windyboy
035587e3bf
Deploy hbbs + hbbr via a safe-by-default Ansible role (playbooks/rustdesk.yml): with rustdesk_confirm=false it only reports whether compose.yml matches live state and refuses to recreate the stack; with rustdesk_confirm=true it deploys and recreates. The relay assert rejects the known-bad hk2.wsvc.info hostname. Add health profiles rustdesk (hbbs/hbbr health, relay DNS) and hk2aux (co-located traefik/adguard/remark42 on hk2), plus the rustdesk-health runbook and AGENTS.md entry. Server image pinned rustdesk/rustdesk-server:1.1.14.
57 lines
2.3 KiB
Django/Jinja
57 lines
2.3 KiB
Django/Jinja
#!/usr/bin/env bash
|
|
set -uo pipefail
|
|
source '{{ healthcheck_install_root }}/health-common.sh'
|
|
|
|
require_command docker
|
|
require_command ss
|
|
|
|
# Auxiliary services co-located on hk2.chans.xyz (separate compose projects
|
|
# under /opt, fronted by Traefik). Verified live 2026-08-12.
|
|
|
|
# traefik
|
|
if docker inspect traefik >/dev/null 2>&1; then
|
|
[[ "$(docker inspect traefik --format '{{ '{{' }}.State.Running{{ '}}' }}' 2>/dev/null)" == true ]] \
|
|
&& record ok 'traefik_running' || record critical 'traefik_not_running'
|
|
else
|
|
record critical 'traefik_container_missing'
|
|
fi
|
|
|
|
# adguardhome (hk2 variant: DoH 5443, DoT 853)
|
|
if docker inspect adguardhome >/dev/null 2>&1; then
|
|
[[ "$(docker inspect adguardhome --format '{{ '{{' }}.State.Running{{ '}}' }}' 2>/dev/null)" == true ]] \
|
|
&& record ok 'adguard_running' || record critical 'adguard_not_running'
|
|
else
|
|
record critical 'adguard_container_missing'
|
|
fi
|
|
|
|
# remark42
|
|
if docker inspect remark42 >/dev/null 2>&1; then
|
|
[[ "$(docker inspect remark42 --format '{{ '{{' }}.State.Running{{ '}}' }}' 2>/dev/null)" == true ]] \
|
|
&& record ok 'remark42_running' || record critical 'remark42_not_running'
|
|
else
|
|
record critical 'remark42_container_missing'
|
|
fi
|
|
|
|
# nginx-manager was removed 2026-08-12 (leftover config, never running).
|
|
# Warn if a container by that name ever reappears.
|
|
if docker inspect nginx-manager >/dev/null 2>&1; then
|
|
record warning 'nginx_manager_unexpectedly_running'
|
|
else
|
|
record ok 'nginx_manager_not_running'
|
|
fi
|
|
|
|
# Listening ports (Traefik 80/443/8080, AdGuard DoH 5443 / DoT 853).
|
|
ss -H -ltn 2>/dev/null | awk '{print $4}' | grep -Eq '(^|:)80$' \
|
|
&& record ok 'traefik_http_80' || record critical 'traefik_http_80_missing'
|
|
ss -H -ltn 2>/dev/null | awk '{print $4}' | grep -Eq '(^|:)443$' \
|
|
&& record ok 'traefik_https_443' || record critical 'traefik_https_443_missing'
|
|
ss -H -ltn 2>/dev/null | awk '{print $4}' | grep -Eq '(^|:)8080$' \
|
|
&& record ok 'traefik_dashboard_8080' || record warning 'traefik_dashboard_8080_missing'
|
|
ss -H -ltn 2>/dev/null | awk '{print $4}' | grep -Eq '(^|:)5443$' \
|
|
&& record ok 'adguard_doh_5443' || record critical 'adguard_doh_5443_missing'
|
|
ss -H -ltn 2>/dev/null | awk '{print $4}' | grep -Eq '(^|:)853$' \
|
|
&& record ok 'adguard_dot_853' || record critical 'adguard_dot_853_missing'
|
|
|
|
emit_result
|
|
exit "$EXIT_CODE"
|