>>> [router-machine-close] machine=vm103 mode=--publish
>>> [vm103-source] precheck
MODE=--publish
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm103.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm103
>>> [vm103-source] run VM103 git publisher through approved direct SSH
>>> [vm103-git] precheck
MODE=--publish
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=acb2df6ef6b283806374d8fc1bb1fd2b236a4043469f40fd06591fedf06e2479
MACHINE_ID=vm103
GIT_DIR=/root/.vm103-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm103.git
LOCAL_HEAD=84dd30448be6cfe3fba171ca8d3e8bf338d265af
>>> [vm103-git] verify remote branch
REMOTE_HEAD=84dd30448be6cfe3fba171ca8d3e8bf338d265af
>>> [vm103-git] build current project allowlist
>>> [vm103-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=16
TRACKED_COUNT=13
MANAGED_UNION_COUNT=16
>>> [vm103-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm103-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm103-git] build simulated git index
STAGED_CHANGE_COUNT=6
=== STAGED PATHS ===
etc/caddy/Caddyfile
etc/router-machine-git-source.conf
etc/systemd/system/router-vm103-admin-cert-renew.service
etc/systemd/system/router-vm103-admin-cert-renew.timer
etc/wg-paid-machine-role
usr/local/sbin/router-vm103-admin-cert-renew.sh
>>> [vm103-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=25f5e67a3fa60415f4beb5613ade0c132f3e77ed
SIMULATED_TREE_FILE_COUNT=16
>>> [vm103-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm103-git] keyword review scan
=== FILES REQUIRING KEYWORD REVIEW ===
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:etc/caddy/Caddyfile
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:etc/wg-paid-machine-role
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:srv/wg-paid/access-web/login.html
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:srv/wg-paid/access-web/magic.html
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:srv/wg-paid/admin-web/index.html
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:srv/wg-paid/web-meta/robots.txt
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:srv/wg-paid/web-meta/sitemap-reports.xml
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:srv/wg-paid/web-meta/sitemap-reports001.xml
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:usr/local/sbin/router-machine-git-publish.sh
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:usr/local/sbin/router-vm103-admin-cert-renew.sh
25f5e67a3fa60415f4beb5613ade0c132f3e77ed:usr/local/sbin/router-vm103-ingress-health.sh
>>> [vm103-git] verify real git index has no pre-staged changes
>>> [vm103-git] install validated simulated index
>>> [vm103-git] create commit
[main bb0f84f] vm103: publish managed source 2026-08-26T07:35:36Z
 6 files changed, 94 insertions(+), 16 deletions(-)
 create mode 100644 etc/systemd/system/router-vm103-admin-cert-renew.service
 create mode 100644 etc/systemd/system/router-vm103-admin-cert-renew.timer
 create mode 100755 usr/local/sbin/router-vm103-admin-cert-renew.sh
NEW_COMMIT=bb0f84f6c17eaeadec956a709e21d43d31a58e2c
NEW_TREE=25f5e67a3fa60415f4beb5613ade0c132f3e77ed
>>> [vm103-git] push branch to remote
To github.com:DChuvelev/wg-paid-vm103.git
   84dd304..bb0f84f  main -> main
>>> [vm103-git] verify remote commit
LOCAL_COMMIT=bb0f84f6c17eaeadec956a709e21d43d31a58e2c
REMOTE_COMMIT=bb0f84f6c17eaeadec956a709e21d43d31a58e2c

RESULT=PASS_VM103_GIT_PUBLISH
MACHINE_ID=vm103
GIT_COMMIT=bb0f84f6c17eaeadec956a709e21d43d31a58e2c
GIT_TREE=25f5e67a3fa60415f4beb5613ade0c132f3e77ed
GIT_FILE_COUNT=16
COMMIT_CREATED=true
PUSH_PERFORMED=true
REPOSITORY=https://github.com/DChuvelev/wg-paid-vm103

VM103_RESULT=PASS_VM103_GIT_PUBLISH
VM103_COMMIT=bb0f84f6c17eaeadec956a709e21d43d31a58e2c
VM103_REMOTE_COMMIT=bb0f84f6c17eaeadec956a709e21d43d31a58e2c
>>> [vm103-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm103.git
From https://github.com/DChuvelev/wg-paid-vm103
 * branch            main       -> FETCH_HEAD
   84dd304..bb0f84f  main       -> origin/main
Reset branch 'main'
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at bb0f84f vm103: publish managed source 2026-08-26T07:35:36Z

VM130_COMMIT=bb0f84f6c17eaeadec956a709e21d43d31a58e2c
VM130_TREE=25f5e67a3fa60415f4beb5613ade0c132f3e77ed
VM130_FILE_COUNT=16
VM130_STATUS=CLEAN
>>> [vm103-source] verify required managed paths
REQUIRED_PATH_OK=etc/router-machine-git-source.conf
REQUIRED_PATH_OK=etc/wg-paid-machine-role
REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh
REQUIRED_PATH_OK=usr/local/sbin/router-vm103-git-publish.sh
>>> [vm103-source] create archive and metadata from exact Git commit
ARCHIVE=/tmp/vm103-git-source-publish.l7MW7N/wg-paid-vm103-bb0f84f6c17e.tar.gz
ARCHIVE_SHA256=821891130f607234730062dc35255e756bd553b0183cc70a81e0f860ace91176
ARCHIVE_BASE64=/tmp/vm103-git-source-publish.l7MW7N/wg-paid-vm103-bb0f84f6c17e.tar.gz.b64.txt
MANIFEST=/tmp/vm103-git-source-publish.l7MW7N/git-tree-manifest.txt
PATHS=/tmp/vm103-git-source-publish.l7MW7N/managed-paths.txt
FACTS=/tmp/vm103-git-source-publish.l7MW7N/facts.json
>>> [vm103-source] publish atomically into latest/ and archive prior version into old/
PUBLISHED_DIR=/opt/router-ops/public/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260826-073541_vm103_git_source_bb0f84f6c17e
PUBLISHED_RELATIVE_PATH=latest/20260826-073541_vm103_git_source_bb0f84f6c17e
PUBLIC_OBJECT_KIND=vm103
PREVIOUS_MOVED_COUNT=1
COLLISION_DEDUPLICATED_COUNT=0
PUBLICATION_REUSED=false
PUBLICATION_TRANSACTION_ID=20260826-073541_3625177_9501
PUBLICATION_COMMITTED=true
LOCAL_POSTCHECK=PASS
LATEST_INDEX_CONTAINS_FOLDER=true
LOCAL_INDEX=http://192.168.30.84:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/
LATEST_ROOT_URL=https://reports.secret-studio.ru/latest/
OLD_ROOT_URL=https://reports.secret-studio.ru/old/
PUBLIC_INDEX=https://reports.secret-studio.ru/latest/
PUBLIC_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/
VM103_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/
TRYCF_INDEX=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/
TRYCF_REPORT=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/
VM103_REPORT_MIRROR=PASS
RESULT=PASS_ROUTER_PUBLISH_REPORT
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=34be258abc0650d493169cedda002694ec9fce83fd65dbf4ceafa80ee2791865
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=34be258abc0650d493169cedda002694ec9fce83fd65dbf4ceafa80ee2791865
HTTP_OUTPUT=/tmp/vm103-git-source-publish.l7MW7N/http-index.html
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=821891130f607234730062dc35255e756bd553b0183cc70a81e0f860ace91176
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/wg-paid-vm103-bb0f84f6c17e.tar.gz
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=821891130f607234730062dc35255e756bd553b0183cc70a81e0f860ace91176
HTTP_OUTPUT=/tmp/vm103-git-source-publish.l7MW7N/http-archive.tar.gz
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=d89e140e033e413d4e3da46c82d114c92b54d54c746740c0bec71e87099bd141
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/facts.json
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=d89e140e033e413d4e3da46c82d114c92b54d54c746740c0bec71e87099bd141
HTTP_OUTPUT=/tmp/vm103-git-source-publish.l7MW7N/http-facts.json
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=ca47a03cfb09f07db5c7eacf2b190bd8ca0c748b1bb3d02e0f592eacd0aaec82
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/git-tree-manifest.txt
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=ca47a03cfb09f07db5c7eacf2b190bd8ca0c748b1bb3d02e0f592eacd0aaec82
HTTP_OUTPUT=/tmp/vm103-git-source-publish.l7MW7N/http-manifest.txt
>>> [vm103-source] save current source archive state

RESULT=PASS_VM130_VM103_GIT_SOURCE_PUBLISH
VM103_GIT_SOURCE_COMMIT=bb0f84f6c17eaeadec956a709e21d43d31a58e2c
VM103_GIT_SOURCE_TREE=25f5e67a3fa60415f4beb5613ade0c132f3e77ed
VM103_GIT_SOURCE_FILE_COUNT=16
VM103_GIT_SOURCE_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/
VM103_GIT_SOURCE_ARCHIVE_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/wg-paid-vm103-bb0f84f6c17e.tar.gz
VM103_GIT_SOURCE_ARCHIVE_B64_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/wg-paid-vm103-bb0f84f6c17e.tar.gz.b64.txt
VM103_GIT_SOURCE_FACTS_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/facts.json
VM103_GIT_SOURCE_MANIFEST_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/git-tree-manifest.txt
VM103_GIT_SOURCE_ARCHIVE_SHA256=821891130f607234730062dc35255e756bd553b0183cc70a81e0f860ace91176
VM103_PUSH_PERFORMED=true
ARCHIVE_CREATED=true
PUBLISHER_RESULT=PASS_ROUTER_PUBLISH_REPORT
PUBLISHER_RC=0
PUBLISHER_RC_NONZERO_SALVAGED=false
PUBLICATION_COMMITTED=true
LOCAL_POSTCHECK=PASS
LATEST_INDEX_CONTAINS_FOLDER=true
HTTP_POSTCHECK=PASS
SOURCE_STATE_UPDATED=true
PERMANENT_HTTPS_PUBLISHED=true
RESULT=PASS_ROUTER_MACHINE_CLOSE
MACHINE=vm103
DESCRIPTION=P27E4B3 R01 public trusted admin TLS via RU-CENTER DNS-01
COMMIT=bb0f84f6c17eaeadec956a709e21d43d31a58e2c
TREE=25f5e67a3fa60415f4beb5613ade0c132f3e77ed
GIT_FILE_COUNT=16
SOURCE_PUBLISH_BACKEND=/opt/router-ops/bin/router-vm103-git-source-publish
BACKEND_LOG=/opt/router-ops/state/machine-close-runs/20260826-073534_vm103_3625134/backend.txt
BACKEND_RC=0
BACKEND_RC_NONZERO_SALVAGED=false
CLASSIFICATION=PASS_AUTHORITATIVE_BACKEND_AND_PUBLICATION
VM103_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260826-073541_vm103_git_source_bb0f84f6c17e/