- Consolidated documentation from Ralph Loop iterations - Archived 20+ outdated/superseded files to .archive/ - Kept essential docs: OIDC integration, mobile setup, quick start - Added operational scripts for health monitoring and backup - Research artifacts preserved in .tasks/artifacts/ Current state: - 3 VPS sites (fry, proton, photon) ONLINE in Pangolin - brn-home site pending for local services (Jellyfin, etc.) - Mobile access configuration pending Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
60 lines
2.3 KiB
Bash
Executable File
60 lines
2.3 KiB
Bash
Executable File
#!/bin/bash
|
|
# SSO Infrastructure Health Monitor
|
|
# Created by Ralph Loop Iteration 11
|
|
|
|
echo "=========================================="
|
|
echo "SSO Infrastructure Health Check"
|
|
echo "Time: $(date -Iseconds)"
|
|
echo "=========================================="
|
|
echo ""
|
|
|
|
# Check Authentik
|
|
echo "📊 Authentik Status (sso.obr.sh):"
|
|
cd /srv/docker/authentik
|
|
sudo docker compose ps --format " {{.Name}}: {{.Status}}" 2>/dev/null
|
|
AUTHENTIK_HTTP=$(curl -s -o /dev/null -w "%{http_code}" -m 3 -k https://sso.obr.sh 2>/dev/null || echo "FAIL")
|
|
echo " HTTP Status: $AUTHENTIK_HTTP"
|
|
echo ""
|
|
|
|
# Check Pangolin
|
|
echo "🦎 Pangolin Status (tunnel.obr.sh):"
|
|
cd /srv/docker/pangolin
|
|
sudo docker compose ps --format " {{.Name}}: {{.Status}}" 2>/dev/null
|
|
PANGOLIN_HTTP=$(curl -s -o /dev/null -w "%{http_code}" -m 3 -k https://tunnel.obr.sh 2>/dev/null || echo "FAIL")
|
|
echo " HTTP Status: $PANGOLIN_HTTP"
|
|
PANGOLIN_TOKEN=$(sudo docker compose logs pangolin 2>/dev/null | grep "Token:" | tail -1 | awk '{print $2}')
|
|
if [ -n "$PANGOLIN_TOKEN" ]; then
|
|
echo " Setup Token: $PANGOLIN_TOKEN"
|
|
fi
|
|
echo ""
|
|
|
|
# Check Guacamole
|
|
echo "🖥️ Guacamole Status (remote.obr.sh):"
|
|
cd /srv/docker/guacamole
|
|
sudo docker compose ps --format " {{.Name}}: {{.Status}}" 2>/dev/null
|
|
GUAC_HTTP=$(curl -s -o /dev/null -w "%{http_code}" -m 3 -k https://remote.obr.sh/guacamole/ 2>/dev/null || echo "FAIL")
|
|
echo " HTTP Status: $GUAC_HTTP"
|
|
echo ""
|
|
|
|
# Check Network
|
|
echo "🌐 Network Status:"
|
|
echo " LAN (br0): $(ip addr show br0 2>/dev/null | grep 'inet ' | awk '{print $2}' || echo 'ERROR')"
|
|
echo " WAN (enp131s0): $(ip addr show enp131s0 2>/dev/null | grep 'inet ' | head -1 | awk '{print $2}' || echo 'ERROR')"
|
|
NAT_RULE=$(sudo nft list table ip nat 2>/dev/null | grep "10.50.0.0/24 masquerade" && echo "✅ ACTIVE" || echo "❌ MISSING")
|
|
echo " NAT Masquerade (10.50.0.0/24): $NAT_RULE"
|
|
INTERNET=$(ping -c 1 -W 1 8.8.8.8 >/dev/null 2>&1 && echo "✅ WORKING" || echo "❌ FAILED")
|
|
echo " Internet Access: $INTERNET"
|
|
echo ""
|
|
|
|
# Overall Status
|
|
echo "=========================================="
|
|
if [[ "$AUTHENTIK_HTTP" == "302" || "$AUTHENTIK_HTTP" == "200" ]] && \
|
|
[[ "$PANGOLIN_HTTP" == "200" ]] && \
|
|
[[ "$GUAC_HTTP" == "200" ]] && \
|
|
[[ "$INTERNET" == "✅ WORKING" ]]; then
|
|
echo "✅ ALL SYSTEMS OPERATIONAL"
|
|
else
|
|
echo "⚠️ SOME ISSUES DETECTED - Review above"
|
|
fi
|
|
echo "=========================================="
|