/etc/nginx/sites-available/host-9ac4f1.com

Live

ac96cebdabee

Approved

ac96cebdabee matches liveapproved 24 Oct 2026 19:57 UTC by operator

Recommended (template)

/etc/nginx/sites-available/* · fileon drift rollback; no copy investigate_ticket; hold up to 24 h; alert on_fix, P1

Lock

locked by rule rule-6c41a25a00c404c8 critical

Verdict

adopted site with no DNS recordaccepted exception mem-4 holds until 30 Nov 2026 00:00 UTC (Personal estate, known and intentional: proxied names without real_ip and the leftover records are not a production risk.); the checks alone would say ESCALATEadopted site with no DNS recordaccepted exception mem-16 holds until 30 Nov 2026 00:00 UTC (Personal estate, known and intentional: proxied names without real_ip and the leftover records are not a production risk.); the checks alone would say ESCALATE

Last change

no record

Changed by

no record

Live against approved

Live matches the approved value ac96cebdabee, approved 24 Oct 2026 19:57 UTC by operator.

Restore proof

The copy at the vault's head:

• vault commit 6e1d81ce taken 25 Oct 2026 13:53 UTC · nginx-t ok_with_gaps, 13 gaps, validated 25 Oct 2026 13:54 UTC
  the 13 gaps its validation names

  /etc/letsencrypt/live/host-17a03d.info/fullchain.pem, /etc/letsencrypt/live/host-17a03d.info/privkey.pem, /etc/letsencrypt/live/host-4c795e.quest/fullchain.pem, /etc/letsencrypt/live/host-4c795e.quest/privkey.pem, /etc/letsencrypt/live/host-525a57.com/fullchain.pem, /etc/letsencrypt/live/host-525a57.com/privkey.pem, /etc/letsencrypt/live/host-9ac4f1.com/fullchain.pem, /etc/letsencrypt/live/host-9ac4f1.com/privkey.pem, /etc/letsencrypt/live/host-f324df.com/fullchain.pem, /etc/letsencrypt/live/host-f324df.com/privkey.pem, /etc/letsencrypt/options-ssl-nginx.conf, /etc/letsencrypt/ssl-dhparams.pem, /etc/nginx/snippets/word-9af24b-api-key.conf

What a restore would regress

A restore of host-4b4dc1 from its newest backup keeps this file's approved value. For the host: Restoring host-4b4dc1 from its latest backup would regress no approved setting.

References

• server[host-9ac4f1.com:443].ssl_certificate names cert /etc/letsencrypt/live/host-9ac4f1.com/fullchain.pem
• server[host-9ac4f1.com:80].server_name[host-9ac4f1.com] names dns_name host-9ac4f1.comno record of that name in the latest DNS run
• server[host-9ac4f1.com:443].server_name[host-9ac4f1.com] names dns_name host-9ac4f1.comno record of that name in the latest DNS run
• server[host-9ac4f1.com:443].server_name[host-89f6e7.com] names dns_name host-89f6e7.comno record of that name in the latest DNS run
• server[host-9ac4f1.com:80].server_name[host-89f6e7.com] names dns_name host-89f6e7.comno record of that name in the latest DNS run

Decisions

• ADOPTsite with no DNS record · server[host-9ac4f1.com:443].server_name[host-89f6e7.com]accepted exception mem-4 holds until 30 Nov 2026 00:00 UTC (Personal estate, known and intentional: proxied names without real_ip and the leftover records are not a production risk.); the checks alone would say ESCALATEuntil 30 Nov 2026 00:00 UTC · decided 25 Oct 2026 14:17 UTC by operator · fnd-3661fcc541693ada
• ADOPTsite with no DNS record · server[host-9ac4f1.com:443].server_name[host-9ac4f1.com]accepted exception mem-16 holds until 30 Nov 2026 00:00 UTC (Personal estate, known and intentional: proxied names without real_ip and the leftover records are not a production risk.); the checks alone would say ESCALATEuntil 30 Nov 2026 00:00 UTC · decided 25 Oct 2026 14:17 UTC by operator · fnd-add52203af12de8a

Action history

The agent took no action on this object.

Change window

No change window is open on this object: a drift is rolled back at the next cycle under the rule.