file on host-aa516a · linux.nginx
/etc/nginx/sites-available/word-b01a24
in order locked by rule
- Live
2cd3227a82f9- Approved
2cd3227a82f9matches liveapproved 24 Oct 2026 19:57 UTC by operator- Recommended (template)
- /etc/nginx/sites-available/* · fileon drift rollback; no copy investigate_ticket; hold up to 24 h; alert on_fix, P1
- Lock
- locked by rule rule-6c41a25a00c404c8 critical
- Verdict
- no finding: the latest pass found it in order
- Last change
- no record
- Changed by
- no record
Live against approved
Live matches the approved value 2cd3227a82f9, approved 24 Oct 2026 19:57 UTC by operator.
Restore proof
The copy at the vault's head:
- vault commit
321fcfe4taken 25 Oct 2026 13:53 UTC · nginx-t ok_with_gaps, 16 gaps, validated 25 Oct 2026 13:54 UTCthe 16 gaps its validation names
/etc/letsencrypt/live/host-18efce.ai/fullchain.pem, /etc/letsencrypt/live/host-18efce.ai/privkey.pem, /etc/letsencrypt/live/host-492568.ai/fullchain.pem, /etc/letsencrypt/live/host-492568.ai/privkey.pem, /etc/letsencrypt/live/host-503b27.ai/fullchain.pem, /etc/letsencrypt/live/host-503b27.ai/privkey.pem, /etc/letsencrypt/live/host-a00d2f.ai/fullchain.pem, /etc/letsencrypt/live/host-a00d2f.ai/privkey.pem, /etc/letsencrypt/live/host-c907ae.ai/fullchain.pem, /etc/letsencrypt/live/host-c907ae.ai/privkey.pem, /etc/letsencrypt/live/host-c9c1ae.club/fullchain.pem, /etc/letsencrypt/live/host-c9c1ae.club/privkey.pem, /etc/letsencrypt/options-ssl-nginx.conf, /etc/letsencrypt/ssl-dhparams.pem, /etc/ssl/word-8173ec/origin.crt, /etc/ssl/word-8173ec/origin.key
What a restore would regress
A restore of host-aa516a from its newest backup keeps this file's approved value. For the host: Restoring host-aa516a from its latest backup would regress no approved setting.
References
server[host-503b27.ai:443].ssl_certificatenames cert /etc/letsencrypt/live/host-503b27.ai/fullchain.pemserver[host-503b27.ai:443].server_name[host-27618a.ai]names dns_name host-27618a.airesolves in the latest DNS run to A ip-6b6bba proxiedserver[host-503b27.ai:443].server_name[host-503b27.ai]names dns_name host-503b27.airesolves in the latest DNS run to TXT "v=spf1 include:host-46af70.com -all", TXT "MS=ms25926860", TXT "google-site-verification=<secret:value:45089257>", MX host-fd3013.com, TXT "MS=ms29230297", A ip-6b6bba proxiedserver[host-503b27.ai:80].server_name[host-27618a.ai]names dns_name host-27618a.airesolves in the latest DNS run to A ip-6b6bba proxiedserver[host-503b27.ai:80].server_name[host-503b27.ai]names dns_name host-503b27.airesolves in the latest DNS run to TXT "v=spf1 include:host-46af70.com -all", TXT "MS=ms25926860", TXT "google-site-verification=<secret:value:45089257>", MX host-fd3013.com, TXT "MS=ms29230297", A ip-6b6bba proxied
Decisions
No finding on this object: the latest pass found it in order.
Action history
The agent took no action on this object.
Change window
No change window is open on this object: a drift is rolled back at the next cycle under the rule.