# Access Map — router-ops

Версия: 20260711-120734 UTC

## Канонические маршруты

- `ssh pve-mgts` → 10.71.100.222.
- MGTS VM100 → nested через pve-mgts → 10.71.100.1, ключ находится на Proxmox: `/root/.ssh/pve_to_openwrt_mgts_ed25519`.
- MGTS VM101 → nested через pve-mgts → 10.71.100.2. Прямой ключ ops к VM101 не используется.
- `ssh vm121` / `ssh wg-access-dev` → 192.168.30.83.
- `ssh pve-ai` → 192.168.30.81.
- `ssh ubuntu-ai` / `ssh vm120` → 192.168.30.82.
- `ssh home-vm100` → 192.168.30.1.

## Проверка

| target | kind | status | rc | detail |
|---|---|---|---:|---|
| `pve-mgts` | direct | **OK** | 0 | XS_OK pve-wg-paid root |
| `vm121` | direct | **OK** | 0 | XS_OK wg-access-dev root |
| `wg-access-dev` | direct | **OK** | 0 | XS_OK wg-access-dev root |
| `pve-ai` | direct | **OK** | 0 | XS_OK pve-irrigation-ai root |
| `ubuntu-ai` | direct | **OK** | 0 | XS_OK ubuntu-ai root |
| `vm120` | direct | **OK** | 0 | XS_OK ubuntu-ai root |
| `home-vm100` | direct | **OK** | 0 | XS_OK root ash: hostname: not found |
| `mgts-vm100` | nested | **OK** | 0 | Warning: Permanently added '10.71.100.1' (ED25519) to the list of known hosts. XS_OK root ash: hostname: not found |
| `mgts-vm101` | nested | **OK** | 0 | Warning: Permanently added '10.71.100.2' (ED25519) to the list of known hosts. XS_OK root ash: hostname: not found |

## Изменения

| UTC | action |
|---|---|
| 2026-07-11T12:08:26Z | normalized managed SSH aliases; backup=/opt/router-ops/state/xsmap-backup-20260711-120734 |

## Итог

- failed required paths: 0
- existing audit before rc: 0
- existing audit after rc: 0
- rollback: `/opt/router-ops/state/rollback-xsmap-20260711-120734.sh`
- immutable URL: https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260711-120734_access_map_audit_repair_publish/