hostname\":\"*.demo-felhom.eu\", \"originRequest\":{\"noTLSVerify\":true}, \"service\":\"https://traefik\"}, {\"service\":\"http_status:404\"}], \"warp-routing\":{\"enabled\":false}}" version=1 +2026-10-26T20:06:05Z INF Registered tunnel connection connIndex=1 connection=da046196-a6fa-492c-8f47-65e607f005f8 event=0 ip=198.41.200.73 location=vie06 protocol=quic +2026-10-26T20:06:06Z INF Registered tunnel connection connIndex=2 connection=d183c0b2-19c3-4bd4-8779-e769170cf504 event=0 ip=198.41.200.23 location=vie05 protocol=quic +cloudflared version 2026.10.3 (built 2026-10-21-13:24 UTC) +2026/10/26 20:06:00 [INFO] [selfupdate] Post-update startup: update successful (0.345.0 → 0.345.1) +2026/10/26 20:06:00 [INFO] [infra] cloudflared compose changed (tunnel network true) — recreating cloudflared (the tunnel reconnects in seconds) diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-floor.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-floor.txt new file mode 100644 index 00000000..50c8f025 --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-floor.txt @@ -0,0 +1,8 @@ +2026-10-26T20:06:04Z +customer demo-hp +HTTP/1.1 303 See Other +Location: /customers/demo-hp?flash=floor_set +2026-10-26T20:06:04Z +customer demo-felhom +HTTP/1.1 303 See Other +Location: /customers/demo-felhom?flash=floor_set diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-tunnelprobe.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-tunnelprobe.txt new file mode 100644 index 00000000..d474476a --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hp-n100-tunnelprobe.txt @@ -0,0 +1,1397 @@ +20:06:00 hp=404 n100=404 +20:06:01 hp=404 n100=404 +20:06:02 hp=404 n100=404 +20:06:03 hp=404 n100=404 +20:06:04 hp=404 n100=404 +20:06:05 hp=404 n100=404 +20:06:06 hp=404 n100=404 +20:06:07 hp=404 n100=404 +20:06:07 hp=404 n100=404 +20:06:09 hp=404 n100=404 +20:06:09 hp=404 n100=404 +20:06:10 hp=404 n100=404 +20:06:11 hp=404 n100=404 +20:06:12 hp=404 n100=404 +20:06:13 hp=404 n100=404 +20:06:14 hp=404 n100=404 +20:06:15 hp=404 n100=404 +20:06:16 hp=404 n100=404 +20:06:16 hp=404 n100=404 +20:06:17 hp=404 n100=502 +20:06:18 hp=404 n100=530 +20:06:19 hp=404 n100=404 +20:06:20 hp=404 n100=404 +20:06:21 hp=502 n100=404 +20:06:22 hp=530 n100=404 +20:06:23 hp=530 n100=404 +20:06:23 hp=530 n100=404 +20:06:24 hp=530 n100=404 +20:06:25 hp=530 n100=404 +20:06:26 hp=530 n100=404 +20:06:27 hp=530 n100=404 +20:06:28 hp=530 n100=404 +20:06:28 hp=530 n100=404 +20:06:29 hp=530 n100=404 +20:06:30 hp=530 n100=404 +20:06:31 hp=530 n100=404 +20:06:32 hp=404 n100=404 +20:06:33 hp=404 n100=404 +20:06:34 hp=404 n100=404 +20:06:34 hp=404 n100=404 +20:06:35 hp=404 n100=404 +20:06:36 hp=404 n100=404 +20:06:37 hp=404 n100=404 +20:06:38 hp=404 n100=404 +20:06:39 hp=404 n100=404 +20:06:40 hp=404 n100=404 +20:06:40 hp=404 n100=404 +20:06:41 hp=404 n100=404 +20:06:42 hp=404 n100=404 +20:06:43 hp=404 n100=404 +20:06:44 hp=404 n100=404 +20:06:45 hp=404 n100=404 +20:06:46 hp=404 n100=404 +20:06:46 hp=404 n100=404 +20:06:47 hp=404 n100=404 +20:06:48 hp=404 n100=404 +20:06:49 hp=404 n100=404 +20:06:50 hp=404 n100=404 +20:06:51 hp=404 n100=404 +20:06:52 hp=404 n100=404 +20:06:52 hp=404 n100=404 +20:06:53 hp=404 n100=404 +20:06:54 hp=404 n100=404 +20:06:55 hp=404 n100=404 +20:06:56 hp=404 n100=404 +20:06:57 hp=404 n100=404 +20:06:58 hp=404 n100=404 +20:06:59 hp=404 n100=404 +20:06:59 hp=404 n100=404 +20:07:00 hp=404 n100=404 +20:07:01 hp=404 n100=404 +20:07:02 hp=404 n100=404 +20:07:03 hp=404 n100=404 +20:07:04 hp=404 n100=404 +20:07:05 hp=404 n100=404 +20:07:05 hp=404 n100=404 +20:07:06 hp=404 n100=404 +20:07:07 hp=404 n100=404 +20:07:08 hp=404 n100=404 +20:07:09 hp=404 n100=404 +20:07:10 hp=404 n100=404 +20:07:11 hp=404 n100=404 +20:07:11 hp=404 n100=404 +20:07:12 hp=404 n100=404 +20:07:13 hp=404 n100=404 +20:07:14 hp=404 n100=404 +20:07:15 hp=404 n100=404 +20:07:16 hp=404 n100=404 +20:07:17 hp=404 n100=404 +20:07:18 hp=404 n100=404 +20:07:18 hp=404 n100=404 +20:07:19 hp=404 n100=404 +20:07:20 hp=404 n100=404 +20:07:21 hp=404 n100=404 +20:07:22 hp=404 n100=404 +20:07:23 hp=404 n100=404 +20:07:24 hp=404 n100=404 +20:07:25 hp=404 n100=404 +20:07:25 hp=404 n100=404 +20:07:26 hp=404 n100=404 +20:07:27 hp=404 n100=404 +20:07:28 hp=404 n100=404 +20:07:29 hp=404 n100=404 +20:07:30 hp=404 n100=404 +20:07:31 hp=404 n100=404 +20:07:31 hp=404 n100=404 +20:07:32 hp=404 n100=404 +20:07:33 hp=404 n100=404 +20:07:34 hp=404 n100=404 +20:07:35 hp=404 n100=404 +20:07:36 hp=404 n100=404 +20:07:37 hp=404 n100=404 +20:07:37 hp=404 n100=404 +20:07:38 hp=404 n100=404 +20:07:39 hp=404 n100=404 +20:07:40 hp=404 n100=404 +20:07:41 hp=404 n100=404 +20:07:42 hp=404 n100=404 +20:07:43 hp=404 n100=404 +20:07:44 hp=404 n100=404 +20:07:44 hp=404 n100=404 +20:07:45 hp=404 n100=404 +20:07:46 hp=404 n100=404 +20:07:47 hp=404 n100=404 +20:07:48 hp=404 n100=404 +20:07:49 hp=404 n100=404 +20:07:49 hp=404 n100=404 +20:07:50 hp=404 n100=404 +20:07:51 hp=404 n100=404 +20:07:52 hp=404 n100=404 +20:07:53 hp=404 n100=404 +20:07:54 hp=404 n100=404 +20:07:55 hp=404 n100=404 +20:07:55 hp=404 n100=404 +20:07:56 hp=404 n100=404 +20:07:57 hp=404 n100=404 +20:07:58 hp=404 n100=404 +20:07:59 hp=404 n100=404 +20:08:00 hp=404 n100=404 +20:08:01 hp=404 n100=404 +20:08:01 hp=404 n100=404 +20:08:02 hp=404 n100=404 +20:08:03 hp=404 n100=404 +20:08:04 hp=404 n100=404 +20:08:05 hp=404 n100=404 +20:08:06 hp=404 n100=404 +20:08:07 hp=404 n100=404 +20:08:07 hp=404 n100=404 +20:08:08 hp=404 n100=404 +20:08:09 hp=404 n100=404 +20:08:10 hp=404 n100=404 +20:08:11 hp=404 n100=404 +20:08:12 hp=404 n100=404 +20:08:13 hp=404 n100=404 +20:08:13 hp=404 n100=404 +20:08:14 hp=404 n100=404 +20:08:15 hp=404 n100=404 +20:08:16 hp=404 n100=404 +20:08:17 hp=404 n100=404 +20:08:18 hp=404 n100=404 +20:08:19 hp=404 n100=404 +20:08:19 hp=404 n100=404 +20:08:20 hp=404 n100=404 +20:08:21 hp=404 n100=404 +20:08:22 hp=404 n100=404 +20:08:23 hp=404 n100=404 +20:08:24 hp=404 n100=404 +20:08:25 hp=404 n100=404 +20:08:25 hp=404 n100=404 +20:08:26 hp=404 n100=404 +20:08:27 hp=404 n100=404 +20:08:28 hp=404 n100=404 +20:08:29 hp=404 n100=404 +20:08:30 hp=404 n100=404 +20:08:31 hp=404 n100=404 +20:08:31 hp=404 n100=404 +20:08:32 hp=404 n100=404 +20:08:33 hp=404 n100=404 +20:08:34 hp=404 n100=404 +20:08:35 hp=404 n100=404 +20:08:36 hp=404 n100=404 +20:08:36 hp=404 n100=404 +20:08:37 hp=404 n100=404 +20:08:38 hp=404 n100=404 +20:08:39 hp=404 n100=404 +20:08:40 hp=404 n100=404 +20:08:41 hp=404 n100=404 +20:08:42 hp=404 n100=404 +20:08:43 hp=404 n100=404 +20:08:43 hp=404 n100=404 +20:08:44 hp=404 n100=404 +20:08:45 hp=404 n100=404 +20:08:46 hp=404 n100=404 +20:08:47 hp=404 n100=404 +20:08:48 hp=404 n100=404 +20:08:49 hp=404 n100=404 +20:08:49 hp=404 n100=404 +20:08:50 hp=404 n100=404 +20:08:51 hp=404 n100=404 +20:08:52 hp=404 n100=404 +20:08:53 hp=404 n100=404 +20:08:54 hp=404 n100=404 +20:08:55 hp=404 n100=404 +20:08:55 hp=404 n100=404 +20:08:56 hp=404 n100=404 +20:08:57 hp=404 n100=404 +20:08:58 hp=404 n100=404 +20:08:59 hp=404 n100=404 +20:09:00 hp=404 n100=404 +20:09:01 hp=404 n100=404 +20:09:01 hp=404 n100=404 +20:09:02 hp=404 n100=404 +20:09:03 hp=404 n100=404 +20:09:04 hp=404 n100=404 +20:09:05 hp=404 n100=404 +20:09:06 hp=404 n100=404 +20:09:07 hp=404 n100=404 +20:09:08 hp=404 n100=404 +20:09:08 hp=404 n100=404 +20:09:09 hp=404 n100=404 +20:09:10 hp=404 n100=404 +20:09:11 hp=404 n100=404 +20:09:12 hp=404 n100=404 +20:09:13 hp=404 n100=404 +20:09:14 hp=404 n100=404 +20:09:14 hp=404 n100=404 +20:09:15 hp=404 n100=404 +20:09:16 hp=404 n100=404 +20:09:17 hp=404 n100=404 +20:09:18 hp=404 n100=404 +20:09:19 hp=404 n100=404 +20:09:20 hp=404 n100=404 +20:09:21 hp=404 n100=404 +20:09:21 hp=404 n100=404 +20:09:22 hp=404 n100=404 +20:09:23 hp=404 n100=404 +20:09:24 hp=404 n100=404 +20:09:25 hp=404 n100=404 +20:09:26 hp=404 n100=404 +20:09:26 hp=404 n100=404 +20:09:27 hp=404 n100=404 +20:09:28 hp=404 n100=404 +20:09:29 hp=404 n100=404 +20:09:30 hp=404 n100=404 +20:09:31 hp=404 n100=404 +20:09:31 hp=404 n100=404 +20:09:32 hp=404 n100=404 +20:09:33 hp=404 n100=404 +20:09:34 hp=404 n100=404 +20:09:35 hp=404 n100=404 +20:09:36 hp=404 n100=404 +20:09:36 hp=404 n100=404 +20:09:37 hp=404 n100=404 +20:09:38 hp=404 n100=404 +20:09:39 hp=404 n100=404 +20:09:40 hp=404 n100=404 +20:09:41 hp=404 n100=404 +20:09:42 hp=404 n100=404 +20:09:42 hp=404 n100=404 +20:09:43 hp=404 n100=404 +20:09:44 hp=404 n100=404 +20:09:45 hp=404 n100=404 +20:09:46 hp=404 n100=404 +20:09:47 hp=404 n100=404 +20:09:48 hp=404 n100=404 +20:09:48 hp=404 n100=404 +20:09:49 hp=404 n100=404 +20:09:50 hp=404 n100=404 +20:09:51 hp=404 n100=404 +20:09:52 hp=404 n100=404 +20:09:53 hp=404 n100=404 +20:09:54 hp=404 n100=404 +20:09:55 hp=404 n100=404 +20:09:56 hp=404 n100=404 +20:09:57 hp=404 n100=404 +20:09:57 hp=404 n100=404 +20:09:58 hp=404 n100=404 +20:09:59 hp=404 n100=404 +20:10:00 hp=404 n100=404 +20:10:01 hp=404 n100=404 +20:10:02 hp=404 n100=404 +20:10:03 hp=404 n100=404 +20:10:03 hp=404 n100=404 +20:10:04 hp=404 n100=404 +20:10:05 hp=404 n100=404 +20:10:06 hp=404 n100=404 +20:10:07 hp=404 n100=404 +20:10:08 hp=404 n100=404 +20:10:09 hp=404 n100=404 +20:10:09 hp=404 n100=404 +20:10:10 hp=404 n100=404 +20:10:11 hp=404 n100=404 +20:10:12 hp=404 n100=404 +20:10:13 hp=404 n100=404 +20:10:14 hp=404 n100=404 +20:10:15 hp=404 n100=404 +20:10:16 hp=404 n100=404 +20:10:17 hp=404 n100=404 +20:10:17 hp=404 n100=404 +20:10:18 hp=404 n100=404 +20:10:19 hp=404 n100=404 +20:10:20 hp=404 n100=404 +20:10:21 hp=404 n100=404 +20:10:22 hp=404 n100=404 +20:10:23 hp=404 n100=404 +20:10:23 hp=404 n100=404 +20:10:24 hp=404 n100=404 +20:10:25 hp=404 n100=404 +20:10:26 hp=404 n100=404 +20:10:27 hp=404 n100=404 +20:10:28 hp=404 n100=404 +20:10:29 hp=404 n100=404 +20:10:30 hp=404 n100=404 +20:10:31 hp=404 n100=404 +20:10:32 hp=404 n100=404 +20:10:32 hp=404 n100=404 +20:10:33 hp=404 n100=404 +20:10:34 hp=404 n100=404 +20:10:35 hp=404 n100=404 +20:10:36 hp=404 n100=404 +20:10:37 hp=404 n100=404 +20:10:38 hp=404 n100=404 +20:10:38 hp=404 n100=404 +20:10:39 hp=404 n100=404 +20:10:40 hp=404 n100=404 +20:10:41 hp=404 n100=404 +20:10:42 hp=404 n100=404 +20:10:43 hp=404 n100=404 +20:10:44 hp=404 n100=404 +20:10:44 hp=404 n100=404 +20:10:45 hp=404 n100=404 +20:10:46 hp=404 n100=404 +20:10:47 hp=404 n100=404 +20:10:48 hp=404 n100=404 +20:10:49 hp=404 n100=404 +20:10:50 hp=404 n100=404 +20:10:51 hp=404 n100=404 +20:10:51 hp=404 n100=404 +20:10:52 hp=404 n100=404 +20:10:53 hp=404 n100=404 +20:10:54 hp=404 n100=404 +20:10:55 hp=404 n100=404 +20:10:56 hp=404 n100=404 +20:10:57 hp=404 n100=404 +20:10:58 hp=404 n100=404 +20:10:58 hp=404 n100=404 +20:10:59 hp=404 n100=404 +20:11:00 hp=404 n100=404 +20:11:01 hp=404 n100=404 +20:11:02 hp=404 n100=404 +20:11:03 hp=404 n100=404 +20:11:04 hp=404 n100=404 +20:11:05 hp=404 n100=404 +20:11:05 hp=404 n100=404 +20:11:06 hp=404 n100=404 +20:11:07 hp=404 n100=404 +20:11:08 hp=404 n100=404 +20:11:09 hp=404 n100=404 +20:11:10 hp=404 n100=404 +20:11:11 hp=404 n100=404 +20:11:12 hp=404 n100=404 +20:11:12 hp=404 n100=404 +20:11:13 hp=404 n100=404 +20:11:14 hp=404 n100=404 +20:11:15 hp=404 n100=404 +20:11:16 hp=404 n100=404 +20:11:17 hp=404 n100=404 +20:11:18 hp=404 n100=404 +20:11:18 hp=404 n100=404 +20:11:19 hp=404 n100=404 +20:11:20 hp=404 n100=404 +20:11:21 hp=404 n100=404 +20:11:22 hp=404 n100=404 +20:11:23 hp=404 n100=404 +20:11:24 hp=404 n100=404 +20:11:25 hp=404 n100=404 +20:11:25 hp=404 n100=404 +20:11:26 hp=404 n100=404 +20:11:27 hp=404 n100=404 +20:11:28 hp=404 n100=404 +20:11:29 hp=404 n100=404 +20:11:30 hp=404 n100=404 +20:11:31 hp=404 n100=404 +20:11:31 hp=404 n100=404 +20:11:32 hp=404 n100=404 +20:11:33 hp=404 n100=404 +20:11:34 hp=404 n100=404 +20:11:35 hp=404 n100=404 +20:11:36 hp=404 n100=404 +20:11:37 hp=404 n100=404 +20:11:37 hp=404 n100=404 +20:11:38 hp=404 n100=404 +20:11:39 hp=404 n100=404 +20:11:40 hp=404 n100=404 +20:11:41 hp=404 n100=404 +20:11:42 hp=404 n100=404 +20:11:43 hp=404 n100=404 +20:11:43 hp=404 n100=404 +20:11:44 hp=404 n100=404 +20:11:45 hp=404 n100=404 +20:11:46 hp=404 n100=404 +20:11:47 hp=404 n100=404 +20:11:48 hp=404 n100=404 +20:11:49 hp=404 n100=404 +20:11:49 hp=404 n100=404 +20:11:50 hp=404 n100=404 +20:11:51 hp=404 n100=404 +20:11:52 hp=404 n100=404 +20:11:53 hp=404 n100=404 +20:11:54 hp=404 n100=404 +20:11:55 hp=404 n100=404 +20:11:56 hp=404 n100=404 +20:11:56 hp=404 n100=404 +20:11:57 hp=404 n100=404 +20:11:58 hp=404 n100=404 +20:11:59 hp=404 n100=404 +20:12:00 hp=404 n100=404 +20:12:01 hp=404 n100=404 +20:12:02 hp=404 n100=404 +20:12:03 hp=404 n100=404 +20:12:04 hp=404 n100=404 +20:12:04 hp=404 n100=404 +20:12:05 hp=404 n100=404 +20:12:06 hp=404 n100=404 +20:12:07 hp=404 n100=404 +20:12:08 hp=404 n100=404 +20:12:09 hp=404 n100=404 +20:12:10 hp=404 n100=404 +20:12:11 hp=404 n100=404 +20:12:11 hp=404 n100=404 +20:12:12 hp=404 n100=404 +20:12:13 hp=404 n100=404 +20:12:14 hp=404 n100=404 +20:12:15 hp=404 n100=404 +20:12:16 hp=404 n100=404 +20:12:16 hp=404 n100=404 +20:12:17 hp=404 n100=404 +20:12:18 hp=404 n100=404 +20:12:19 hp=404 n100=404 +20:12:20 hp=404 n100=404 +20:12:21 hp=404 n100=404 +20:12:22 hp=404 n100=404 +20:12:22 hp=404 n100=404 +20:12:23 hp=404 n100=404 +20:12:24 hp=404 n100=404 +20:12:25 hp=404 n100=404 +20:12:26 hp=404 n100=404 +20:12:27 hp=404 n100=404 +20:12:27 hp=404 n100=404 +20:12:28 hp=404 n100=404 +20:12:29 hp=404 n100=404 +20:12:30 hp=404 n100=404 +20:12:31 hp=404 n100=404 +20:12:32 hp=404 n100=404 +20:12:33 hp=404 n100=404 +20:12:33 hp=404 n100=404 +20:12:34 hp=404 n100=404 +20:12:35 hp=404 n100=404 +20:12:36 hp=404 n100=404 +20:12:37 hp=404 n100=404 +20:12:38 hp=404 n100=404 +20:12:39 hp=404 n100=404 +20:12:39 hp=404 n100=404 +20:12:40 hp=404 n100=404 +20:12:41 hp=404 n100=404 +20:12:42 hp=404 n100=404 +20:12:43 hp=404 n100=404 +20:12:44 hp=404 n100=404 +20:12:45 hp=404 n100=404 +20:12:45 hp=404 n100=404 +20:12:46 hp=404 n100=404 +20:12:47 hp=404 n100=404 +20:12:48 hp=404 n100=404 +20:12:49 hp=404 n100=404 +20:12:50 hp=404 n100=404 +20:12:51 hp=404 n100=404 +20:12:51 hp=404 n100=404 +20:12:52 hp=404 n100=404 +20:12:53 hp=404 n100=404 +20:12:54 hp=404 n100=404 +20:12:55 hp=404 n100=404 +20:12:56 hp=404 n100=404 +20:12:56 hp=404 n100=404 +20:12:57 hp=404 n100=404 +20:12:58 hp=404 n100=404 +20:12:59 hp=404 n100=404 +20:13:00 hp=404 n100=404 +20:13:01 hp=404 n100=404 +20:13:01 hp=404 n100=404 +20:13:02 hp=404 n100=404 +20:13:03 hp=404 n100=404 +20:13:04 hp=404 n100=404 +20:13:05 hp=404 n100=404 +20:13:06 hp=404 n100=404 +20:13:07 hp=404 n100=404 +20:13:08 hp=404 n100=404 +20:13:08 hp=404 n100=404 +20:13:09 hp=404 n100=404 +20:13:10 hp=404 n100=404 +20:13:11 hp=404 n100=404 +20:13:12 hp=404 n100=404 +20:13:13 hp=404 n100=404 +20:13:13 hp=404 n100=404 +20:13:14 hp=404 n100=404 +20:13:15 hp=404 n100=404 +20:13:16 hp=404 n100=404 +20:13:17 hp=404 n100=404 +20:13:18 hp=404 n100=404 +20:13:19 hp=404 n100=404 +20:13:20 hp=404 n100=404 +20:13:20 hp=404 n100=404 +20:13:21 hp=404 n100=404 +20:13:22 hp=404 n100=404 +20:13:23 hp=404 n100=404 +20:13:24 hp=404 n100=404 +20:13:25 hp=404 n100=404 +20:13:26 hp=404 n100=404 +20:13:26 hp=404 n100=404 +20:13:27 hp=404 n100=404 +20:13:28 hp=404 n100=404 +20:13:29 hp=404 n100=404 +20:13:30 hp=404 n100=404 +20:13:31 hp=404 n100=404 +20:13:32 hp=404 n100=404 +20:13:33 hp=404 n100=404 +20:13:33 hp=404 n100=404 +20:13:34 hp=404 n100=404 +20:13:35 hp=404 n100=404 +20:13:36 hp=404 n100=404 +20:13:37 hp=404 n100=404 +20:13:38 hp=404 n100=404 +20:13:39 hp=404 n100=404 +20:13:40 hp=404 n100=404 +20:13:40 hp=404 n100=404 +20:13:41 hp=404 n100=404 +20:13:42 hp=404 n100=404 +20:13:43 hp=404 n100=404 +20:13:44 hp=404 n100=404 +20:13:45 hp=404 n100=404 +20:13:46 hp=404 n100=404 +20:13:46 hp=404 n100=404 +20:13:47 hp=404 n100=404 +20:13:48 hp=404 n100=404 +20:13:49 hp=404 n100=404 +20:13:50 hp=404 n100=404 +20:13:51 hp=404 n100=404 +20:13:52 hp=404 n100=404 +20:13:53 hp=404 n100=404 +20:13:53 hp=404 n100=404 +20:13:54 hp=404 n100=404 +20:13:55 hp=404 n100=404 +20:13:56 hp=404 n100=404 +20:13:57 hp=404 n100=404 +20:13:58 hp=404 n100=404 +20:13:59 hp=404 n100=404 +20:14:00 hp=404 n100=404 +20:14:01 hp=404 n100=404 +20:14:01 hp=404 n100=404 +20:14:02 hp=404 n100=404 +20:14:03 hp=404 n100=404 +20:14:04 hp=404 n100=404 +20:14:05 hp=404 n100=404 +20:14:06 hp=404 n100=404 +20:14:07 hp=404 n100=404 +20:14:08 hp=404 n100=404 +20:14:09 hp=404 n100=404 +20:14:10 hp=404 n100=404 +20:14:11 hp=404 n100=404 +20:14:12 hp=404 n100=404 +20:14:13 hp=404 n100=404 +20:14:14 hp=404 n100=404 +20:14:14 hp=404 n100=404 +20:14:15 hp=404 n100=404 +20:14:16 hp=404 n100=404 +20:14:17 hp=404 n100=404 +20:14:18 hp=404 n100=404 +20:14:19 hp=404 n100=404 +20:14:20 hp=404 n100=404 +20:14:21 hp=404 n100=404 +20:14:21 hp=404 n100=404 +20:14:22 hp=404 n100=404 +20:14:23 hp=404 n100=404 +20:14:24 hp=404 n100=404 +20:14:25 hp=404 n100=404 +20:14:26 hp=404 n100=404 +20:14:27 hp=404 n100=404 +20:14:28 hp=404 n100=404 +20:14:29 hp=404 n100=404 +20:14:30 hp=404 n100=404 +20:14:31 hp=404 n100=404 +20:14:32 hp=404 n100=404 +20:14:33 hp=404 n100=404 +20:14:34 hp=404 n100=404 +20:14:35 hp=404 n100=404 +20:14:36 hp=404 n100=404 +20:14:37 hp=404 n100=404 +20:14:38 hp=404 n100=404 +20:14:39 hp=404 n100=404 +20:14:39 hp=404 n100=404 +20:14:40 hp=404 n100=404 +20:14:41 hp=404 n100=404 +20:14:42 hp=404 n100=404 +20:14:43 hp=404 n100=404 +20:14:43 hp=404 n100=404 +20:14:44 hp=404 n100=404 +20:14:45 hp=404 n100=404 +20:14:46 hp=404 n100=404 +20:14:47 hp=404 n100=404 +20:14:47 hp=404 n100=404 +20:14:48 hp=404 n100=404 +20:14:49 hp=404 n100=404 +20:14:50 hp=404 n100=404 +20:14:51 hp=404 n100=404 +20:14:52 hp=404 n100=404 +20:14:53 hp=404 n100=404 +20:14:54 hp=404 n100=404 +20:14:55 hp=404 n100=404 +20:14:56 hp=404 n100=404 +20:14:56 hp=404 n100=404 +20:14:57 hp=404 n100=404 +20:14:58 hp=404 n100=404 +20:14:59 hp=404 n100=404 +20:15:00 hp=404 n100=404 +20:15:00 hp=404 n100=404 +20:15:01 hp=404 n100=404 +20:15:02 hp=404 n100=404 +20:15:03 hp=404 n100=404 +20:15:04 hp=404 n100=404 +20:15:04 hp=404 n100=404 +20:15:05 hp=404 n100=404 +20:15:06 hp=404 n100=404 +20:15:07 hp=404 n100=404 +20:15:08 hp=404 n100=404 +20:15:09 hp=404 n100=404 +20:15:09 hp=404 n100=404 +20:15:10 hp=404 n100=404 +20:15:11 hp=404 n100=404 +20:15:12 hp=404 n100=404 +20:15:13 hp=404 n100=404 +20:15:14 hp=404 n100=404 +20:15:15 hp=404 n100=404 +20:15:15 hp=404 n100=404 +20:15:16 hp=404 n100=404 +20:15:17 hp=404 n100=404 +20:15:18 hp=404 n100=404 +20:15:19 hp=404 n100=404 +20:15:20 hp=404 n100=404 +20:15:20 hp=404 n100=404 +20:15:21 hp=404 n100=404 +20:15:22 hp=404 n100=404 +20:15:23 hp=404 n100=404 +20:15:24 hp=404 n100=404 +20:15:25 hp=404 n100=404 +20:15:25 hp=404 n100=404 +20:15:26 hp=404 n100=404 +20:15:27 hp=404 n100=404 +20:15:28 hp=404 n100=404 +20:15:29 hp=404 n100=404 +20:15:30 hp=404 n100=404 +20:15:31 hp=404 n100=404 +20:15:31 hp=404 n100=404 +20:15:32 hp=404 n100=404 +20:15:33 hp=404 n100=404 +20:15:34 hp=404 n100=404 +20:15:35 hp=404 n100=404 +20:15:36 hp=404 n100=404 +20:15:36 hp=404 n100=404 +20:15:37 hp=404 n100=404 +20:15:38 hp=404 n100=404 +20:15:39 hp=404 n100=404 +20:15:40 hp=404 n100=404 +20:15:41 hp=404 n100=404 +20:15:41 hp=404 n100=404 +20:15:42 hp=404 n100=404 +20:15:43 hp=404 n100=404 +20:15:44 hp=404 n100=404 +20:15:45 hp=404 n100=404 +20:15:46 hp=404 n100=404 +20:15:47 hp=404 n100=404 +20:15:47 hp=404 n100=404 +20:15:48 hp=404 n100=404 +20:15:49 hp=404 n100=404 +20:15:50 hp=404 n100=404 +20:15:51 hp=404 n100=404 +20:15:52 hp=404 n100=404 +20:15:52 hp=404 n100=404 +20:15:53 hp=404 n100=404 +20:15:54 hp=404 n100=404 +20:15:55 hp=404 n100=404 +20:15:56 hp=404 n100=404 +20:15:57 hp=404 n100=404 +20:15:58 hp=404 n100=404 +20:15:58 hp=404 n100=404 +20:15:59 hp=404 n100=404 +20:16:00 hp=404 n100=404 +20:16:01 hp=404 n100=404 +20:16:02 hp=404 n100=404 +20:16:03 hp=404 n100=404 +20:16:04 hp=404 n100=404 +20:16:04 hp=404 n100=404 +20:16:05 hp=404 n100=404 +20:16:06 hp=404 n100=404 +20:16:07 hp=404 n100=404 +20:16:08 hp=404 n100=404 +20:16:09 hp=404 n100=404 +20:16:10 hp=404 n100=404 +20:16:10 hp=404 n100=404 +20:16:11 hp=404 n100=404 +20:16:12 hp=404 n100=404 +20:16:13 hp=404 n100=404 +20:16:14 hp=404 n100=404 +20:16:15 hp=404 n100=404 +20:16:16 hp=404 n100=404 +20:16:16 hp=404 n100=404 +20:16:17 hp=404 n100=404 +20:16:18 hp=404 n100=404 +20:16:19 hp=404 n100=404 +20:16:20 hp=404 n100=404 +20:16:21 hp=404 n100=404 +20:16:22 hp=404 n100=404 +20:16:22 hp=404 n100=404 +20:16:23 hp=404 n100=404 +20:16:24 hp=404 n100=404 +20:16:25 hp=404 n100=404 +20:16:26 hp=404 n100=404 +20:16:27 hp=404 n100=404 +20:16:28 hp=404 n100=404 +20:16:28 hp=404 n100=404 +20:16:29 hp=404 n100=404 +20:16:30 hp=404 n100=404 +20:16:31 hp=404 n100=404 +20:16:32 hp=404 n100=404 +20:16:33 hp=404 n100=404 +20:16:34 hp=404 n100=404 +20:16:34 hp=404 n100=404 +20:16:35 hp=404 n100=404 +20:16:36 hp=404 n100=404 +20:16:37 hp=404 n100=404 +20:16:38 hp=404 n100=404 +20:16:39 hp=404 n100=404 +20:16:40 hp=404 n100=404 +20:16:40 hp=404 n100=404 +20:16:41 hp=404 n100=404 +20:16:42 hp=404 n100=404 +20:16:43 hp=404 n100=404 +20:16:44 hp=404 n100=404 +20:16:45 hp=404 n100=404 +20:16:46 hp=404 n100=404 +20:16:46 hp=404 n100=404 +20:16:47 hp=404 n100=404 +20:16:48 hp=404 n100=404 +20:16:49 hp=404 n100=404 +20:16:50 hp=404 n100=404 +20:16:51 hp=404 n100=404 +20:16:52 hp=404 n100=404 +20:16:53 hp=404 n100=404 +20:16:53 hp=404 n100=404 +20:16:54 hp=404 n100=404 +20:16:55 hp=404 n100=404 +20:16:56 hp=404 n100=404 +20:16:57 hp=404 n100=404 +20:16:58 hp=404 n100=404 +20:16:59 hp=404 n100=404 +20:17:00 hp=404 n100=404 +20:17:01 hp=404 n100=404 +20:17:02 hp=404 n100=404 +20:17:03 hp=404 n100=404 +20:17:04 hp=404 n100=404 +20:17:05 hp=404 n100=404 +20:17:06 hp=404 n100=404 +20:17:07 hp=404 n100=404 +20:17:07 hp=404 n100=404 +20:17:08 hp=404 n100=404 +20:17:09 hp=404 n100=404 +20:17:10 hp=404 n100=404 +20:17:11 hp=404 n100=404 +20:17:12 hp=404 n100=404 +20:17:13 hp=000 n100=404 +20:17:16 hp=404 n100=404 +20:17:17 hp=404 n100=404 +20:17:18 hp=404 n100=404 +20:17:19 hp=404 n100=404 +20:17:20 hp=404 n100=404 +20:17:21 hp=404 n100=404 +20:17:21 hp=404 n100=404 +20:17:22 hp=404 n100=404 +20:17:23 hp=404 n100=404 +20:17:24 hp=404 n100=404 +20:17:25 hp=404 n100=404 +20:17:26 hp=404 n100=404 +20:17:27 hp=404 n100=404 +20:17:27 hp=404 n100=404 +20:17:28 hp=404 n100=404 +20:17:29 hp=404 n100=404 +20:17:30 hp=404 n100=404 +20:17:31 hp=404 n100=404 +20:17:32 hp=404 n100=404 +20:17:32 hp=404 n100=404 +20:17:33 hp=404 n100=404 +20:17:34 hp=404 n100=404 +20:17:35 hp=404 n100=404 +20:17:36 hp=404 n100=404 +20:17:37 hp=404 n100=404 +20:17:37 hp=404 n100=404 +20:17:38 hp=404 n100=404 +20:17:39 hp=404 n100=404 +20:17:40 hp=404 n100=404 +20:17:41 hp=404 n100=404 +20:17:42 hp=404 n100=404 +20:17:43 hp=404 n100=404 +20:17:44 hp=404 n100=404 +20:17:44 hp=404 n100=404 +20:17:45 hp=404 n100=404 +20:17:46 hp=404 n100=404 +20:17:47 hp=404 n100=404 +20:17:48 hp=404 n100=404 +20:17:49 hp=404 n100=404 +20:17:49 hp=404 n100=404 +20:17:50 hp=404 n100=404 +20:17:51 hp=404 n100=404 +20:17:52 hp=404 n100=404 +20:17:53 hp=404 n100=404 +20:17:54 hp=404 n100=404 +20:17:55 hp=404 n100=404 +20:17:55 hp=404 n100=404 +20:17:56 hp=404 n100=404 +20:17:57 hp=404 n100=404 +20:17:58 hp=404 n100=404 +20:17:59 hp=404 n100=404 +20:18:00 hp=404 n100=404 +20:18:00 hp=404 n100=404 +20:18:01 hp=404 n100=404 +20:18:02 hp=404 n100=404 +20:18:03 hp=404 n100=404 +20:18:04 hp=404 n100=404 +20:18:05 hp=404 n100=404 +20:18:05 hp=404 n100=404 +20:18:06 hp=404 n100=404 +20:18:07 hp=404 n100=404 +20:18:08 hp=404 n100=404 +20:18:09 hp=404 n100=404 +20:18:10 hp=404 n100=404 +20:18:10 hp=404 n100=404 +20:18:11 hp=404 n100=404 +20:18:12 hp=404 n100=404 +20:18:13 hp=404 n100=404 +20:18:14 hp=404 n100=404 +20:18:14 hp=404 n100=404 +20:18:15 hp=404 n100=404 +20:18:16 hp=404 n100=404 +20:18:17 hp=404 n100=404 +20:18:18 hp=404 n100=404 +20:18:19 hp=404 n100=404 +20:18:20 hp=404 n100=404 +20:18:20 hp=404 n100=404 +20:18:21 hp=404 n100=404 +20:18:22 hp=404 n100=404 +20:18:23 hp=404 n100=404 +20:18:24 hp=404 n100=404 +20:18:25 hp=404 n100=404 +20:18:26 hp=404 n100=404 +20:18:26 hp=404 n100=404 +20:18:27 hp=404 n100=404 +20:18:28 hp=404 n100=404 +20:18:29 hp=404 n100=404 +20:18:30 hp=404 n100=404 +20:18:31 hp=404 n100=404 +20:18:31 hp=404 n100=404 +20:18:32 hp=404 n100=404 +20:18:33 hp=404 n100=404 +20:18:34 hp=404 n100=404 +20:18:35 hp=404 n100=404 +20:18:36 hp=404 n100=404 +20:18:36 hp=404 n100=404 +20:18:37 hp=404 n100=404 +20:18:38 hp=404 n100=404 +20:18:39 hp=404 n100=404 +20:18:40 hp=404 n100=404 +20:18:41 hp=404 n100=404 +20:18:41 hp=404 n100=404 +20:18:42 hp=404 n100=404 +20:18:43 hp=404 n100=404 +20:18:44 hp=404 n100=404 +20:18:45 hp=404 n100=404 +20:18:46 hp=404 n100=404 +20:18:47 hp=404 n100=404 +20:18:47 hp=404 n100=404 +20:18:48 hp=404 n100=404 +20:18:49 hp=404 n100=404 +20:18:50 hp=404 n100=404 +20:18:51 hp=404 n100=404 +20:18:52 hp=404 n100=404 +20:18:52 hp=404 n100=404 +20:18:53 hp=404 n100=404 +20:18:54 hp=404 n100=404 +20:18:55 hp=404 n100=404 +20:18:56 hp=404 n100=404 +20:18:57 hp=404 n100=404 +20:18:58 hp=404 n100=404 +20:18:58 hp=404 n100=404 +20:18:59 hp=404 n100=404 +20:19:00 hp=404 n100=404 +20:19:01 hp=404 n100=404 +20:19:02 hp=404 n100=404 +20:19:03 hp=404 n100=404 +20:19:03 hp=404 n100=404 +20:19:04 hp=404 n100=404 +20:19:05 hp=404 n100=404 +20:19:06 hp=404 n100=404 +20:19:07 hp=404 n100=404 +20:19:08 hp=404 n100=404 +20:19:09 hp=404 n100=404 +20:19:09 hp=404 n100=404 +20:19:10 hp=404 n100=404 +20:19:11 hp=404 n100=404 +20:19:12 hp=404 n100=404 +20:19:13 hp=404 n100=404 +20:19:14 hp=404 n100=404 +20:19:15 hp=404 n100=404 +20:19:15 hp=404 n100=404 +20:19:16 hp=404 n100=404 +20:19:17 hp=404 n100=404 +20:19:18 hp=404 n100=404 +20:19:19 hp=404 n100=404 +20:19:20 hp=404 n100=404 +20:19:20 hp=404 n100=404 +20:19:21 hp=404 n100=404 +20:19:22 hp=404 n100=404 +20:19:23 hp=404 n100=404 +20:19:24 hp=404 n100=404 +20:19:25 hp=404 n100=404 +20:19:26 hp=404 n100=404 +20:19:26 hp=404 n100=404 +20:19:27 hp=404 n100=404 +20:19:28 hp=404 n100=404 +20:19:29 hp=404 n100=404 +20:19:30 hp=404 n100=404 +20:19:31 hp=404 n100=404 +20:19:32 hp=404 n100=404 +20:19:32 hp=404 n100=404 +20:19:33 hp=404 n100=404 +20:19:34 hp=404 n100=404 +20:19:35 hp=404 n100=404 +20:19:36 hp=404 n100=404 +20:19:37 hp=404 n100=404 +20:19:37 hp=404 n100=404 +20:19:38 hp=404 n100=404 +20:19:39 hp=404 n100=404 +20:19:40 hp=404 n100=404 +20:19:41 hp=404 n100=404 +20:19:42 hp=404 n100=404 +20:19:43 hp=404 n100=404 +20:19:43 hp=404 n100=404 +20:19:44 hp=404 n100=404 +20:19:45 hp=404 n100=404 +20:19:46 hp=404 n100=404 +20:19:47 hp=404 n100=404 +20:19:48 hp=404 n100=404 +20:19:48 hp=404 n100=404 +20:19:49 hp=404 n100=404 +20:19:50 hp=404 n100=404 +20:19:51 hp=404 n100=404 +20:19:52 hp=404 n100=404 +20:19:53 hp=404 n100=404 +20:19:54 hp=404 n100=404 +20:19:54 hp=404 n100=404 +20:19:55 hp=404 n100=404 +20:19:56 hp=404 n100=404 +20:19:57 hp=404 n100=404 +20:19:58 hp=404 n100=404 +20:19:59 hp=404 n100=404 +20:19:59 hp=404 n100=404 +20:20:00 hp=404 n100=404 +20:20:01 hp=404 n100=404 +20:20:02 hp=404 n100=404 +20:20:03 hp=404 n100=404 +20:20:04 hp=404 n100=404 +20:20:05 hp=404 n100=404 +20:20:05 hp=404 n100=404 +20:20:06 hp=404 n100=404 +20:20:07 hp=404 n100=404 +20:20:08 hp=404 n100=404 +20:20:09 hp=404 n100=404 +20:20:10 hp=404 n100=404 +20:20:10 hp=404 n100=404 +20:20:11 hp=404 n100=404 +20:20:12 hp=404 n100=404 +20:20:13 hp=404 n100=404 +20:20:14 hp=404 n100=404 +20:20:15 hp=404 n100=404 +20:20:15 hp=404 n100=404 +20:20:16 hp=404 n100=404 +20:20:17 hp=404 n100=404 +20:20:18 hp=404 n100=404 +20:20:19 hp=404 n100=404 +20:20:20 hp=404 n100=404 +20:20:21 hp=404 n100=404 +20:20:21 hp=404 n100=404 +20:20:22 hp=404 n100=404 +20:20:23 hp=404 n100=404 +20:20:24 hp=404 n100=404 +20:20:25 hp=404 n100=404 +20:20:26 hp=404 n100=404 +20:20:27 hp=404 n100=404 +20:20:27 hp=404 n100=404 +20:20:28 hp=404 n100=404 +20:20:29 hp=404 n100=404 +20:20:30 hp=404 n100=404 +20:20:31 hp=404 n100=404 +20:20:32 hp=404 n100=404 +20:20:32 hp=404 n100=404 +20:20:33 hp=404 n100=404 +20:20:34 hp=404 n100=404 +20:20:35 hp=404 n100=404 +20:20:36 hp=404 n100=404 +20:20:37 hp=404 n100=404 +20:20:38 hp=404 n100=404 +20:20:38 hp=404 n100=404 +20:20:39 hp=404 n100=404 +20:20:40 hp=404 n100=404 +20:20:41 hp=404 n100=404 +20:20:42 hp=404 n100=404 +20:20:43 hp=404 n100=404 +20:20:44 hp=404 n100=404 +20:20:44 hp=404 n100=404 +20:20:45 hp=404 n100=404 +20:20:46 hp=404 n100=404 +20:20:47 hp=404 n100=404 +20:20:48 hp=404 n100=404 +20:20:49 hp=404 n100=404 +20:20:49 hp=404 n100=404 +20:20:50 hp=404 n100=404 +20:20:51 hp=404 n100=404 +20:20:52 hp=404 n100=404 +20:20:53 hp=404 n100=404 +20:20:54 hp=404 n100=404 +20:20:55 hp=404 n100=404 +20:20:56 hp=404 n100=404 +20:20:56 hp=404 n100=404 +20:20:57 hp=404 n100=404 +20:20:58 hp=404 n100=404 +20:20:59 hp=404 n100=404 +20:21:00 hp=404 n100=404 +20:21:01 hp=404 n100=404 +20:21:01 hp=404 n100=404 +20:21:02 hp=404 n100=404 +20:21:03 hp=404 n100=404 +20:21:04 hp=404 n100=404 +20:21:05 hp=404 n100=404 +20:21:06 hp=404 n100=404 +20:21:07 hp=404 n100=404 +20:21:07 hp=404 n100=404 +20:21:08 hp=404 n100=404 +20:21:09 hp=404 n100=404 +20:21:10 hp=404 n100=404 +20:21:11 hp=404 n100=404 +20:21:12 hp=404 n100=404 +20:21:13 hp=404 n100=404 +20:21:14 hp=404 n100=404 +20:21:14 hp=404 n100=404 +20:21:15 hp=404 n100=404 +20:21:16 hp=404 n100=404 +20:21:17 hp=404 n100=404 +20:21:18 hp=404 n100=404 +20:21:19 hp=404 n100=404 +20:21:20 hp=404 n100=404 +20:21:20 hp=404 n100=404 +20:21:21 hp=404 n100=404 +20:21:22 hp=404 n100=404 +20:21:23 hp=404 n100=404 +20:21:24 hp=404 n100=404 +20:21:25 hp=404 n100=404 +20:21:25 hp=404 n100=404 +20:21:26 hp=404 n100=404 +20:21:27 hp=404 n100=404 +20:21:28 hp=404 n100=404 +20:21:29 hp=404 n100=404 +20:21:30 hp=404 n100=404 +20:21:31 hp=404 n100=404 +20:21:31 hp=404 n100=404 +20:21:32 hp=404 n100=404 +20:21:33 hp=404 n100=404 +20:21:34 hp=404 n100=404 +20:21:35 hp=404 n100=404 +20:21:36 hp=404 n100=404 +20:21:36 hp=404 n100=404 +20:21:37 hp=404 n100=404 +20:21:38 hp=404 n100=404 +20:21:39 hp=404 n100=404 +20:21:40 hp=404 n100=404 +20:21:41 hp=404 n100=404 +20:21:41 hp=404 n100=404 +20:21:42 hp=404 n100=404 +20:21:43 hp=404 n100=404 +20:21:44 hp=404 n100=404 +20:21:45 hp=404 n100=404 +20:21:46 hp=404 n100=404 +20:21:47 hp=404 n100=404 +20:21:47 hp=404 n100=404 +20:21:48 hp=404 n100=404 +20:21:49 hp=404 n100=404 +20:21:50 hp=404 n100=404 +20:21:51 hp=404 n100=404 +20:21:52 hp=404 n100=404 +20:21:53 hp=404 n100=404 +20:21:53 hp=404 n100=404 +20:21:54 hp=404 n100=404 +20:21:55 hp=404 n100=404 +20:21:56 hp=404 n100=404 +20:21:57 hp=404 n100=404 +20:21:58 hp=404 n100=404 +20:21:59 hp=404 n100=404 +20:21:59 hp=404 n100=404 +20:22:00 hp=404 n100=404 +20:22:01 hp=404 n100=404 +20:22:02 hp=404 n100=404 +20:22:03 hp=404 n100=404 +20:22:04 hp=404 n100=404 +20:22:04 hp=404 n100=404 +20:22:05 hp=404 n100=404 +20:22:06 hp=404 n100=404 +20:22:07 hp=404 n100=404 +20:22:08 hp=404 n100=404 +20:22:09 hp=404 n100=404 +20:22:10 hp=404 n100=404 +20:22:10 hp=404 n100=404 +20:22:11 hp=404 n100=404 +20:22:12 hp=404 n100=404 +20:22:13 hp=404 n100=404 +20:22:14 hp=404 n100=404 +20:22:15 hp=404 n100=404 +20:22:16 hp=404 n100=404 +20:22:16 hp=404 n100=404 +20:22:17 hp=404 n100=404 +20:22:18 hp=404 n100=404 +20:22:19 hp=404 n100=404 +20:22:20 hp=404 n100=404 +20:22:21 hp=404 n100=404 +20:22:21 hp=404 n100=404 +20:22:22 hp=404 n100=404 +20:22:23 hp=404 n100=404 +20:22:24 hp=404 n100=404 +20:22:25 hp=404 n100=404 +20:22:26 hp=404 n100=404 +20:22:27 hp=404 n100=404 +20:22:27 hp=404 n100=404 +20:22:28 hp=404 n100=404 +20:22:29 hp=404 n100=404 +20:22:30 hp=404 n100=404 +20:22:31 hp=404 n100=404 +20:22:32 hp=404 n100=404 +20:22:32 hp=404 n100=404 +20:22:33 hp=404 n100=404 +20:22:34 hp=404 n100=404 +20:22:35 hp=404 n100=404 +20:22:36 hp=404 n100=404 +20:22:37 hp=404 n100=404 +20:22:37 hp=404 n100=404 +20:22:38 hp=404 n100=404 +20:22:39 hp=404 n100=404 +20:22:40 hp=404 n100=404 +20:22:41 hp=404 n100=404 +20:22:42 hp=404 n100=404 +20:22:43 hp=404 n100=404 +20:22:43 hp=404 n100=404 +20:22:44 hp=404 n100=404 +20:22:45 hp=404 n100=404 +20:22:46 hp=404 n100=404 +20:22:47 hp=404 n100=404 +20:22:48 hp=404 n100=404 +20:22:48 hp=404 n100=404 +20:22:49 hp=404 n100=404 +20:22:50 hp=404 n100=404 +20:22:51 hp=404 n100=404 +20:22:52 hp=404 n100=404 +20:22:53 hp=404 n100=404 +20:22:54 hp=404 n100=404 +20:22:54 hp=404 n100=404 +20:22:55 hp=404 n100=404 +20:22:56 hp=404 n100=404 +20:22:57 hp=404 n100=404 +20:22:58 hp=404 n100=404 +20:22:59 hp=404 n100=404 +20:22:59 hp=404 n100=404 +20:23:00 hp=404 n100=404 +20:23:01 hp=404 n100=404 +20:23:02 hp=404 n100=404 +20:23:03 hp=404 n100=404 +20:23:04 hp=404 n100=404 +20:23:04 hp=404 n100=404 +20:23:05 hp=404 n100=404 +20:23:06 hp=404 n100=404 +20:23:07 hp=404 n100=404 +20:23:08 hp=404 n100=404 +20:23:09 hp=404 n100=404 +20:23:10 hp=404 n100=404 +20:23:10 hp=404 n100=404 +20:23:11 hp=404 n100=404 +20:23:12 hp=404 n100=404 +20:23:13 hp=404 n100=404 +20:23:14 hp=404 n100=404 +20:23:15 hp=404 n100=404 +20:23:15 hp=404 n100=404 +20:23:16 hp=404 n100=404 +20:23:17 hp=404 n100=404 +20:23:18 hp=404 n100=404 +20:23:19 hp=404 n100=404 +20:23:20 hp=404 n100=404 +20:23:20 hp=404 n100=404 +20:23:21 hp=404 n100=404 +20:23:22 hp=404 n100=404 +20:23:23 hp=404 n100=404 +20:23:24 hp=404 n100=404 +20:23:25 hp=404 n100=404 +20:23:25 hp=404 n100=404 +20:23:26 hp=404 n100=404 +20:23:27 hp=404 n100=404 +20:23:28 hp=404 n100=404 +20:23:29 hp=404 n100=404 +20:23:30 hp=404 n100=404 +20:23:31 hp=404 n100=404 +20:23:31 hp=404 n100=404 +20:23:32 hp=404 n100=404 +20:23:33 hp=404 n100=404 +20:23:34 hp=404 n100=404 +20:23:35 hp=404 n100=404 +20:23:36 hp=404 n100=404 +20:23:37 hp=404 n100=404 +20:23:37 hp=404 n100=404 +20:23:38 hp=404 n100=404 +20:23:39 hp=404 n100=404 +20:23:40 hp=404 n100=404 +20:23:41 hp=404 n100=404 +20:23:42 hp=404 n100=404 +20:23:42 hp=404 n100=404 +20:23:43 hp=404 n100=404 +20:23:44 hp=404 n100=404 +20:23:45 hp=404 n100=404 +20:23:46 hp=404 n100=404 +20:23:47 hp=404 n100=404 +20:23:48 hp=404 n100=404 +20:23:48 hp=404 n100=404 +20:23:49 hp=404 n100=404 +20:23:50 hp=404 n100=404 +20:23:51 hp=404 n100=404 +20:23:52 hp=404 n100=404 +20:23:53 hp=404 n100=404 +20:23:54 hp=404 n100=404 +20:23:54 hp=404 n100=404 +20:23:55 hp=404 n100=404 +20:23:56 hp=404 n100=404 +20:23:57 hp=404 n100=404 +20:23:58 hp=404 n100=404 +20:23:59 hp=404 n100=404 +20:24:00 hp=404 n100=404 +20:24:00 hp=404 n100=404 +20:24:01 hp=404 n100=404 +20:24:02 hp=404 n100=404 +20:24:03 hp=404 n100=404 +20:24:04 hp=404 n100=404 +20:24:05 hp=404 n100=404 +20:24:05 hp=404 n100=404 +20:24:06 hp=404 n100=404 +20:24:07 hp=404 n100=404 +20:24:08 hp=404 n100=404 +20:24:09 hp=404 n100=404 +20:24:10 hp=404 n100=404 +20:24:10 hp=404 n100=404 +20:24:11 hp=404 n100=404 +20:24:12 hp=404 n100=404 +20:24:13 hp=404 n100=404 +20:24:14 hp=404 n100=404 +20:24:15 hp=404 n100=404 +20:24:15 hp=404 n100=404 +20:24:16 hp=404 n100=404 +20:24:17 hp=404 n100=404 +20:24:18 hp=404 n100=404 +20:24:19 hp=404 n100=404 +20:24:20 hp=404 n100=404 +20:24:20 hp=404 n100=404 +20:24:21 hp=404 n100=404 +20:24:22 hp=404 n100=404 +20:24:23 hp=404 n100=404 +20:24:24 hp=404 n100=404 +20:24:25 hp=404 n100=404 +20:24:25 hp=404 n100=404 +20:24:26 hp=404 n100=404 +20:24:27 hp=404 n100=404 +20:24:28 hp=404 n100=404 +20:24:29 hp=404 n100=404 +20:24:30 hp=404 n100=404 +20:24:31 hp=404 n100=404 +20:24:31 hp=404 n100=404 +20:24:32 hp=404 n100=404 +20:24:33 hp=404 n100=404 +20:24:34 hp=404 n100=404 +20:24:35 hp=404 n100=404 +20:24:36 hp=404 n100=404 +20:24:37 hp=404 n100=404 +20:24:37 hp=404 n100=404 +20:24:38 hp=404 n100=404 +20:24:39 hp=404 n100=404 +20:24:40 hp=404 n100=404 +20:24:41 hp=404 n100=404 +20:24:42 hp=404 n100=404 +20:24:43 hp=404 n100=404 +20:24:43 hp=404 n100=404 +20:24:44 hp=404 n100=404 +20:24:45 hp=404 n100=404 +20:24:46 hp=404 n100=404 +20:24:47 hp=404 n100=404 +20:24:48 hp=404 n100=404 +20:24:49 hp=404 n100=404 +20:24:49 hp=404 n100=404 +20:24:50 hp=404 n100=404 +20:24:51 hp=404 n100=404 +20:24:52 hp=404 n100=404 +20:24:53 hp=404 n100=404 +20:24:54 hp=404 n100=404 +20:24:54 hp=404 n100=404 +20:24:55 hp=404 n100=404 +20:24:56 hp=404 n100=404 +20:24:57 hp=404 n100=404 +20:24:58 hp=404 n100=404 +20:24:59 hp=404 n100=404 +20:24:59 hp=404 n100=404 +20:25:00 hp=404 n100=404 +20:25:01 hp=404 n100=404 +20:25:02 hp=404 n100=404 +20:25:03 hp=404 n100=404 +20:25:04 hp=404 n100=404 +20:25:05 hp=404 n100=404 +20:25:06 hp=404 n100=404 +20:25:06 hp=404 n100=404 +20:25:07 hp=404 n100=404 +20:25:08 hp=404 n100=404 +20:25:09 hp=404 n100=404 +20:25:10 hp=404 n100=404 +20:25:11 hp=404 n100=404 +20:25:11 hp=404 n100=404 +20:25:12 hp=404 n100=404 +20:25:13 hp=404 n100=404 +20:25:14 hp=404 n100=404 +20:25:15 hp=404 n100=404 +20:25:16 hp=404 n100=404 +20:25:17 hp=404 n100=404 +20:25:17 hp=404 n100=404 +20:25:18 hp=404 n100=404 +20:25:19 hp=404 n100=404 +20:25:20 hp=404 n100=404 +20:25:21 hp=404 n100=404 +20:25:22 hp=404 n100=404 +20:25:22 hp=404 n100=404 +20:25:23 hp=404 n100=404 +20:25:24 hp=404 n100=404 +20:25:25 hp=404 n100=404 +20:25:26 hp=404 n100=404 +20:25:27 hp=404 n100=404 +20:25:27 hp=404 n100=404 +20:25:28 hp=404 n100=404 +20:25:29 hp=404 n100=404 +20:25:30 hp=404 n100=404 +20:25:31 hp=404 n100=404 +20:25:32 hp=404 n100=404 +20:25:32 hp=404 n100=404 +20:25:33 hp=404 n100=404 +20:25:34 hp=404 n100=404 +20:25:35 hp=404 n100=404 +20:25:36 hp=404 n100=404 +20:25:37 hp=404 n100=404 +20:25:37 hp=404 n100=404 +20:25:38 hp=404 n100=404 +20:25:39 hp=404 n100=404 +20:25:40 hp=404 n100=404 +20:25:41 hp=404 n100=404 +20:25:42 hp=404 n100=404 +20:25:42 hp=404 n100=404 +20:25:43 hp=404 n100=404 +20:25:44 hp=404 n100=404 +20:25:45 hp=404 n100=404 +20:25:46 hp=404 n100=404 +20:25:47 hp=404 n100=404 +20:25:48 hp=404 n100=404 +20:25:48 hp=404 n100=404 +20:25:49 hp=404 n100=404 +20:25:50 hp=404 n100=404 +20:25:51 hp=404 n100=404 +20:25:52 hp=404 n100=404 +20:25:53 hp=404 n100=404 +20:25:53 hp=404 n100=404 +20:25:54 hp=404 n100=404 +20:25:55 hp=404 n100=404 +20:25:56 hp=404 n100=404 +20:25:57 hp=404 n100=404 +20:25:58 hp=404 n100=404 +20:25:58 hp=404 n100=404 +20:25:59 hp=404 n100=404 diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-https-only.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-https-only.txt new file mode 100644 index 00000000..dcd31fd2 --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-https-only.txt @@ -0,0 +1,34 @@ +control NEGATIVE (a stub answering 200 over plain http): convicted, as it must (200 -) +== tester-1 (enkicsifelhom.hu): 6 public name(s) + OK control POSITIVE http://felhom.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://felhom.enkicsifelhom.hu/r1033-check?q=1 + OK http://files.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://files.enkicsifelhom.hu/r1033-check?q=1 + OK http://no-such-name-r1033.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://no-such-name-r1033.enkicsifelhom.hu/r1033-check?q=1 + OK http://paperless.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://paperless.enkicsifelhom.hu/r1033-check?q=1 + OK http://paste.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://paste.enkicsifelhom.hu/r1033-check?q=1 + OK http://wiki.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://wiki.enkicsifelhom.hu/r1033-check?q=1 +== demo-hp (enkisfelhom.hu): 15 public name(s) + OK http://arcade.enkisfelhom.hu/r1033-check?q=1 -> 301 https://arcade.enkisfelhom.hu/r1033-check?q=1 + OK http://books.enkisfelhom.hu/r1033-check?q=1 -> 301 https://books.enkisfelhom.hu/r1033-check?q=1 + OK http://docs.enkisfelhom.hu/r1033-check?q=1 -> 301 https://docs.enkisfelhom.hu/r1033-check?q=1 + OK http://felhom.enkisfelhom.hu/r1033-check?q=1 -> 301 https://felhom.enkisfelhom.hu/r1033-check?q=1 + OK http://files.enkisfelhom.hu/r1033-check?q=1 -> 301 https://files.enkisfelhom.hu/r1033-check?q=1 + OK http://gist.enkisfelhom.hu/r1033-check?q=1 -> 301 https://gist.enkisfelhom.hu/r1033-check?q=1 + OK http://ha.enkisfelhom.hu/r1033-check?q=1 -> 301 https://ha.enkisfelhom.hu/r1033-check?q=1 + OK http://no-such-name-r1033.enkisfelhom.hu/r1033-check?q=1 -> 301 https://no-such-name-r1033.enkisfelhom.hu/r1033-check?q=1 + OK http://papir.enkisfelhom.hu/r1033-check?q=1 -> 301 https://papir.enkisfelhom.hu/r1033-check?q=1 + OK http://paste.enkisfelhom.hu/r1033-check?q=1 -> 301 https://paste.enkisfelhom.hu/r1033-check?q=1 + OK http://pdf.enkisfelhom.hu/r1033-check?q=1 -> 301 https://pdf.enkisfelhom.hu/r1033-check?q=1 + OK http://plex.enkisfelhom.hu/r1033-check?q=1 -> 301 https://plex.enkisfelhom.hu/r1033-check?q=1 + OK http://time.enkisfelhom.hu/r1033-check?q=1 -> 301 https://time.enkisfelhom.hu/r1033-check?q=1 + OK http://travel.enkisfelhom.hu/r1033-check?q=1 -> 301 https://travel.enkisfelhom.hu/r1033-check?q=1 + OK http://wiki.enkisfelhom.hu/r1033-check?q=1 -> 301 https://wiki.enkisfelhom.hu/r1033-check?q=1 +== demo-felhom (demo-felhom.eu): 8 public name(s) + OK http://felhom.demo-felhom.eu/r1033-check?q=1 -> 301 https://felhom.demo-felhom.eu/r1033-check?q=1 + OK http://files.demo-felhom.eu/r1033-check?q=1 -> 301 https://files.demo-felhom.eu/r1033-check?q=1 + OK http://gist.demo-felhom.eu/r1033-check?q=1 -> 301 https://gist.demo-felhom.eu/r1033-check?q=1 + OK http://no-such-name-r1033.demo-felhom.eu/r1033-check?q=1 -> 301 https://no-such-name-r1033.demo-felhom.eu/r1033-check?q=1 + OK http://prowlarr.demo-felhom.eu/r1033-check?q=1 -> 301 https://prowlarr.demo-felhom.eu/r1033-check?q=1 + OK http://radarr.demo-felhom.eu/r1033-check?q=1 -> 301 https://radarr.demo-felhom.eu/r1033-check?q=1 + OK http://sonarr.demo-felhom.eu/r1033-check?q=1 -> 301 https://sonarr.demo-felhom.eu/r1033-check?q=1 + OK http://torrent.demo-felhom.eu/r1033-check?q=1 -> 301 https://torrent.demo-felhom.eu/r1033-check?q=1 +== every public name redirects http -> https diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hub-hosts-after.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hub-hosts-after.txt new file mode 100644 index 00000000..9d6761eb --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-hub-hosts-after.txt @@ -0,0 +1,5 @@ +Host | Status | Cloudflared +Tester4-b5dbbd | ONLINE | unknown (no running customer guest) +demo-felhom-8363b5 | ONLINE | running (connected) +demo-hp-bb76ea | ONLINE | running (connected) +tester-1-d70be4 | ONLINE | running (connected) diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-box.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-box.txt new file mode 100644 index 00000000..76ddba04 --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-box.txt @@ -0,0 +1,14 @@ +2026-10-26T20:05:25Z INF Version 2026.10.3 (Checksum 919cd4640a5984b57ed420f1dd61e4155ee60abb52ac5fe2adb5f8dc71d0c2e5) +2026-10-26T20:05:25Z INF GOOS: linux, GOVersion: go1.27.3, GoArch: amd64 +2026-10-26T20:05:25Z INF Registered tunnel connection connIndex=0 connection=3cc5adb1-aea4-4d4f-8f8e-d63fefd414b2 event=0 ip=198.41.192.37 location=bud01 protocol=quic +2026-10-26T20:05:25Z INF Updated to new configuration config="{\"ingress\":[{\"hostname\":\"*.enkicsifelhom.hu\", \"originRequest\":{\"noTLSVerify\":true}, \"service\":\"https://traefik\"}, {\"service\":\"http_status:404\"}], \"warp-routing\":{\"enabled\":false}}" version=2 +2026-10-26T20:05:25Z INF Registered tunnel connection connIndex=1 connection=27f1251e-375d-4774-a0b9-54d8bfd1641a event=0 ip=198.41.200.33 location=vie05 protocol=quic +2026-10-26T20:05:27Z INF Registered tunnel connection connIndex=2 connection=be88ef22-3c33-4da0-ab61-cb14ec33e5ef event=0 ip=198.41.192.227 location=bud01 protocol=quic +2026-10-26T20:05:28Z INF Registered tunnel connection connIndex=3 connection=4e5fa7a2-4c94-4c0e-93d0-395fb2b0957d event=0 ip=198.41.200.63 location=vie06 protocol=quic +cloudflared version 2026.10.3 (built 2026-10-21-13:24 UTC) +2026/10/26 20:05:19 [INFO] [selfupdate] Post-update startup: update successful (0.345.0 → 0.345.1) +2026/10/26 20:05:19 [INFO] Self-update enabled (check every 6h, auto-update: false, auto-update time: 04:30) +2026/10/26 20:05:19 [INFO] [scheduler] Registered periodic job: selfupdate-check (every 6h0m0s) +2026/10/26 20:05:19 [INFO] [offsite-apply] settle-gate: awaiting floor knowledge (first report ACK) before offsite apply +2026/10/26 20:05:20 [INFO] [infra] cloudflared compose changed (tunnel network true) — recreating cloudflared (the tunnel reconnects in seconds) +2026/10/26 20:05:29 [INFO] [offsite-apply] settle-gate: GO — at/above floor 0.345.1 (we are 0.345.1), no managed update running diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-floor.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-floor.txt new file mode 100644 index 00000000..dab5b7e1 --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-floor.txt @@ -0,0 +1,3 @@ +2026-10-26T20:05:08Z +HTTP/1.1 303 See Other +Location: /customers/tester-1?flash=floor_set diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-probe.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-probe.txt new file mode 100644 index 00000000..3bca9aa6 --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-probe.txt @@ -0,0 +1,1269 @@ +20:05:17 302 +20:05:18 502 +20:05:20 302 +20:05:21 302 +20:05:22 302 +20:05:24 302 +20:05:25 530 +20:05:26 302 +20:05:27 302 +20:05:29 302 +20:05:30 302 +20:05:31 302 +20:05:32 302 +20:05:33 302 +20:05:35 302 +20:05:36 302 +20:05:37 302 +20:05:38 302 +20:05:39 302 +20:05:40 302 +20:05:42 302 +20:05:43 302 +20:05:46 302 +20:05:47 302 +20:05:49 302 +20:05:50 302 +20:05:51 302 +20:05:52 302 +20:05:53 302 +20:05:54 302 +20:05:56 302 +20:05:57 302 +20:05:58 302 +20:05:59 302 +20:06:00 302 +20:06:02 302 +20:06:03 302 +20:06:04 302 +20:06:05 302 +20:06:06 302 +20:06:07 302 +20:06:09 302 +20:06:10 302 +20:06:11 302 +20:06:12 302 +20:06:13 302 +20:06:14 302 +20:06:16 302 +20:06:17 302 +20:06:18 302 +20:06:19 302 +20:06:21 302 +20:06:22 302 +20:06:23 302 +20:06:24 302 +20:06:25 302 +20:06:26 302 +20:06:28 302 +20:06:29 302 +20:06:30 302 +20:06:31 302 +20:06:32 302 +20:06:33 302 +20:06:35 302 +20:06:36 302 +20:06:37 302 +20:06:38 302 +20:06:39 302 +20:06:41 302 +20:06:42 302 +20:06:43 302 +20:06:44 302 +20:06:45 302 +20:06:46 302 +20:06:48 302 +20:06:49 302 +20:06:50 302 +20:06:51 302 +20:06:52 302 +20:06:53 302 +20:06:55 302 +20:06:56 302 +20:06:57 302 +20:06:58 302 +20:06:59 302 +20:07:01 302 +20:07:02 302 +20:07:03 302 +20:07:04 302 +20:07:05 302 +20:07:06 302 +20:07:08 302 +20:07:09 302 +20:07:10 302 +20:07:11 302 +20:07:12 302 +20:07:14 302 +20:07:15 302 +20:07:16 302 +20:07:17 302 +20:07:18 302 +20:07:19 302 +20:07:20 302 +20:07:22 302 +20:07:23 302 +20:07:24 302 +20:07:25 302 +20:07:26 302 +20:07:28 302 +20:07:29 302 +20:07:30 302 +20:07:31 302 +20:07:32 302 +20:07:34 302 +20:07:35 302 +20:07:36 302 +20:07:37 302 +20:07:38 302 +20:07:40 302 +20:07:41 302 +20:07:42 302 +20:07:43 302 +20:07:44 302 +20:07:45 302 +20:07:47 302 +20:07:48 302 +20:07:49 302 +20:07:50 302 +20:07:51 302 +20:07:53 302 +20:07:54 302 +20:07:55 302 +20:07:56 302 +20:07:57 302 +20:07:58 302 +20:08:00 302 +20:08:01 302 +20:08:02 302 +20:08:03 302 +20:08:04 302 +20:08:05 302 +20:08:07 302 +20:08:08 302 +20:08:09 302 +20:08:10 302 +20:08:11 302 +20:08:12 302 +20:08:14 302 +20:08:15 302 +20:08:16 302 +20:08:17 302 +20:08:18 302 +20:08:20 302 +20:08:21 302 +20:08:22 302 +20:08:23 302 +20:08:24 302 +20:08:25 302 +20:08:27 302 +20:08:28 302 +20:08:29 302 +20:08:30 302 +20:08:31 302 +20:08:32 302 +20:08:34 302 +20:08:35 302 +20:08:36 302 +20:08:37 302 +20:08:38 302 +20:08:39 302 +20:08:41 302 +20:08:42 302 +20:08:43 302 +20:08:44 302 +20:08:45 302 +20:08:47 302 +20:08:48 302 +20:08:49 302 +20:08:50 302 +20:08:51 302 +20:08:52 302 +20:08:54 302 +20:08:55 302 +20:08:56 302 +20:08:57 302 +20:08:58 302 +20:09:00 302 +20:09:01 302 +20:09:02 302 +20:09:03 302 +20:09:04 302 +20:09:05 302 +20:09:07 302 +20:09:08 302 +20:09:09 302 +20:09:10 302 +20:09:11 302 +20:09:12 302 +20:09:14 302 +20:09:15 302 +20:09:16 302 +20:09:17 302 +20:09:18 302 +20:09:19 302 +20:09:21 302 +20:09:22 302 +20:09:23 302 +20:09:24 302 +20:09:25 302 +20:09:26 302 +20:09:28 302 +20:09:29 302 +20:09:30 302 +20:09:31 302 +20:09:32 302 +20:09:33 302 +20:09:35 302 +20:09:36 302 +20:09:37 302 +20:09:38 302 +20:09:39 302 +20:09:41 302 +20:09:42 302 +20:09:43 302 +20:09:44 302 +20:09:45 302 +20:09:46 302 +20:09:48 302 +20:09:49 302 +20:09:50 302 +20:09:51 302 +20:09:52 302 +20:09:53 302 +20:09:55 302 +20:09:56 302 +20:09:57 302 +20:09:58 302 +20:09:59 302 +20:10:01 302 +20:10:02 302 +20:10:03 302 +20:10:04 302 +20:10:05 302 +20:10:06 302 +20:10:08 302 +20:10:09 302 +20:10:10 302 +20:10:11 302 +20:10:12 302 +20:10:14 302 +20:10:15 302 +20:10:16 302 +20:10:17 302 +20:10:18 302 +20:10:20 302 +20:10:21 302 +20:10:22 302 +20:10:23 302 +20:10:24 302 +20:10:25 302 +20:10:27 302 +20:10:28 302 +20:10:29 302 +20:10:30 302 +20:10:32 302 +20:10:33 302 +20:10:34 302 +20:10:35 302 +20:10:36 302 +20:10:37 302 +20:10:39 302 +20:10:40 302 +20:10:41 302 +20:10:42 302 +20:10:43 302 +20:10:45 302 +20:10:46 302 +20:10:47 302 +20:10:48 302 +20:10:49 302 +20:10:50 302 +20:10:52 302 +20:10:53 302 +20:10:54 302 +20:10:55 302 +20:10:56 302 +20:10:58 302 +20:10:59 302 +20:11:00 302 +20:11:01 302 +20:11:02 302 +20:11:04 302 +20:11:05 302 +20:11:06 302 +20:11:07 302 +20:11:08 302 +20:11:09 302 +20:11:11 302 +20:11:12 302 +20:11:13 302 +20:11:14 302 +20:11:15 302 +20:11:16 302 +20:11:18 302 +20:11:19 302 +20:11:20 302 +20:11:21 302 +20:11:22 302 +20:11:24 302 +20:11:25 302 +20:11:26 302 +20:11:27 302 +20:11:28 302 +20:11:29 302 +20:11:31 302 +20:11:32 302 +20:11:33 302 +20:11:34 302 +20:11:35 302 +20:11:37 302 +20:11:38 302 +20:11:39 302 +20:11:40 302 +20:11:41 302 +20:11:42 302 +20:11:44 302 +20:11:45 302 +20:11:46 302 +20:11:47 302 +20:11:48 302 +20:11:50 302 +20:11:51 302 +20:11:52 302 +20:11:53 302 +20:11:54 302 +20:11:55 302 +20:11:57 302 +20:11:58 302 +20:11:59 302 +20:12:00 302 +20:12:01 302 +20:12:02 302 +20:12:04 302 +20:12:05 302 +20:12:06 302 +20:12:07 302 +20:12:08 302 +20:12:10 302 +20:12:11 302 +20:12:12 302 +20:12:13 302 +20:12:14 302 +20:12:15 302 +20:12:17 302 +20:12:18 302 +20:12:19 302 +20:12:20 302 +20:12:21 302 +20:12:23 302 +20:12:24 302 +20:12:25 302 +20:12:26 302 +20:12:27 302 +20:12:28 302 +20:12:30 302 +20:12:31 302 +20:12:32 302 +20:12:33 302 +20:12:34 302 +20:12:36 302 +20:12:37 302 +20:12:38 302 +20:12:39 302 +20:12:40 302 +20:12:41 302 +20:12:43 302 +20:12:44 302 +20:12:45 302 +20:12:46 302 +20:12:47 302 +20:12:49 302 +20:12:50 302 +20:12:51 302 +20:12:52 302 +20:12:53 302 +20:12:54 302 +20:12:56 302 +20:12:57 302 +20:12:58 302 +20:12:59 302 +20:13:00 302 +20:13:01 302 +20:13:03 302 +20:13:04 302 +20:13:05 302 +20:13:06 302 +20:13:07 302 +20:13:08 302 +20:13:10 302 +20:13:11 302 +20:13:12 302 +20:13:13 302 +20:13:14 302 +20:13:15 302 +20:13:17 302 +20:13:18 302 +20:13:19 302 +20:13:20 302 +20:13:21 302 +20:13:22 302 +20:13:24 302 +20:13:25 302 +20:13:26 302 +20:13:27 302 +20:13:28 302 +20:13:30 302 +20:13:31 302 +20:13:32 302 +20:13:33 302 +20:13:34 302 +20:13:35 302 +20:13:37 000 +20:13:42 302 +20:13:43 302 +20:13:44 302 +20:13:45 302 +20:13:46 302 +20:13:48 302 +20:13:49 302 +20:13:50 302 +20:13:51 302 +20:13:52 302 +20:13:53 302 +20:13:55 302 +20:13:56 302 +20:13:57 302 +20:13:58 302 +20:13:59 302 +20:14:01 302 +20:14:02 302 +20:14:03 302 +20:14:04 302 +20:14:05 302 +20:14:07 302 +20:14:08 302 +20:14:09 302 +20:14:10 302 +20:14:12 302 +20:14:13 302 +20:14:14 302 +20:14:15 302 +20:14:16 302 +20:14:18 302 +20:14:19 302 +20:14:20 302 +20:14:21 302 +20:14:22 302 +20:14:24 302 +20:14:25 302 +20:14:26 302 +20:14:27 302 +20:14:28 302 +20:14:30 302 +20:14:31 302 +20:14:32 302 +20:14:33 302 +20:14:35 302 +20:14:36 302 +20:14:37 302 +20:14:38 302 +20:14:39 302 +20:14:40 302 +20:14:42 302 +20:14:43 302 +20:14:44 302 +20:14:45 302 +20:14:46 302 +20:14:47 302 +20:14:48 302 +20:14:50 302 +20:14:51 302 +20:14:52 302 +20:14:53 302 +20:14:55 302 +20:14:56 302 +20:14:57 302 +20:14:58 302 +20:14:59 302 +20:15:00 302 +20:15:01 302 +20:15:03 302 +20:15:04 302 +20:15:05 302 +20:15:06 302 +20:15:07 302 +20:15:08 302 +20:15:10 302 +20:15:11 302 +20:15:12 302 +20:15:13 302 +20:15:14 302 +20:15:15 302 +20:15:17 302 +20:15:18 302 +20:15:19 302 +20:15:20 302 +20:15:21 302 +20:15:22 302 +20:15:24 302 +20:15:25 302 +20:15:26 302 +20:15:27 302 +20:15:28 302 +20:15:30 302 +20:15:31 302 +20:15:32 302 +20:15:33 302 +20:15:34 302 +20:15:35 302 +20:15:37 302 +20:15:38 302 +20:15:39 302 +20:15:40 302 +20:15:41 302 +20:15:42 302 +20:15:44 302 +20:15:45 302 +20:15:46 302 +20:15:47 302 +20:15:48 302 +20:15:49 302 +20:15:51 302 +20:15:52 302 +20:15:53 302 +20:15:54 302 +20:15:55 302 +20:15:56 302 +20:15:58 302 +20:15:59 302 +20:16:00 302 +20:16:01 302 +20:16:02 302 +20:16:03 302 +20:16:05 302 +20:16:06 302 +20:16:07 302 +20:16:08 302 +20:16:09 302 +20:16:11 302 +20:16:12 302 +20:16:13 302 +20:16:14 302 +20:16:15 302 +20:16:16 302 +20:16:18 302 +20:16:19 302 +20:16:20 302 +20:16:21 302 +20:16:22 302 +20:16:24 302 +20:16:25 302 +20:16:26 302 +20:16:27 302 +20:16:28 302 +20:16:29 302 +20:16:32 302 +20:16:33 302 +20:16:34 302 +20:16:35 302 +20:16:36 302 +20:16:37 302 +20:16:39 302 +20:16:40 302 +20:16:41 302 +20:16:42 302 +20:16:43 302 +20:16:44 302 +20:16:46 302 +20:16:47 302 +20:16:48 302 +20:16:49 302 +20:16:50 302 +20:16:51 302 +20:16:53 302 +20:16:54 302 +20:16:55 302 +20:16:56 302 +20:16:57 302 +20:16:59 302 +20:17:00 302 +20:17:01 302 +20:17:02 302 +20:17:04 302 +20:17:05 302 +20:17:06 302 +20:17:07 302 +20:17:09 302 +20:17:10 302 +20:17:11 302 +20:17:12 302 +20:17:13 302 +20:17:14 302 +20:17:16 302 +20:17:17 302 +20:17:18 302 +20:17:19 302 +20:17:20 302 +20:17:21 302 +20:17:23 302 +20:17:24 302 +20:17:25 302 +20:17:26 302 +20:17:27 302 +20:17:29 302 +20:17:30 302 +20:17:31 302 +20:17:32 302 +20:17:33 302 +20:17:34 302 +20:17:36 302 +20:17:37 302 +20:17:38 302 +20:17:39 302 +20:17:40 302 +20:17:41 302 +20:17:43 302 +20:17:44 302 +20:17:45 302 +20:17:46 302 +20:17:47 302 +20:17:48 302 +20:17:50 302 +20:17:51 302 +20:17:52 302 +20:17:53 302 +20:17:54 302 +20:17:56 302 +20:17:57 302 +20:17:58 302 +20:17:59 302 +20:18:00 302 +20:18:01 302 +20:18:03 302 +20:18:04 302 +20:18:05 302 +20:18:06 302 +20:18:07 302 +20:18:08 302 +20:18:10 302 +20:18:11 302 +20:18:12 302 +20:18:13 302 +20:18:14 302 +20:18:15 302 +20:18:17 302 +20:18:18 302 +20:18:19 302 +20:18:20 302 +20:18:21 302 +20:18:22 302 +20:18:24 302 +20:18:25 302 +20:18:26 302 +20:18:27 302 +20:18:28 302 +20:18:30 302 +20:18:31 302 +20:18:32 302 +20:18:33 302 +20:18:34 302 +20:18:35 302 +20:18:37 302 +20:18:38 302 +20:18:39 302 +20:18:40 302 +20:18:41 302 +20:18:42 302 +20:18:44 302 +20:18:45 302 +20:18:46 302 +20:18:47 302 +20:18:48 302 +20:18:49 302 +20:18:51 302 +20:18:52 302 +20:18:53 302 +20:18:54 302 +20:18:55 302 +20:18:56 302 +20:18:58 302 +20:18:59 302 +20:19:00 302 +20:19:01 302 +20:19:02 302 +20:19:03 302 +20:19:05 302 +20:19:06 302 +20:19:07 302 +20:19:08 302 +20:19:09 302 +20:19:11 302 +20:19:12 302 +20:19:13 302 +20:19:14 302 +20:19:15 302 +20:19:16 302 +20:19:18 302 +20:19:19 302 +20:19:20 302 +20:19:21 302 +20:19:22 302 +20:19:23 302 +20:19:25 302 +20:19:26 302 +20:19:27 302 +20:19:28 302 +20:19:29 302 +20:19:31 302 +20:19:32 302 +20:19:33 302 +20:19:34 302 +20:19:35 302 +20:19:36 302 +20:19:37 302 +20:19:39 302 +20:19:40 302 +20:19:41 302 +20:19:42 302 +20:19:43 302 +20:19:44 302 +20:19:46 302 +20:19:47 302 +20:19:48 302 +20:19:49 302 +20:19:50 302 +20:19:52 302 +20:19:53 302 +20:19:54 302 +20:19:55 302 +20:19:56 302 +20:19:57 302 +20:19:58 302 +20:20:00 302 +20:20:01 302 +20:20:02 302 +20:20:03 302 +20:20:04 302 +20:20:06 302 +20:20:07 302 +20:20:08 302 +20:20:09 302 +20:20:10 302 +20:20:11 302 +20:20:13 302 +20:20:14 302 +20:20:15 302 +20:20:16 302 +20:20:17 302 +20:20:18 302 +20:20:20 302 +20:20:21 302 +20:20:22 302 +20:20:23 302 +20:20:24 302 +20:20:26 302 +20:20:27 302 +20:20:28 302 +20:20:29 302 +20:20:30 302 +20:20:31 302 +20:20:33 302 +20:20:34 302 +20:20:35 302 +20:20:36 302 +20:20:37 302 +20:20:38 302 +20:20:40 302 +20:20:41 302 +20:20:42 302 +20:20:43 302 +20:20:44 302 +20:20:45 302 +20:20:47 302 +20:20:48 302 +20:20:49 302 +20:20:50 302 +20:20:51 302 +20:20:53 302 +20:20:54 302 +20:20:55 302 +20:20:56 302 +20:20:57 302 +20:20:58 302 +20:21:00 302 +20:21:01 302 +20:21:02 302 +20:21:03 302 +20:21:04 302 +20:21:06 302 +20:21:07 302 +20:21:08 302 +20:21:09 302 +20:21:10 302 +20:21:12 302 +20:21:13 302 +20:21:14 302 +20:21:15 302 +20:21:16 302 +20:21:17 302 +20:21:19 302 +20:21:20 302 +20:21:21 302 +20:21:22 302 +20:21:23 302 +20:21:24 302 +20:21:26 302 +20:21:27 302 +20:21:28 302 +20:21:29 302 +20:21:30 302 +20:21:31 302 +20:21:33 302 +20:21:34 302 +20:21:35 302 +20:21:36 302 +20:21:37 302 +20:21:38 302 +20:21:40 302 +20:21:41 302 +20:21:42 302 +20:21:43 302 +20:21:44 302 +20:21:45 302 +20:21:47 302 +20:21:48 302 +20:21:49 302 +20:21:50 302 +20:21:51 302 +20:21:52 302 +20:21:54 302 +20:21:55 302 +20:21:56 302 +20:21:57 302 +20:21:58 302 +20:21:59 302 +20:22:01 302 +20:22:02 302 +20:22:03 302 +20:22:04 302 +20:22:05 302 +20:22:06 302 +20:22:08 302 +20:22:09 302 +20:22:10 302 +20:22:11 302 +20:22:12 302 +20:22:13 302 +20:22:15 302 +20:22:16 302 +20:22:17 302 +20:22:18 302 +20:22:19 302 +20:22:21 302 +20:22:22 302 +20:22:23 302 +20:22:24 302 +20:22:25 302 +20:22:26 302 +20:22:28 302 +20:22:29 302 +20:22:30 302 +20:22:31 302 +20:22:32 302 +20:22:33 302 +20:22:35 302 +20:22:36 302 +20:22:37 302 +20:22:38 302 +20:22:39 302 +20:22:40 302 +20:22:42 302 +20:22:43 302 +20:22:44 302 +20:22:45 302 +20:22:46 302 +20:22:47 302 +20:22:49 302 +20:22:50 302 +20:22:51 302 +20:22:52 302 +20:22:53 302 +20:22:55 302 +20:22:56 302 +20:22:57 302 +20:22:58 302 +20:22:59 302 +20:23:00 302 +20:23:01 302 +20:23:03 302 +20:23:04 302 +20:23:05 302 +20:23:06 302 +20:23:07 302 +20:23:08 302 +20:23:10 302 +20:23:11 302 +20:23:12 302 +20:23:13 302 +20:23:14 302 +20:23:15 302 +20:23:17 302 +20:23:18 302 +20:23:19 302 +20:23:20 302 +20:23:21 302 +20:23:23 302 +20:23:24 302 +20:23:25 302 +20:23:26 302 +20:23:27 302 +20:23:28 302 +20:23:30 302 +20:23:31 302 +20:23:32 302 +20:23:33 302 +20:23:34 302 +20:23:35 302 +20:23:37 302 +20:23:38 302 +20:23:39 302 +20:23:40 302 +20:23:41 302 +20:23:42 302 +20:23:44 302 +20:23:45 302 +20:23:46 302 +20:23:47 302 +20:23:48 302 +20:23:49 302 +20:23:51 302 +20:23:52 302 +20:23:53 302 +20:23:54 302 +20:23:55 302 +20:23:56 302 +20:23:58 302 +20:23:59 302 +20:24:00 302 +20:24:01 302 +20:24:02 302 +20:24:04 302 +20:24:05 302 +20:24:06 302 +20:24:07 302 +20:24:08 302 +20:24:09 302 +20:24:11 302 +20:24:12 302 +20:24:13 302 +20:24:14 302 +20:24:15 302 +20:24:16 302 +20:24:18 302 +20:24:19 302 +20:24:20 302 +20:24:21 302 +20:24:22 302 +20:24:23 302 +20:24:25 302 +20:24:26 302 +20:24:27 302 +20:24:28 302 +20:24:29 302 +20:24:30 302 +20:24:32 302 +20:24:33 302 +20:24:34 302 +20:24:35 302 +20:24:36 302 +20:24:37 302 +20:24:39 302 +20:24:40 302 +20:24:41 302 +20:24:42 302 +20:24:43 302 +20:24:44 302 +20:24:46 302 +20:24:47 302 +20:24:48 302 +20:24:49 302 +20:24:50 302 +20:24:51 302 +20:24:53 302 +20:24:54 302 +20:24:55 302 +20:24:56 302 +20:24:57 302 +20:24:58 302 +20:25:00 302 +20:25:01 302 +20:25:02 302 +20:25:03 302 +20:25:04 302 +20:25:05 302 +20:25:07 302 +20:25:08 302 +20:25:09 302 +20:25:10 302 +20:25:11 302 +20:25:12 302 +20:25:14 302 +20:25:15 302 +20:25:16 302 +20:25:17 302 +20:25:18 302 +20:25:20 302 +20:25:21 302 +20:25:22 302 +20:25:23 302 +20:25:24 302 +20:25:25 302 +20:25:26 302 +20:25:28 302 +20:25:29 302 +20:25:30 302 +20:25:31 302 +20:25:32 302 +20:25:33 302 +20:25:35 302 +20:25:36 302 +20:25:37 302 +20:25:38 302 +20:25:39 302 +20:25:41 302 +20:25:42 302 +20:25:43 302 +20:25:44 302 +20:25:45 302 +20:25:46 302 +20:25:47 302 +20:25:49 302 +20:25:50 302 +20:25:51 302 +20:25:52 302 +20:25:53 302 +20:25:55 302 +20:25:56 302 +20:25:57 302 +20:25:58 302 +20:25:59 302 +20:26:00 302 +20:26:02 302 +20:26:03 302 +20:26:04 302 +20:26:05 302 +20:26:06 302 +20:26:07 302 +20:26:09 302 +20:26:10 302 +20:26:11 302 +20:26:12 302 +20:26:13 302 +20:26:14 302 +20:26:16 302 +20:26:17 302 +20:26:18 302 +20:26:19 302 +20:26:20 302 +20:26:22 302 +20:26:23 302 +20:26:24 302 +20:26:25 302 +20:26:26 302 +20:26:27 302 +20:26:29 302 +20:26:30 302 +20:26:31 302 +20:26:32 302 +20:26:33 302 +20:26:34 302 +20:26:36 302 +20:26:37 302 +20:26:38 302 +20:26:39 302 +20:26:40 302 +20:26:42 302 +20:26:43 302 +20:26:44 302 +20:26:45 302 +20:26:46 302 +20:26:47 302 +20:26:49 302 +20:26:50 302 +20:26:51 302 +20:26:52 302 +20:26:53 302 +20:26:54 302 +20:26:56 302 +20:26:57 302 +20:26:58 302 +20:26:59 302 +20:27:00 302 +20:27:01 302 +20:27:03 302 +20:27:04 302 +20:27:05 302 +20:27:06 302 +20:27:07 302 +20:27:08 302 +20:27:10 302 +20:27:11 302 +20:27:12 302 +20:27:13 302 +20:27:14 302 +20:27:15 302 +20:27:17 302 +20:27:18 302 +20:27:19 302 +20:27:20 302 +20:27:21 302 +20:27:22 302 +20:27:24 302 +20:27:25 302 +20:27:26 302 +20:27:27 302 +20:27:28 302 +20:27:29 302 +20:27:31 302 +20:27:32 302 +20:27:33 302 +20:27:34 302 +20:27:35 302 +20:27:36 302 +20:27:38 302 +20:27:39 302 +20:27:40 302 +20:27:41 302 +20:27:42 302 +20:27:43 302 +20:27:45 302 +20:27:46 302 +20:27:47 302 +20:27:48 302 +20:27:49 302 +20:27:50 302 +20:27:52 302 +20:27:53 302 +20:27:54 302 +20:27:55 302 +20:27:56 302 +20:27:57 302 +20:27:59 302 +20:28:00 302 +20:28:01 302 +20:28:02 302 +20:28:03 302 +20:28:04 302 +20:28:06 302 +20:28:07 302 +20:28:08 302 +20:28:09 302 +20:28:10 302 +20:28:11 302 +20:28:12 302 +20:28:14 302 +20:28:15 302 +20:28:16 302 +20:28:17 302 +20:28:18 302 +20:28:19 302 +20:28:21 302 +20:28:22 302 +20:28:23 302 +20:28:24 302 +20:28:25 302 +20:28:26 302 +20:28:28 302 +20:28:29 302 +20:28:30 302 +20:28:31 302 +20:28:32 302 +20:28:33 302 +20:28:35 302 +20:28:36 302 +20:28:37 302 +20:28:38 302 +20:28:39 302 +20:28:40 302 +20:28:42 302 +20:28:43 302 +20:28:44 302 +20:28:45 302 +20:28:46 302 +20:28:47 302 +20:28:49 302 +20:28:50 302 +20:28:51 302 +20:28:52 302 +20:28:53 302 +20:28:54 302 +20:28:56 302 +20:28:57 302 +20:28:58 302 +20:28:59 302 +20:29:00 302 +20:29:01 302 +20:29:03 302 +20:29:04 302 +20:29:05 302 +20:29:06 302 +20:29:07 302 +20:29:08 302 +20:29:10 302 +20:29:11 302 +20:29:12 302 +20:29:13 302 +20:29:14 302 +20:29:15 302 +20:29:17 302 +20:29:18 302 +20:29:19 302 +20:29:20 302 +20:29:21 302 +20:29:22 302 +20:29:24 302 +20:29:25 302 +20:29:26 302 +20:29:27 302 +20:29:28 302 +20:29:29 302 +20:29:31 302 +20:29:32 302 +20:29:33 302 +20:29:34 302 +20:29:35 302 +20:29:36 302 +20:29:38 302 +20:29:39 302 +20:29:40 302 +20:29:41 302 +20:29:42 302 +20:29:43 302 +20:29:45 302 +20:29:46 302 +20:29:47 302 +20:29:48 302 +20:29:49 302 +20:29:51 302 +20:29:52 302 +20:29:53 302 +20:29:54 302 +20:29:55 302 +20:29:56 302 +20:29:58 302 +20:29:59 302 +20:30:00 302 +20:30:01 302 +20:30:02 302 +20:30:03 302 +20:30:05 302 +20:30:06 302 +20:30:07 302 +20:30:08 302 +20:30:09 302 +20:30:11 302 +20:30:12 302 +20:30:13 302 +20:30:14 302 +20:30:15 302 diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-tunnelprobe.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-tunnelprobe.txt new file mode 100644 index 00000000..7d396553 --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part5-tester1-tunnelprobe.txt @@ -0,0 +1,1274 @@ +20:05:30 404 +20:05:31 404 +20:05:32 404 +20:05:33 404 +20:05:34 404 +20:05:36 404 +20:05:37 404 +20:05:38 404 +20:05:39 404 +20:05:41 404 +20:05:42 404 +20:05:43 404 +20:05:44 404 +20:05:45 404 +20:05:46 404 +20:05:48 404 +20:05:49 404 +20:05:50 404 +20:05:51 404 +20:05:52 404 +20:05:54 404 +20:05:55 404 +20:05:56 404 +20:05:57 404 +20:05:58 404 +20:05:59 404 +20:06:01 404 +20:06:02 404 +20:06:03 404 +20:06:04 404 +20:06:05 404 +20:06:06 404 +20:06:08 404 +20:06:09 404 +20:06:10 404 +20:06:11 404 +20:06:12 404 +20:06:13 404 +20:06:15 404 +20:06:16 404 +20:06:17 404 +20:06:18 404 +20:06:19 404 +20:06:21 404 +20:06:22 404 +20:06:23 404 +20:06:24 404 +20:06:25 404 +20:06:27 404 +20:06:28 404 +20:06:29 404 +20:06:30 404 +20:06:31 404 +20:06:32 404 +20:06:34 404 +20:06:35 404 +20:06:36 404 +20:06:37 404 +20:06:38 404 +20:06:40 404 +20:06:41 404 +20:06:42 404 +20:06:43 404 +20:06:44 404 +20:06:45 404 +20:06:47 404 +20:06:48 404 +20:06:49 404 +20:06:50 404 +20:06:51 404 +20:06:52 404 +20:06:54 404 +20:06:55 404 +20:06:56 404 +20:06:57 404 +20:06:58 404 +20:06:59 404 +20:07:01 404 +20:07:02 404 +20:07:03 404 +20:07:04 404 +20:07:05 404 +20:07:07 404 +20:07:08 404 +20:07:09 404 +20:07:10 404 +20:07:11 404 +20:07:12 404 +20:07:14 404 +20:07:15 404 +20:07:16 404 +20:07:17 404 +20:07:18 404 +20:07:20 404 +20:07:21 404 +20:07:22 404 +20:07:23 404 +20:07:24 404 +20:07:25 404 +20:07:27 404 +20:07:28 404 +20:07:29 404 +20:07:30 404 +20:07:31 404 +20:07:32 404 +20:07:34 404 +20:07:35 404 +20:07:36 404 +20:07:37 404 +20:07:38 404 +20:07:39 404 +20:07:41 404 +20:07:42 404 +20:07:43 404 +20:07:44 404 +20:07:45 404 +20:07:47 404 +20:07:48 404 +20:07:49 404 +20:07:50 404 +20:07:51 404 +20:07:52 404 +20:07:54 404 +20:07:55 404 +20:07:56 404 +20:07:57 404 +20:07:58 404 +20:07:59 404 +20:08:01 404 +20:08:02 404 +20:08:03 404 +20:08:04 404 +20:08:05 404 +20:08:06 404 +20:08:08 404 +20:08:09 404 +20:08:10 404 +20:08:11 404 +20:08:12 404 +20:08:14 404 +20:08:15 404 +20:08:16 404 +20:08:17 404 +20:08:18 404 +20:08:19 404 +20:08:21 404 +20:08:22 404 +20:08:23 404 +20:08:24 404 +20:08:25 404 +20:08:26 404 +20:08:28 404 +20:08:29 404 +20:08:30 404 +20:08:31 404 +20:08:32 404 +20:08:33 404 +20:08:35 404 +20:08:36 404 +20:08:37 404 +20:08:39 404 +20:08:40 404 +20:08:41 404 +20:08:42 404 +20:08:43 404 +20:08:45 404 +20:08:46 404 +20:08:47 404 +20:08:48 404 +20:08:49 404 +20:08:50 404 +20:08:52 404 +20:08:53 404 +20:08:54 404 +20:08:55 404 +20:08:56 404 +20:08:57 404 +20:08:59 404 +20:09:00 404 +20:09:01 404 +20:09:02 404 +20:09:03 404 +20:09:05 404 +20:09:06 404 +20:09:07 404 +20:09:08 404 +20:09:09 404 +20:09:10 404 +20:09:12 404 +20:09:13 404 +20:09:14 404 +20:09:15 404 +20:09:16 404 +20:09:17 404 +20:09:19 404 +20:09:20 404 +20:09:21 404 +20:09:22 404 +20:09:23 404 +20:09:24 404 +20:09:26 404 +20:09:27 404 +20:09:28 404 +20:09:29 404 +20:09:30 404 +20:09:32 404 +20:09:33 404 +20:09:34 404 +20:09:35 404 +20:09:36 404 +20:09:37 404 +20:09:39 404 +20:09:40 404 +20:09:41 404 +20:09:42 404 +20:09:43 404 +20:09:44 404 +20:09:46 404 +20:09:47 404 +20:09:48 404 +20:09:49 404 +20:09:50 404 +20:09:52 404 +20:09:53 404 +20:09:54 404 +20:09:55 404 +20:09:56 404 +20:09:57 404 +20:09:59 404 +20:10:00 404 +20:10:01 404 +20:10:02 404 +20:10:03 404 +20:10:04 404 +20:10:06 404 +20:10:07 404 +20:10:08 404 +20:10:09 404 +20:10:10 404 +20:10:12 404 +20:10:13 404 +20:10:14 404 +20:10:15 404 +20:10:16 404 +20:10:17 404 +20:10:19 404 +20:10:20 404 +20:10:21 404 +20:10:22 404 +20:10:23 404 +20:10:24 404 +20:10:26 404 +20:10:27 404 +20:10:28 404 +20:10:29 404 +20:10:30 404 +20:10:32 404 +20:10:33 404 +20:10:34 404 +20:10:35 404 +20:10:36 404 +20:10:38 404 +20:10:39 404 +20:10:40 404 +20:10:41 404 +20:10:42 404 +20:10:44 404 +20:10:45 404 +20:10:46 404 +20:10:47 404 +20:10:48 404 +20:10:49 404 +20:10:51 404 +20:10:52 404 +20:10:53 404 +20:10:54 404 +20:10:55 404 +20:10:57 404 +20:10:58 404 +20:10:59 404 +20:11:00 404 +20:11:01 404 +20:11:02 404 +20:11:04 404 +20:11:05 404 +20:11:06 404 +20:11:07 404 +20:11:08 404 +20:11:09 404 +20:11:11 404 +20:11:12 404 +20:11:13 404 +20:11:14 404 +20:11:15 404 +20:11:16 404 +20:11:18 404 +20:11:19 404 +20:11:20 404 +20:11:21 404 +20:11:22 404 +20:11:23 404 +20:11:25 404 +20:11:26 404 +20:11:27 404 +20:11:28 404 +20:11:29 404 +20:11:31 404 +20:11:32 404 +20:11:33 404 +20:11:34 404 +20:11:35 404 +20:11:36 404 +20:11:38 404 +20:11:39 404 +20:11:40 404 +20:11:41 404 +20:11:42 404 +20:11:44 404 +20:11:45 404 +20:11:46 404 +20:11:47 404 +20:11:48 404 +20:11:49 404 +20:11:51 404 +20:11:52 404 +20:11:53 404 +20:11:54 404 +20:11:55 404 +20:11:57 404 +20:11:58 404 +20:11:59 404 +20:12:00 404 +20:12:01 404 +20:12:02 404 +20:12:04 404 +20:12:05 404 +20:12:06 404 +20:12:07 404 +20:12:08 404 +20:12:09 404 +20:12:11 404 +20:12:12 404 +20:12:13 404 +20:12:14 404 +20:12:15 404 +20:12:17 404 +20:12:18 404 +20:12:19 404 +20:12:20 404 +20:12:21 404 +20:12:22 404 +20:12:24 404 +20:12:25 404 +20:12:26 404 +20:12:27 404 +20:12:28 404 +20:12:29 404 +20:12:31 404 +20:12:32 404 +20:12:33 404 +20:12:34 404 +20:12:35 404 +20:12:37 404 +20:12:38 404 +20:12:39 404 +20:12:40 404 +20:12:41 404 +20:12:42 404 +20:12:44 404 +20:12:45 404 +20:12:46 404 +20:12:47 404 +20:12:48 404 +20:12:50 404 +20:12:51 404 +20:12:52 404 +20:12:53 404 +20:12:54 404 +20:12:55 404 +20:12:57 404 +20:12:58 404 +20:12:59 404 +20:13:00 404 +20:13:01 404 +20:13:02 404 +20:13:04 404 +20:13:05 404 +20:13:06 404 +20:13:07 404 +20:13:08 404 +20:13:09 404 +20:13:11 404 +20:13:12 404 +20:13:13 404 +20:13:14 404 +20:13:15 404 +20:13:16 404 +20:13:18 404 +20:13:19 404 +20:13:20 404 +20:13:21 404 +20:13:22 404 +20:13:24 404 +20:13:25 404 +20:13:26 404 +20:13:27 404 +20:13:28 404 +20:13:29 404 +20:13:31 404 +20:13:32 404 +20:13:33 404 +20:13:34 404 +20:13:35 404 +20:13:37 000 +20:13:42 404 +20:13:43 404 +20:13:44 404 +20:13:45 404 +20:13:46 404 +20:13:47 404 +20:13:49 404 +20:13:50 404 +20:13:51 404 +20:13:52 404 +20:13:53 404 +20:13:54 404 +20:13:56 404 +20:13:57 404 +20:13:58 404 +20:13:59 404 +20:14:00 404 +20:14:02 404 +20:14:03 404 +20:14:04 404 +20:14:05 404 +20:14:06 404 +20:14:08 404 +20:14:09 404 +20:14:10 404 +20:14:11 404 +20:14:13 404 +20:14:14 404 +20:14:15 404 +20:14:16 404 +20:14:17 404 +20:14:19 404 +20:14:20 404 +20:14:21 404 +20:14:22 404 +20:14:23 404 +20:14:25 404 +20:14:26 404 +20:14:27 404 +20:14:28 404 +20:14:29 404 +20:14:31 404 +20:14:32 404 +20:14:33 404 +20:14:34 404 +20:14:36 404 +20:14:37 404 +20:14:38 404 +20:14:39 404 +20:14:40 404 +20:14:41 404 +20:14:43 404 +20:14:44 404 +20:14:45 404 +20:14:46 404 +20:14:47 404 +20:14:48 404 +20:14:50 404 +20:14:51 404 +20:14:52 404 +20:14:53 404 +20:14:54 404 +20:14:56 404 +20:14:57 404 +20:14:58 404 +20:14:59 404 +20:15:00 404 +20:15:01 404 +20:15:03 404 +20:15:04 404 +20:15:05 404 +20:15:06 404 +20:15:07 404 +20:15:08 404 +20:15:10 404 +20:15:11 404 +20:15:12 404 +20:15:13 404 +20:15:14 404 +20:15:15 404 +20:15:17 404 +20:15:18 404 +20:15:19 404 +20:15:20 404 +20:15:21 404 +20:15:23 404 +20:15:24 404 +20:15:25 404 +20:15:26 404 +20:15:27 404 +20:15:28 404 +20:15:30 404 +20:15:31 404 +20:15:32 404 +20:15:33 404 +20:15:34 404 +20:15:35 404 +20:15:37 404 +20:15:38 404 +20:15:39 404 +20:15:40 404 +20:15:41 404 +20:15:43 404 +20:15:44 404 +20:15:45 404 +20:15:46 404 +20:15:47 404 +20:15:48 404 +20:15:50 404 +20:15:51 404 +20:15:52 404 +20:15:53 404 +20:15:54 404 +20:15:56 404 +20:15:57 404 +20:15:58 404 +20:15:59 404 +20:16:00 404 +20:16:01 404 +20:16:03 404 +20:16:04 404 +20:16:05 404 +20:16:06 404 +20:16:07 404 +20:16:08 404 +20:16:10 404 +20:16:11 404 +20:16:12 404 +20:16:13 404 +20:16:14 404 +20:16:15 404 +20:16:17 404 +20:16:18 404 +20:16:19 404 +20:16:20 404 +20:16:21 404 +20:16:23 404 +20:16:24 404 +20:16:25 404 +20:16:26 404 +20:16:27 404 +20:16:28 404 +20:16:30 404 +20:16:31 404 +20:16:32 404 +20:16:33 404 +20:16:34 404 +20:16:35 404 +20:16:37 404 +20:16:38 404 +20:16:39 404 +20:16:40 404 +20:16:41 404 +20:16:42 404 +20:16:44 404 +20:16:45 404 +20:16:46 404 +20:16:47 404 +20:16:48 404 +20:16:49 404 +20:16:51 404 +20:16:52 404 +20:16:53 404 +20:16:54 404 +20:16:55 404 +20:16:56 404 +20:16:58 404 +20:16:59 404 +20:17:00 404 +20:17:01 404 +20:17:02 404 +20:17:04 404 +20:17:05 404 +20:17:06 404 +20:17:07 404 +20:17:09 404 +20:17:10 404 +20:17:11 404 +20:17:12 404 +20:17:13 404 +20:17:14 404 +20:17:16 404 +20:17:17 404 +20:17:18 404 +20:17:19 404 +20:17:20 404 +20:17:22 404 +20:17:23 404 +20:17:24 404 +20:17:25 404 +20:17:26 404 +20:17:27 404 +20:17:29 404 +20:17:30 404 +20:17:31 404 +20:17:32 404 +20:17:33 404 +20:17:35 404 +20:17:36 404 +20:17:37 404 +20:17:38 404 +20:17:39 404 +20:17:40 404 +20:17:41 404 +20:17:43 404 +20:17:44 404 +20:17:45 404 +20:17:46 404 +20:17:47 404 +20:17:48 404 +20:17:50 404 +20:17:51 404 +20:17:52 404 +20:17:53 404 +20:17:54 404 +20:17:56 404 +20:17:57 404 +20:17:58 404 +20:17:59 404 +20:18:00 404 +20:18:01 404 +20:18:03 404 +20:18:04 404 +20:18:05 404 +20:18:06 404 +20:18:07 404 +20:18:08 404 +20:18:10 404 +20:18:11 404 +20:18:12 404 +20:18:13 404 +20:18:14 404 +20:18:15 404 +20:18:17 404 +20:18:18 404 +20:18:19 404 +20:18:20 404 +20:18:21 404 +20:18:22 404 +20:18:23 404 +20:18:25 404 +20:18:26 404 +20:18:27 404 +20:18:28 404 +20:18:29 404 +20:18:31 404 +20:18:32 404 +20:18:33 404 +20:18:34 404 +20:18:35 404 +20:18:36 404 +20:18:37 404 +20:18:39 404 +20:18:40 404 +20:18:41 404 +20:18:42 404 +20:18:43 404 +20:18:45 404 +20:18:46 404 +20:18:47 404 +20:18:48 404 +20:18:49 404 +20:18:50 404 +20:18:52 404 +20:18:53 404 +20:18:54 404 +20:18:55 404 +20:18:56 404 +20:18:58 404 +20:18:59 404 +20:19:00 404 +20:19:01 404 +20:19:02 404 +20:19:03 404 +20:19:04 404 +20:19:06 404 +20:19:07 404 +20:19:08 404 +20:19:09 404 +20:19:10 404 +20:19:11 404 +20:19:13 404 +20:19:14 404 +20:19:15 404 +20:19:16 404 +20:19:17 404 +20:19:19 404 +20:19:20 404 +20:19:21 404 +20:19:22 404 +20:19:23 404 +20:19:24 404 +20:19:25 404 +20:19:27 404 +20:19:28 404 +20:19:29 404 +20:19:30 404 +20:19:31 404 +20:19:32 404 +20:19:34 404 +20:19:35 404 +20:19:36 404 +20:19:37 404 +20:19:38 404 +20:19:40 404 +20:19:41 404 +20:19:42 404 +20:19:43 404 +20:19:44 404 +20:19:45 404 +20:19:46 404 +20:19:48 404 +20:19:49 404 +20:19:50 404 +20:19:51 404 +20:19:52 404 +20:19:53 404 +20:19:55 404 +20:19:56 404 +20:19:57 404 +20:19:58 404 +20:19:59 404 +20:20:00 404 +20:20:02 404 +20:20:03 404 +20:20:04 404 +20:20:05 404 +20:20:06 404 +20:20:07 404 +20:20:09 404 +20:20:10 404 +20:20:11 404 +20:20:12 404 +20:20:13 404 +20:20:15 404 +20:20:16 404 +20:20:17 404 +20:20:18 404 +20:20:19 404 +20:20:20 404 +20:20:22 404 +20:20:23 404 +20:20:24 404 +20:20:25 404 +20:20:26 404 +20:20:27 404 +20:20:29 404 +20:20:30 404 +20:20:31 404 +20:20:32 404 +20:20:33 404 +20:20:35 404 +20:20:36 404 +20:20:37 404 +20:20:38 404 +20:20:39 404 +20:20:40 404 +20:20:42 404 +20:20:43 404 +20:20:44 404 +20:20:45 404 +20:20:46 404 +20:20:47 404 +20:20:49 404 +20:20:50 404 +20:20:51 404 +20:20:52 404 +20:20:53 404 +20:20:54 404 +20:20:56 404 +20:20:57 404 +20:20:58 404 +20:20:59 404 +20:21:00 404 +20:21:01 404 +20:21:03 404 +20:21:04 404 +20:21:05 404 +20:21:06 404 +20:21:07 404 +20:21:09 404 +20:21:10 404 +20:21:11 404 +20:21:12 404 +20:21:13 404 +20:21:14 404 +20:21:16 404 +20:21:17 404 +20:21:18 404 +20:21:19 404 +20:21:20 404 +20:21:21 404 +20:21:23 404 +20:21:24 404 +20:21:25 404 +20:21:26 404 +20:21:27 404 +20:21:28 404 +20:21:30 404 +20:21:31 404 +20:21:32 404 +20:21:33 404 +20:21:34 404 +20:21:35 404 +20:21:37 404 +20:21:38 404 +20:21:39 404 +20:21:40 404 +20:21:41 404 +20:21:42 404 +20:21:44 404 +20:21:45 404 +20:21:46 404 +20:21:47 404 +20:21:48 404 +20:21:49 404 +20:21:51 404 +20:21:52 404 +20:21:53 404 +20:21:54 404 +20:21:55 404 +20:21:56 404 +20:21:58 404 +20:21:59 404 +20:22:00 404 +20:22:01 404 +20:22:02 404 +20:22:03 404 +20:22:05 404 +20:22:06 404 +20:22:07 404 +20:22:08 404 +20:22:09 404 +20:22:10 404 +20:22:12 404 +20:22:13 404 +20:22:14 404 +20:22:15 404 +20:22:16 404 +20:22:17 404 +20:22:19 404 +20:22:20 404 +20:22:21 404 +20:22:22 404 +20:22:23 404 +20:22:24 404 +20:22:26 404 +20:22:27 404 +20:22:28 404 +20:22:29 404 +20:22:30 404 +20:22:31 404 +20:22:33 404 +20:22:34 404 +20:22:35 404 +20:22:36 404 +20:22:37 404 +20:22:39 404 +20:22:40 404 +20:22:41 404 +20:22:42 404 +20:22:43 404 +20:22:44 404 +20:22:45 404 +20:22:47 404 +20:22:48 404 +20:22:49 404 +20:22:50 404 +20:22:51 404 +20:22:53 404 +20:22:54 404 +20:22:55 404 +20:22:56 404 +20:22:57 404 +20:22:58 404 +20:23:00 404 +20:23:01 404 +20:23:02 404 +20:23:03 404 +20:23:04 404 +20:23:05 404 +20:23:07 404 +20:23:08 404 +20:23:09 404 +20:23:10 404 +20:23:11 404 +20:23:12 404 +20:23:14 404 +20:23:15 404 +20:23:16 404 +20:23:17 404 +20:23:18 404 +20:23:19 404 +20:23:21 404 +20:23:22 404 +20:23:23 404 +20:23:24 404 +20:23:25 404 +20:23:26 404 +20:23:28 404 +20:23:29 404 +20:23:30 404 +20:23:31 404 +20:23:32 404 +20:23:33 404 +20:23:35 404 +20:23:36 404 +20:23:37 404 +20:23:38 404 +20:23:39 404 +20:23:40 404 +20:23:42 404 +20:23:43 404 +20:23:44 404 +20:23:45 404 +20:23:46 404 +20:23:47 404 +20:23:49 404 +20:23:50 404 +20:23:51 404 +20:23:52 404 +20:23:53 404 +20:23:54 404 +20:23:56 404 +20:23:57 404 +20:23:58 404 +20:23:59 404 +20:24:00 404 +20:24:01 404 +20:24:03 404 +20:24:04 404 +20:24:05 404 +20:24:06 404 +20:24:07 404 +20:24:08 404 +20:24:10 404 +20:24:11 404 +20:24:12 404 +20:24:13 404 +20:24:14 404 +20:24:15 404 +20:24:17 404 +20:24:18 404 +20:24:19 404 +20:24:20 404 +20:24:21 404 +20:24:22 404 +20:24:24 404 +20:24:25 404 +20:24:26 404 +20:24:27 404 +20:24:28 404 +20:24:29 404 +20:24:31 404 +20:24:32 404 +20:24:33 404 +20:24:34 404 +20:24:35 404 +20:24:36 404 +20:24:38 404 +20:24:39 404 +20:24:40 404 +20:24:41 404 +20:24:42 404 +20:24:44 404 +20:24:45 404 +20:24:46 404 +20:24:47 404 +20:24:48 404 +20:24:49 404 +20:24:51 404 +20:24:52 404 +20:24:53 404 +20:24:54 404 +20:24:55 404 +20:24:56 404 +20:24:58 404 +20:24:59 404 +20:25:00 404 +20:25:01 404 +20:25:02 404 +20:25:03 404 +20:25:05 404 +20:25:06 404 +20:25:07 404 +20:25:08 404 +20:25:09 404 +20:25:10 404 +20:25:12 404 +20:25:13 404 +20:25:14 404 +20:25:15 404 +20:25:16 404 +20:25:18 404 +20:25:19 404 +20:25:20 404 +20:25:21 404 +20:25:22 404 +20:25:23 404 +20:25:25 404 +20:25:26 404 +20:25:27 404 +20:25:28 404 +20:25:29 404 +20:25:30 404 +20:25:32 404 +20:25:33 404 +20:25:34 404 +20:25:35 404 +20:25:36 404 +20:25:37 404 +20:25:39 404 +20:25:40 404 +20:25:41 404 +20:25:42 404 +20:25:43 404 +20:25:44 404 +20:25:46 404 +20:25:47 404 +20:25:48 404 +20:25:49 404 +20:25:50 404 +20:25:51 404 +20:25:53 404 +20:25:54 404 +20:25:55 404 +20:25:56 404 +20:25:57 404 +20:25:58 404 +20:26:00 404 +20:26:01 404 +20:26:02 404 +20:26:03 404 +20:26:04 404 +20:26:05 404 +20:26:07 404 +20:26:08 404 +20:26:09 404 +20:26:10 404 +20:26:11 404 +20:26:12 404 +20:26:14 404 +20:26:15 404 +20:26:16 404 +20:26:17 404 +20:26:18 404 +20:26:19 404 +20:26:21 404 +20:26:22 404 +20:26:23 404 +20:26:24 404 +20:26:25 404 +20:26:27 404 +20:26:28 404 +20:26:29 404 +20:26:30 404 +20:26:31 404 +20:26:32 404 +20:26:33 404 +20:26:35 404 +20:26:36 404 +20:26:37 404 +20:26:38 404 +20:26:39 404 +20:26:41 404 +20:26:42 404 +20:26:43 404 +20:26:44 404 +20:26:45 404 +20:26:46 404 +20:26:48 404 +20:26:49 404 +20:26:50 404 +20:26:51 404 +20:26:52 404 +20:26:53 404 +20:26:55 404 +20:26:56 404 +20:26:57 404 +20:26:58 404 +20:26:59 404 +20:27:00 404 +20:27:01 404 +20:27:03 404 +20:27:04 404 +20:27:05 404 +20:27:06 404 +20:27:07 404 +20:27:08 404 +20:27:10 404 +20:27:11 404 +20:27:12 404 +20:27:13 404 +20:27:14 404 +20:27:16 404 +20:27:17 404 +20:27:18 404 +20:27:19 404 +20:27:20 404 +20:27:21 404 +20:27:23 404 +20:27:24 404 +20:27:25 404 +20:27:26 404 +20:27:27 404 +20:27:29 404 +20:27:30 404 +20:27:31 404 +20:27:32 404 +20:27:33 404 +20:27:34 404 +20:27:36 404 +20:27:37 404 +20:27:38 404 +20:27:39 404 +20:27:40 404 +20:27:41 404 +20:27:43 404 +20:27:44 404 +20:27:45 404 +20:27:46 404 +20:27:47 404 +20:27:48 404 +20:27:50 404 +20:27:51 404 +20:27:52 404 +20:27:53 404 +20:27:54 404 +20:27:55 404 +20:27:57 404 +20:27:58 404 +20:27:59 404 +20:28:00 404 +20:28:01 404 +20:28:02 404 +20:28:04 404 +20:28:05 404 +20:28:06 404 +20:28:07 404 +20:28:08 404 +20:28:09 404 +20:28:11 404 +20:28:12 404 +20:28:13 404 +20:28:14 404 +20:28:15 404 +20:28:16 404 +20:28:17 404 +20:28:19 404 +20:28:20 404 +20:28:21 404 +20:28:22 404 +20:28:23 404 +20:28:24 404 +20:28:26 404 +20:28:27 404 +20:28:28 404 +20:28:29 404 +20:28:30 404 +20:28:31 404 +20:28:33 404 +20:28:34 404 +20:28:35 404 +20:28:36 404 +20:28:37 404 +20:28:38 404 +20:28:40 404 +20:28:41 404 +20:28:42 404 +20:28:43 404 +20:28:44 404 +20:28:45 404 +20:28:47 404 +20:28:48 404 +20:28:49 404 +20:28:50 404 +20:28:51 404 +20:28:52 404 +20:28:54 404 +20:28:55 404 +20:28:56 404 +20:28:57 404 +20:28:58 404 +20:29:00 404 +20:29:01 404 +20:29:02 404 +20:29:03 404 +20:29:04 404 +20:29:05 404 +20:29:07 404 +20:29:08 404 +20:29:09 404 +20:29:10 404 +20:29:11 404 +20:29:12 404 +20:29:13 404 +20:29:15 404 +20:29:16 404 +20:29:17 404 +20:29:18 404 +20:29:19 404 +20:29:21 404 +20:29:22 404 +20:29:23 404 +20:29:24 404 +20:29:25 404 +20:29:26 404 +20:29:28 404 +20:29:29 404 +20:29:30 404 +20:29:31 404 +20:29:32 404 +20:29:33 404 +20:29:35 404 +20:29:36 404 +20:29:37 404 +20:29:38 404 +20:29:39 404 +20:29:40 404 +20:29:42 404 +20:29:43 404 +20:29:44 404 +20:29:45 404 +20:29:46 404 +20:29:47 404 +20:29:49 404 +20:29:50 404 +20:29:51 404 +20:29:52 404 +20:29:53 404 +20:29:54 404 +20:29:56 404 +20:29:57 404 +20:29:58 404 +20:29:59 404 +20:30:00 404 +20:30:01 404 +20:30:03 404 +20:30:04 404 +20:30:05 404 +20:30:06 404 +20:30:07 404 +20:30:08 404 +20:30:10 404 +20:30:11 404 +20:30:12 404 +20:30:13 404 +20:30:14 404 +20:30:15 404 +20:30:17 404 +20:30:18 404 +20:30:19 404 +20:30:20 404 +20:30:21 404 +20:30:23 404 +20:30:24 404 +20:30:25 404 +20:30:26 404 +20:30:27 404 +20:30:28 404 diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-clear-perbox.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-clear-perbox.txt new file mode 100644 index 00000000..ae8e442d --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-clear-perbox.txt @@ -0,0 +1,6 @@ +20:39:54 clear tester-1 +Location: /customers/tester-1?flash=floor_set +20:39:54 clear demo-hp +Location: /customers/demo-hp?flash=floor_set +20:39:54 clear demo-felhom +Location: /customers/demo-felhom?flash=floor_set diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-floor-readback.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-floor-readback.txt new file mode 100644 index 00000000..b0894474 --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-floor-readback.txt @@ -0,0 +1,7 @@ +er action. Blank = no global floor. This setting is independent of the Day-0 artifact manifest below. Effective floor: v0.345.1 — source: DB (hub_settings) ; env fallback would be v0.120.0 Save global floor… DB override: v0.345.1 … Type the versio + (no manual copy). Choose — none — to clear an artifact. Agent — none — 0.166.0 0.165.0 0.164.0 0.163.0 0.162.0 0.161.0 0.158.1 Golden — none — 0.344.0 0.331.0 0.329.0 0.318.0 0.313.0 0.312.0 0.311.0 Min agent The golden's controller CHANGELOG Min +2026/10/26 21:05:08 [INFO] Customer tester-1 controller-version floor override set to "0.345.1" (declared MinAgent "0.158.1") +2026/10/26 21:05:08 [INFO] access token "cc-releases-2": POST /customers/tester-1/floor → 303 +2026/10/26 21:05:11 [INFO] managed floor SERVED for tester-1: floor 0.345.1, agent requirement "0.158.1" from declared (golden 0.344.0) +2026/10/26 21:06:04 [INFO] Customer demo-hp controller-version floor override set to "0.345.1" (declared MinAgent "0.158.1") +2026/10/26 21:06:04 [INFO] access token "cc-releases-2": POST /customers/demo-hp/floor → 303 diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-global-floor.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-global-floor.txt new file mode 100644 index 00000000..30605f4d --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-global-floor.txt @@ -0,0 +1,3 @@ +2026-10-26T20:08:39Z +HTTP/1.1 303 See Other +Location: /configuration?flash=floor_set diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-hub-final.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-hub-final.txt new file mode 100644 index 00000000..806bf125 --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-hub-final.txt @@ -0,0 +1,11 @@ +Customer ID | Name | Domain | Status | Version | Floor | Config +Tester-2 | Tester 2 | sajatfelhom.hu | DOWN | 0.292.0 | v0.345.1 ● | MANAGED +Tester4 | Tester4 | tester4.test | OK | 0.345.1 | v0.345.1 | MANAGED +demo-felhom | Demo Ügyfél | demo-felhom.eu | OK | 0.345.1 | v0.345.1 | MANAGED +demo-hp | Demo HP | enkisfelhom.hu | OK | 0.345.1 | v0.345.1 | MANAGED +tester-1 | Tester 1 | enkicsifelhom.hu | OK | 0.345.1 | v0.345.1 | MANAGED +Host | Customer | Agent | Proxmox / kernel | Status | Guests | CPU | Mem | Disk | Cloudflared | Worst Storage +Tester4-b5dbbd | Tester4 | 0.167.0-night1 floor held | 9.2.2 7.0.2-6-pve | ONLINE | 1/1 | 8% | 27% | 18% | absent (no cloudflared container in the guest (no tunnel set up on this box)) | 18% local +demo-felhom-8363b5 | Demo Ügyfél | 0.166.0 floor: declared MinAgent | 9.2.21 7.0.14-25-pve | ONLINE | 1/2 | 5% | 20% | 35% | running (connected) | 35% local +demo-hp-bb76ea | Demo HP | 0.166.0 floor: declared MinAgent | 9.2.21 7.0.14-25-pve | ONLINE | 1/2 | 19% | 66% | 65% | running (connected) | 65% local +tester-1-d70be4 | Tester 1 | 0.166.0 floor: declared MinAgent | 9.2.2 7.0.14-22-pve | ONLINE | 1/2 | 0% | 34% | 27% | running (connected) | 27% local diff --git a/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-watch.txt b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-watch.txt new file mode 100644 index 00000000..1c0d2a14 --- /dev/null +++ b/documentation/audits/cloudflared-2026.10.3-2026-10-26/part6-watch.txt @@ -0,0 +1,28 @@ +== 20:09:04 +felhom-pve: cloudflared=cloudflare/cloudflared:2026.10.3(Up 2 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 2 minutes (healthy)) +demo-hp: cloudflared=cloudflare/cloudflared:2026.10.3(Up 2 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 2 minutes (healthy)) +root@192.168.0.154: cloudflared=cloudflare/cloudflared:2026.10.3(Up 3 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 3 minutes (healthy)) +== 20:14:08 +felhom-pve: cloudflared=cloudflare/cloudflared:2026.10.3(Up 7 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 7 minutes (healthy)) +demo-hp: cloudflared=cloudflare/cloudflared:2026.10.3(Up 7 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 7 minutes (healthy)) +root@192.168.0.154: cloudflared=cloudflare/cloudflared:2026.10.3(Up 8 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 8 minutes (healthy)) +== 20:19:14 +felhom-pve: cloudflared=cloudflare/cloudflared:2026.10.3(Up 12 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 13 minutes (healthy)) +demo-hp: cloudflared=cloudflare/cloudflared:2026.10.3(Up 12 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 13 minutes (healthy)) +root@192.168.0.154: cloudflared=cloudflare/cloudflared:2026.10.3(Up 13 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 14 minutes (healthy)) +== 20:24:19 +felhom-pve: cloudflared=cloudflare/cloudflared:2026.10.3(Up 18 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 18 minutes (healthy)) +demo-hp: cloudflared=cloudflare/cloudflared:2026.10.3(Up 17 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 18 minutes (healthy)) +root@192.168.0.154: cloudflared=cloudflare/cloudflared:2026.10.3(Up 18 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 19 minutes (healthy)) +== 20:29:23 +felhom-pve: cloudflared=cloudflare/cloudflared:2026.10.3(Up 23 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 23 minutes (healthy)) +demo-hp: cloudflared=cloudflare/cloudflared:2026.10.3(Up 22 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 23 minutes (healthy)) +root@192.168.0.154: cloudflared=cloudflare/cloudflared:2026.10.3(Up 24 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 24 minutes (healthy)) +== 20:34:27 +felhom-pve: cloudflared=cloudflare/cloudflared:2026.10.3(Up 28 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 28 minutes (healthy)) +demo-hp: cloudflared=cloudflare/cloudflared:2026.10.3(Up 27 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 28 minutes (healthy)) +root@192.168.0.154: cloudflared=cloudflare/cloudflared:2026.10.3(Up 29 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 29 minutes (healthy)) +== 20:39:31 +felhom-pve: cloudflared=cloudflare/cloudflared:2026.10.3(Up 33 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 33 minutes (healthy)) +demo-hp: cloudflared=cloudflare/cloudflared:2026.10.3(Up 33 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 33 minutes (healthy)) +root@192.168.0.154: cloudflared=cloudflare/cloudflared:2026.10.3(Up 34 minutes (healthy)) felhom-controller=gitea.dooplex.hu/admin/felhom-controller:0.345.1(Up 34 minutes (healthy)) diff --git a/documentation/backlog/CLOSED-ITEMS.md b/documentation/backlog/CLOSED-ITEMS.md index 9ae544a8..2f0fe3d0 100644 --- a/documentation/backlog/CLOSED-ITEMS.md +++ b/documentation/backlog/CLOSED-ITEMS.md @@ -26,6 +26,12 @@ --- +## 2026-10-26 (evening, attended) — R-1300 released: controller 0.345.1, cloudflared 2026.10.3 (full text of the row: `git show ffb91d89:documentation/backlog/OPEN-ITEMS.md`) + +| Row | What | Closed | Evidence | +|---|---|---|---| +| **R-1300** | **cloudflared on every box trusted eight eMudhra (emSign) intermediates with weak keys (Cloudflare's notice 2026-10-20; fixed in 2026.10.2).** (P1) | CLOSED 2026-10-26 evening — controller v0.345.1 (tag `f3204024` = v0.345.0 `6bfb784` + one commit; image `sha256:7cfdf7e1…`; CI job 2393 green; `main` `a1c65b3d`, job 2392 green) pins `cloudflare/cloudflared:2026.10.3` (index `sha256:faa8e0a1…`). Per-box floor on Tester 1, then demo-hp and demo-felhom; global floor 0.345.1 (MinAgent 0.158.1 declared) at 20:08:39Z on the operator's yes; per-box floors cleared 20:39:54Z. Every box with a tunnel (Tester 1, demo-hp, demo-felhom) reports controller 0.345.1 and runs cloudflared 2026.10.3, healthy, through a 30-minute watch (21 of 21 samples); the hub: „running (connected)" on all three; 29 of 29 public names redirect http→https. Tester4 moved to 0.345.1 (no tunnel: „absent"); Tester 2 has no box. Tunnel gaps 2 s / 4 s / 11 s. Origin trap NOT-A-FINDING (route `https://traefik` with `noTLSVerify`, traefik's self-signed default certificate). **Rule (01 „Tunnel placement"): cloudflared follows Cloudflare's security notices; never turn off a certificate check to make an update work.** | `audits/cloudflared-2026.10.3-2026-10-26/` | + ## 2026-10-26 (evening) — R-435 read and closed (full text of the row: `git show 49557444:documentation/backlog/OPEN-ITEMS.md`) | Row | What | Closed | Evidence | diff --git a/documentation/backlog/OPEN-ITEMS.md b/documentation/backlog/OPEN-ITEMS.md index 26458f87..a7167c9a 100644 --- a/documentation/backlog/OPEN-ITEMS.md +++ b/documentation/backlog/OPEN-ITEMS.md @@ -231,11 +231,10 @@ stopping line that lies. | **R-1275** | Storage & devices | P4 | **An English household sees the drive names in Hungarian** on the install page (and wherever a storage label shows): „Belső tárhely — 52.0 GB free (default)”, „Külső tárhely (hdd_1)” (catalog sweep 2026-10-24, `audits/catalog-sweep-2026-10-24/navidrome/page-install-en.txt`). The label is stored once, in Hungarian, when the drive is found (`felhom-controller/controller/internal/settings/settings.go` `InferStorageLabel`); a household may rename it. | OPEN | — | Render a label that still equals the inferred default in the reader's language; a test per language | CC | | **R-1276** | Storage & devices | P4 | **„Remove with data” leaves the app's empty parent folder** (`/appdata/`) when the template binds a subfolder: Grimmory, RomM, Paperless-ngx (catalog sweep 2026-10-24; 4 KB each; the bound folders were removed). Harmless (empty, not counted as old data), untidy for a household that browses the drive. | OPEN | — | Remove the parent when it is empty after the bound folders go; a test | CC | -## Security & access — 25 rows (P1 3, P2 3, P3 13, P4 6) +## Security & access — 24 rows (P1 2, P2 3, P3 13, P4 6) | ID | Category | Sev | What | State | Blocked on | Next action | Owner | |---|---|---|---|---|---|---|---| -| **R-1300** | Security & access | P1 | **cloudflared on every box trusts eight eMudhra (emSign) intermediates with weak keys** (Cloudflare's notice 2026-10-20; fixed in 2026.10.2): someone with those keys could pose as any website to the tunnel. List 2026-10-26: three boxes report (demo-felhom, demo-hp, Tester 1), each guest 9201 on `cloudflare/cloudflared:2026.9.3`; none on DooPlex; Tester 2 has no box. Origin trap NOT-A-FINDING: every route is `https://traefik` with `noTLSVerify` (R-510) and traefik shows its self-signed default certificate. Fix: controller **v0.345.1** = v0.345.0 + `CloudflaredImage` `2026.10.3` (index `sha256:faa8e0a1…`); `main` carries it too. `audits/cloudflared-2026.10.3-2026-10-26/` | OPEN — filed 2026-10-26 (attended); closes when every box reports cloudflared 2026.10.3 | the global floor (operator yes) | build + per-box floor on the test boxes, then ask for the global floor | CC | | **R-1241** | Security & access | P1 | **2026-10-24: the Felhom half is DONE** — hub 0.168.0 deployed (the tokens sealed; every copy leaving the volume is clean, the live file's old bytes accepted by the operator, R-975 closed), the hub volume out of the Longhorn backup (D40, R-1243 VERIFY), the two old plain copies deleted by the operator. **What stays here is the homelab half:** the open NFS export and Longhorn's login (the homelab session). **A hacked app pod on DooPlex can read the hub's nightly database copies — with every customer's unsealed Cloudflare, tunnel and git token (R-975) — through the Longhorn NFS export, and by a published file-handle escape the operator signing keys on the same disk: whoever breaks one homelab app can take over the boxes' tunnels and sign agent updates.** MEASURED 2026-10-23 (Plex2Shell impact audit, `audits/plex2shell-felhom-impact-2026-10-23/`): export `/mnt/5_hdd/backup/longhorn-pvc` rw, `no_root_squash`, `no_subtree_check`, a sub-directory of sda1, which also holds `/mnt/5_hdd/felhom.eu/felhom-op-*` (no passphrase, R-924); `secure` is void in pods (containerd sets `ip_unprivileged_port_start=0`; a uid-1000 probe with no capabilities bound port 700); the four `felhom-system` volumes have `encrypted=false`; Longhorn's API on :9500 answers any pod with no login (backups, targets, volumes). In the Plex2Shell window neither door was used — verdict NOT REACHED (nfsd accepted 0 new connections 10-10 → 10-23, positive control; no off-schedule Longhorn backup or volume). 2026-10-23 ~15:18Z, operator yes: the export was narrowed from `*` to `10.42.0.0/16` — the home network and the tailnet are closed, pods are not (Longhorn connects from its pod address). Not exercised: the escape itself (Tier-2 machine). | OPEN | the homelab session (DooPlex host + cluster); the operator (R-924) | Homelab: a NetworkPolicy so only `longhorn-system` reaches :2049/:111 and :9500, or the backup store on its own filesystem. Felhom: R-975 sealed in hub 0.168.0 (deploy pending); the hub's plain Longhorn copies → R-1243; a passphrase on the signing keys (R-924) | operator | | **R-1139** | Security & access | P2 | **Tester 2's break-glass root password was not rotated with the others (R-954, operator decision D1 = A, 2026-10-17): the box has been offline since 2026-10-04.** demo-hp, Tester 1 and demo-felhom were rotated and proven on 2026-10-17 (`audits/agent-allowlist-rotation-2026-10-17/P3/`). | OPEN — filed 2026-10-17 **2026-10-22: closes when Tester 2 is reinstalled (operator ruling 2026-10-22 14:11 — a fresh install sets and vaults a new console password).** | Tester 2 reporting again | When it reports: the installer's step 4b alone (`P3/rotate-step4b.sh` shape), then the vaulted value logs in (PVE API 200) and the old one is refused | CC | | **R-1042** | Security & access | P3 | **The boxes' Cloudflare keys cannot change zone settings, so Cloudflare's own „Always Use HTTPS” cannot be switched on.** Measured 2026-10-14 on all three zones (`audits/https-only-2026-10-14/``1A-1-zones-and-keys.txt`): each `cf_api_token` is valid and sees only its own zone, but GET/PATCH `settings/always_use_https`, `ssl`, `security_header` answer 403; the redirect and transform rule phases too. The https-only fix therefore lives on the box (decision 246). A second layer at Cloudflare needs „Zone Settings: Edit” (and, for headers, „Transform Rules”) added to each customer's key — the hub's zone-reach check stays. | **WAITING-ON-OPERATOR** — filed 2026-10-14 | a key permission only the operator can grant | Optional: widen each customer key, then switch „Always Use HTTPS” on per zone | operator | @@ -261,10 +260,11 @@ stopping line that lies. | **R-1237** | Security & access | P3 | **The nightly CC-secrets sweep found stored one-time codes in a session record dated 2026-10-23: 14 names in one file (bind tokens and setup codes of test boxes — NIGHT_2026_10_23_*, FIXES_2026_10_21_*, NIGHT_2026_10_21_*, REHEARSAL_2026_10_20_* — and R_DEMO_FELHOM in a file of 2026-10-20).** Mail „[DooPlex CC secrets] 2 secret name(s) found in old session records", 2026-10-23 01:57 UTC, read in the day session (names only). One file holding all of them suggests one command printed many stored values at once (a listing or a dump) in the night session. All but R_DEMO_FELHOM are one-time install codes of test boxes; NIGHT_2026_10_23_* die when Tester4-16fdef is deleted (the operator's do list). | OPEN | — | CC: find the file and the command by the sweep's own report (names only), add a hook shape for that command if it is not one; R_DEMO_FELHOM (demo-felhom's recovery code) — the operator decides whether to rotate it | CC | | **R-1248** | Security & access | P3 | **An app's own numbers can lie: an attacker with code inside an app's container can answer the app's API with whatever matches its flood, and the upload watch (R-1244) would then call it explained.** Measured remedy, not built: a per-container upload ceiling with `tc` from a helper container in the app's network namespace — on scratch 9202 (unprivileged) a flood was held at 19.9–20.1 Mbit/s and the app kept answering (`audits/SPIKE-upload-watch-2026-10-23.md` §5). Costs: a helper image with `tc` (a new external image, or `tc` in the controller image), `NET_ADMIN` for that helper, re-applied after each app restart. | OPEN | an operator decision (the new image / capability) | Decide; if yes, CC builds the ceiling for the download and media apps first | operator | -## Box system & updates — 13 rows (P2 1, P3 7, P4 5) +## Box system & updates — 14 rows (P2 1, P3 8, P4 5) | ID | Category | Sev | What | State | Blocked on | Next action | Owner | |---|---|---|---|---|---|---|---| +| **R-1301** | Box system & updates | P3 | **The N100's Proxmox host keeps no time: `chrony` fails at every boot** („Fatal error : Could not send notification to $NOTIFY_SOCKET", seen 2026-10-16 and 2026-10-21 boots); measured 2026-10-26 20:06 UTC: the host clock 14 s behind DooPlex and demo-hp, `System clock synchronized: no`. demo-hp has the same package (4.8-4~bpo13+2) and `DAEMON_OPTS="-F 1"` and runs it. A drifting host clock feeds backup times (R-1206's class) and TLS. Found while timing the cloudflared update (R-1300). `audits/cloudflared-2026.10.3-2026-10-26/obs-n100-clock.txt` | OPEN — filed 2026-10-26 | — | find why the notify socket fails on this host only (compare the unit and `systemd-analyze` with demo-hp), fix it, and check whether a fresh install could hit it too | CC | | **R-1260** | Box system & updates | P3 | **Spring 2027 (2027-03-28): two clock-change effects in the controller's night (review round 2, HUNT-4 H2/H3).** The update leg's deadline is W + 5 h of REAL time while the full-system backup's gate counts wall-clock minutes, so a step can start after the gate stopped waiting (`felhom-controller/controller/internal/stacks/unattended.go:225`; `internal/quiesce/quiesce.go:922-933`); with W in 02:00–02:59 the DB dump and the second-drive copy start at the same instant (`internal/scheduler/scheduler.go:509`; VERIFIED: Go maps 2027-03-28 02:30 Europe/Budapest to 03:30 CEST). | OPEN | — | before 2027-03-28: one wall-clock basis for both, and a test at the spring date | CC | | **R-984** | Box system & updates | P4 | **Host and agent hardening, low risk each: the backup-target route has no role check; the unsigned guest spec has no size bounds; signed ops have no maximum validity; the guarded mkfs does not refuse LVs, zvols or RAID devices; the local API is reachable from the LAN by a static route; a sudoers inspect pattern is wider than needed; install passes secrets on the command line; guest settings files are world-readable; the host offers rpcbind and DNS on the LAN.** Fix each in its own small change. Security review 2026-10-12 (`audits/security-review-2026-10-12/`); detail held off-git for the operator (`/mnt/5_hdd/felhom.eu/evidence/security-review-2026-10-12-PRIVATE/`). | OPEN | — | Batch into hardening work | CC | | **R-979** | Box system & updates | P3 | **Controller updates are trusted by registry tag alone (no digest, no signature), and the Update button offers any newer tag, even an unvouched one; the built-in traefik, cloudflared and FileBrowser images are also pinned by tag only.** Whoever can push to the registry decides what runs. Fix: pin by digest from the hub's vouched list; offer only vouched versions. Security review 2026-10-12 (`audits/security-review-2026-10-12/`); detail held off-git for the operator (`/mnt/5_hdd/felhom.eu/evidence/security-review-2026-10-12-PRIVATE/`). | OPEN — design-proposal | — | Design note, then build | CC | diff --git a/documentation/lived-in/n100.md b/documentation/lived-in/n100.md index 5e92b5bc..9da50da0 100644 --- a/documentation/lived-in/n100.md +++ b/documentation/lived-in/n100.md @@ -46,3 +46,9 @@ what happened, who noticed, and the register row it became. Prose here is not a route by name) reached the N100 by the normal update path at 12:04:45; `files.demo-felhom.eu` 200, the default login refused (401). No data touched. Register: fixed within the release, recorded in R-1126's close. Evidence: `audits/filebrowser-memory-ci-2026-10-17/release/box-walk.txt`. (CC) +- **2026-10-26 — cloudflared 2026.10.3 (Cloudflare's eMudhra notice), and the host clock found 14 s slow.** Controller + 0.345.1 arrived by the normal update path (per-box floor 20:06:04 UTC); the controller recreated cloudflared on + 2026.10.3 by itself, the tunnel was down for about 4 s (a no-app name answered 530, then 404 again). While measuring + the gap the Proxmox host's clock read 14 s behind DooPlex and demo-hp: `chrony` has failed at every boot since at least + 2026-10-16 („Could not send notification to $NOTIFY_SOCKET"); demo-hp, same package and options, runs it. Register: + R-1300 (the release), R-1301 (the clock). Evidence: `audits/cloudflared-2026.10.3-2026-10-26/` (`obs-n100-clock.txt`). (CC)