client-1pass decided 25 Oct 2026 14:17 UTCsample mode

Work queue Settings

file on host-aa516a · linux.nginx

/etc/nginx/conf.d/word-92cb1d-prod-club.conf

in order locked by rule

Live
5e1c6620095f
Approved
5e1c6620095f matches liveapproved 24 Oct 2026 19:57 UTC by operator
Recommended (template)
/etc/nginx/conf.d/*.conf · fileon drift rollback; no copy investigate_ticket; hold up to 24 h; alert on_fix, P1
Lock
locked by rule rule-e186e9d5790a7e6b critical
Verdict
no finding: the latest pass found it in order
Last change
no record
Changed by
no record

Live against approved

Live matches the approved value 5e1c6620095f, approved 24 Oct 2026 19:57 UTC by operator.

Restore proof

The copy at the vault's head:

  • vault commit 321fcfe4 taken 25 Oct 2026 13:53 UTC · nginx-t ok_with_gaps, 16 gaps, validated 25 Oct 2026 13:54 UTC
    the 16 gaps its validation names/etc/letsencrypt/live/host-18efce.ai/fullchain.pem, /etc/letsencrypt/live/host-18efce.ai/privkey.pem, /etc/letsencrypt/live/host-492568.ai/fullchain.pem, /etc/letsencrypt/live/host-492568.ai/privkey.pem, /etc/letsencrypt/live/host-503b27.ai/fullchain.pem, /etc/letsencrypt/live/host-503b27.ai/privkey.pem, /etc/letsencrypt/live/host-a00d2f.ai/fullchain.pem, /etc/letsencrypt/live/host-a00d2f.ai/privkey.pem, /etc/letsencrypt/live/host-c907ae.ai/fullchain.pem, /etc/letsencrypt/live/host-c907ae.ai/privkey.pem, /etc/letsencrypt/live/host-c9c1ae.club/fullchain.pem, /etc/letsencrypt/live/host-c9c1ae.club/privkey.pem, /etc/letsencrypt/options-ssl-nginx.conf, /etc/letsencrypt/ssl-dhparams.pem, /etc/ssl/word-8173ec/origin.crt, /etc/ssl/word-8173ec/origin.key

What a restore would regress

A restore of host-aa516a from its newest backup keeps this file's approved value. For the host: Restoring host-aa516a from its latest backup would regress no approved setting.

References

  • server[host-c9c1ae.club:80].server_name[host-1bf78f.club] names dns_name host-1bf78f.clubresolves in the latest DNS run to A ip-6b6bba
  • server[host-c9c1ae.club:443].server_name[host-1bf78f.club] names dns_name host-1bf78f.clubresolves in the latest DNS run to A ip-6b6bba
  • server[host-c9c1ae.club:443].ssl_certificate names cert /etc/letsencrypt/live/host-c9c1ae.club/fullchain.pem
  • server[host-c9c1ae.club:80].server_name[host-ccde4f.club] names dns_name host-ccde4f.clubresolves in the latest DNS run to CNAME host-1bf78f.club
  • server[host-c9c1ae.club:443].server_name[host-c9c1ae.club] names dns_name host-c9c1ae.clubresolves in the latest DNS run to A ip-6b6bba
  • server[host-c9c1ae.club:443].server_name[host-ccde4f.club] names dns_name host-ccde4f.clubresolves in the latest DNS run to CNAME host-1bf78f.club
  • server[host-c9c1ae.club:80].server_name[host-c9c1ae.club] names dns_name host-c9c1ae.clubresolves in the latest DNS run to A ip-6b6bba

Decisions

No finding on this object: the latest pass found it in order.

Action history

The agent took no action on this object.

Change window

No change window is open on this object: a drift is rolled back at the next cycle under the rule.