SCHEMA=wg-paid-vm121-readonly-audit-v1 MACHINE=VM121 AUDIT_UTC=2026-08-02T10:15:01Z HOSTNAME=wg-access-dev ===== SYSTEM ===== Linux wg-access-dev 6.1.0-50-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.176-1 (2026-07-02) x86_64 GNU/Linux PRETTY_NAME="Debian GNU/Linux 12 (bookworm)" NAME="Debian GNU/Linux" VERSION_ID="12" VERSION="12 (bookworm)" VERSION_CODENAME=bookworm ID=debian HOME_URL="https://www.debian.org/" SUPPORT_URL="https://www.debian.org/support" BUG_REPORT_URL="https://bugs.debian.org/" 10:15:01 up 17 days, 20:14, 0 user, load average: 0.11, 0.10, 0.09 Filesystem Size Used Avail Use% Mounted on /dev/sda1 63G 3.5G 57G 6% / /dev/sda1 63G 3.5G 57G 6% / /dev/sda1 63G 3.5G 57G 6% / ===== MACHINE GIT ===== >>> [vm121-git] precheck MODE=--check PROFILE=/etc/router-machine-git-source.conf PROFILE_VERSION=2 PROFILE_SHA256=119996c097d5302e4911488ac542dd0b5105ea64c4775f476181bafa21eab60a MACHINE_ID=vm121 GIT_DIR=/root/.vm121-source.git WORK_TREE=/ BRANCH=main REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm121.git LOCAL_HEAD=93e0e5a31f0900a498b77d22e6a7f2ca5fd7fee0 >>> [vm121-git] verify remote branch REMOTE_HEAD=93e0e5a31f0900a498b77d22e6a7f2ca5fd7fee0 >>> [vm121-git] build current project allowlist >>> [vm121-git] read paths already tracked by git CURRENT_ALLOWED_COUNT=41 TRACKED_COUNT=41 MANAGED_UNION_COUNT=41 >>> [vm121-git] strict path validation STRICT_PATH_VALIDATION=true >>> [vm121-git] show tracked files now missing from machine TRACKED_PATH_MISSING_COUNT=0 >>> [vm121-git] build simulated git index STAGED_CHANGE_COUNT=0 STAGED_PATHS=NONE >>> [vm121-git] validate simulated staged paths STAGED_PATH_VALIDATION=true SIMULATED_TREE_SHA=b6fb72951eedc96decf445b71e7d9d6e77ec5ee3 SIMULATED_TREE_FILE_COUNT=41 >>> [vm121-git] high-confidence secret scan of simulated tree HIGH_CONFIDENCE_SECRET_MATCHES=0 >>> [vm121-git] keyword review scan KEYWORD_REVIEW_FILES=NONE RESULT=PASS_VM121_GIT_PUBLISH_CHECK MACHINE_ID=vm121 GIT_COMMIT=93e0e5a31f0900a498b77d22e6a7f2ca5fd7fee0 GIT_TREE=b6fb72951eedc96decf445b71e7d9d6e77ec5ee3 GIT_FILE_COUNT=41 COMMIT_CREATED=false PUSH_PERFORMED=false VM121_GIT_CHECK=PASS ===== DOCKER ===== DOCKER_SERVER_VERSION=29.6.1 CONTAINER=wgaccess-backend IMAGE=python:3.12-slim STATUS=Up 2 weeks PORTS=0.0.0.0:18080->8000/tcp CONTAINER=wgaccess-postgres IMAGE=postgres:16-alpine STATUS=Up 2 weeks (healthy) PORTS=127.0.0.1:15432->5432/tcp COMPOSE_SERVICE=postgres COMPOSE_SERVICE=backend COMPOSE_IMAGE=python:3.12-slim COMPOSE_IMAGE=postgres:16-alpine ===== BACKEND HEALTH ===== {"status":"ok","service":"wg-access-backend","environment":"dev"} BACKEND_HEALTH=PASS {"status":"ok","db":1} DB_HEALTH=PASS ===== OPENAPI ROUTES ===== OPENAPI_ROUTE=get,post /admin/invites OPENAPI_ROUTE=get /admin/jobs OPENAPI_ROUTE=post /admin/maintenance/expire-subscriptions OPENAPI_ROUTE=get /admin/peers OPENAPI_ROUTE=post /admin/peers/{peer_id}/disable OPENAPI_ROUTE=post /admin/subscriptions OPENAPI_ROUTE=post /admin/subscriptions/{subscription_id}/cancel OPENAPI_ROUTE=get /admin/users OPENAPI_ROUTE=get /admin/users/by-email/{email} OPENAPI_ROUTE=get /admin/users/{user_id} OPENAPI_ROUTE=get /agent/jobs OPENAPI_ROUTE=post /agent/jobs/{job_id}/complete OPENAPI_ROUTE=post /agent/jobs/{job_id}/fail OPENAPI_ROUTE=post /agent/jobs/{job_id}/start OPENAPI_ROUTE=get /agent/peers OPENAPI_ROUTE=post /dev/create-test-peer OPENAPI_ROUTE=get /health OPENAPI_ROUTE=get /health/db ===== SYSTEMD ===== UNIT=wg-access-agent.path ACTIVE=inactive ENABLED=disabled UNIT=wg-access-agent.service ACTIVE=inactive ENABLED=static UNIT=wg-access-agent.timer ACTIVE=inactive ENABLED=disabled UNIT=wg-access-reconcile.service ACTIVE=inactive ENABLED=static UNIT=wg-access-reconcile.timer ACTIVE=active ENABLED=enabled UNIT=wg-access-expire-subscriptions.service ACTIVE=inactive ENABLED=static UNIT=wg-access-expire-subscriptions.timer ACTIVE=active ENABLED=enabled UNIT=wg-access-trigger-watch.service ACTIVE=active ENABLED=enabled NEXT LEFT LAST PASSED UNIT ACTIVATES Sun 2026-08-02 10:15:37 UTC 34s left Sun 2026-08-02 10:10:36 UTC 4min 27s ago wg-access-expire-subscriptions.timer wg-access-expire-subscriptions.service Sun 2026-08-02 10:19:19 UTC 4min 16s left Sun 2026-08-02 10:14:11 UTC 51s ago wg-access-reconcile.timer wg-access-reconcile.service ===== SAFE ENVIRONMENT ===== ENVIRONMENT=dev WG_CLIENT_ENDPOINT=wg-studio.secret-studio.ru:51830 WG_CLIENT_ALLOWED_IPS=0.0.0.0/0 WG_CLIENT_DNS= WG_CLIENT_POOL_CIDR=10.253.0.0/16 WG_CLIENT_FIRST_IP=10.253.1.10 AGENT_API_BASE_URL= AGENT_REMOTE_HOST=10.71.100.1 AGENT_REMOTE_USER=root AGENT_REMOTE_WG_INTERFACE=wg_paid WG_SERVER_PUBLIC_KEY_PRESENT=true WG_SERVER_PUBLIC_KEY_SHA256=442e3c1e4ed1a3bb371b03bb16ed75158bba311f513c72fa67396ee6010ea343 AGENT_TOKEN_PRESENT=true APP_SECRET_PRESENT=true POSTGRES_PASSWORD_PRESENT=true AGENT_AGENT_TOKEN_PRESENT=true AGENT_REMOTE_SSH_KEY_PRESENT=true ===== DATABASE SCHEMA AND AGGREGATES ===== POSTGRES_CONTAINER=wgaccess-postgres POSTGRES_QUERY=PASS ===== LISTENERS AND FIREWALL ===== Netid State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess udp UNCONN 0 0 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=310,fd=19)) udp UNCONN 0 0 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=310,fd=17)) udp UNCONN 0 0 0.0.0.0:5355 0.0.0.0:* users:(("systemd-resolve",pid=310,fd=11)) udp UNCONN 0 0 [::]:5355 [::]:* users:(("systemd-resolve",pid=310,fd=13)) tcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=477,fd=3)) tcp LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=310,fd=18)) tcp LISTEN 0 4096 127.0.0.1:15432 0.0.0.0:* users:(("docker-proxy",pid=924,fd=8)) tcp LISTEN 0 4096 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=310,fd=20)) tcp LISTEN 0 4096 0.0.0.0:5355 0.0.0.0:* users:(("systemd-resolve",pid=310,fd=12)) tcp LISTEN 0 4096 0.0.0.0:18080 0.0.0.0:* users:(("docker-proxy",pid=936,fd=8)) tcp LISTEN 0 128 [::]:22 [::]:* users:(("sshd",pid=477,fd=4)) tcp LISTEN 0 4096 [::]:5355 [::]:* users:(("systemd-resolve",pid=310,fd=14)) iifname != "br-0dd299da43cc" ip daddr 127.0.0.1 tcp dport 15432 counter packets 0 bytes 0 dnat to 172.18.0.2:5432 iifname != "br-0dd299da43cc" tcp dport 18080 counter packets 0 bytes 0 dnat to 172.18.0.3:8000 iifname != "br-0dd299da43cc" oifname "br-0dd299da43cc" ip daddr 172.18.0.3 tcp dport 8000 counter packets 0 bytes 0 accept iifname != "br-0dd299da43cc" oifname "br-0dd299da43cc" ip daddr 172.18.0.2 tcp dport 5432 counter packets 0 bytes 0 accept iifname != "lo" ip daddr 127.0.0.1 tcp dport 15432 counter packets 0 bytes 0 drop ===== BACKUP METADATA ===== BACKUP_FILE_COUNT=162 BACKUP_NEWEST_EPOCH=1784419201 BACKUP_NEWEST_SIZE=0 ===== HISTORICAL SELECTOR HELPERS ===== SELECTOR_HELPER_PRESENT=/usr/local/sbin/wg-access-agent-selector-apply.py SELECTOR_HELPER_PRESENT=/usr/local/sbin/wg-access-agent-selector-contract-dry-run.py SELECTOR_HELPER_PRESENT=/usr/local/sbin/wg-access-agent-selector-remote-plan.py SELECTOR_HELPER_PRESENT=/usr/local/sbin/wg-access-agent-job-selector-plan.py SELECTOR_HELPER_PRESENT=/usr/local/sbin/wg-access-slot-allocator-dry-run.py SELECTOR_HELPER_ACTIVE=false RESULT=PASS_R20QW_VM121_READONLY_AUDIT