root@vmi3680972:~# diag --all

OK vmi3680972

gerado 2026-10-20 04:00:34 UTC coleta 442 ms recarrega a cada 30 s /api/status

OK Sistema

OK	os	NixOS 26.05 (Yarara)
OK	kernel	6.18.57
OK	hardware	Standard PC (i440FX + PIIX, 1996)
OK	uptime	2h 1m
OK	virtualização	kvm
OK	geração NixOS	11
OK	relógio (NTP)	sincronizado=yes	fuso UTC

OK CPU e carga

OK	modelo	AMD EPYC Processor (with IBPB) × 4
OK	load 1/5/15	0.08 0.04 0.18	0.02 por núcleo
OK	uso de CPU	46.0%	amostra de 250ms

OK Memória

OK	RAM disponível	7.2 GiB de 7.8 GiB (93%)
OK	swap usada	0 B de 4.0 GiB (0%)

OK Disco

OK	espaço em /	9.4 GiB de 97.9 GiB (10.2%)
OK	inodes em /	223840 de 6553600 (3.4%)

OK Rede

OK	interface ens18	UP	109.205.178.218/32 2a02:c207:2368:972::1/64 fe80::250:56ff:fe68:96f3/64
OK	rota default IPv4	via 109.205.176.1
OK	rota default IPv6	via fe80::1
OK	tráfego desde o boot	↓ 1.5 GiB ↑ 67.5 MiB
OK	saída IPv4 (TCP 1.1.1.1:443)	3.4ms
OK	saída IPv6 (TCP [2606:4700:4700::1111]:443)	7.4ms
OK	DNS (cache.nixos.org)	2a04:4e42:400::347 2a04:4e42:600::347 2a04:4e42::347 2a04:4e42:200::347 151.101.65.91 151.101.129.91 151.101.193.91 151.101.1.91

interfaces (2)

interface	estado	endereços
lo	UNKNOWN	127.0.0.1/8 ::1/128
ens18	UP	109.205.178.218/32 2a02:c207:2368:972::1/64 fe80::250:56ff:fe68:96f3/64

rotas (4)

família	destino	gateway	dev	proto	flags
IPv4	default	109.205.176.1	ens18	static	onlink
IPv6	2a02:c207:2368:972::/64		ens18	kernel
IPv6	fe80::/64		ens18	kernel
IPv6	default	fe80::1	ens18	static

OK Segurança

OK	sshd PasswordAuthentication	no
OK	sshd PermitRootLogin	prohibit-password
OK	sshd KbdInteractiveAuthentication	no
OK	firewall: portas abertas	tcp/22 tcp/443 tcp/80	esperado: tcp/22 tcp/443 tcp/80
OK	SSH recusado em 24 h	160	tentativas barradas (só chave é aceita)
OK	portas públicas em escuta	tcp/22 tcp/443 tcp/80	o firewall ainda filtra o que não estiver liberado

sockets TCP em escuta (12)

endereço	processo	exposição
127.0.0.1:2019	?	loopback
127.0.0.54:53	?	loopback
127.0.0.1:8443	?	loopback
127.0.0.1:9100	diag	loopback
127.0.0.1:8082	?	loopback
127.0.0.1:8080	?	loopback
127.0.0.1:8081	?	loopback
127.0.0.53%lo:53	?	loopback
0.0.0.0:22	?	pública
*:443	?	pública
*:80	?	pública
[::]:22	?	pública

OK systemd

OK	unidades com falha	0
OK	sshd.service	active (running)
OK	systemd-networkd.service	active (running)
OK	systemd-resolved.service	active (running)
OK	systemd-timesyncd.service	active (running)
OK	edgeproxy-http.service	active (running)
OK	edgeproxy-https.service	active (running)
OK	caddy.service	active (running)
OK	nix-gc.timer	active (waiting)

OK Nix

OK	versão	nix (Nix) 2.34.9
OK	closure do sistema	1.4 GiB
OK	gerações guardadas	11

OK Borda: edgeproxy → Caddy

OK	edgeproxy-http.service	active (running)
OK	edgeproxy-http listener	127.0.0.1:80	3.31ms
OK	edgeproxy-http API /health	ok	edgeproxy 0.2.0
OK	edgeproxy-http → backend	127.0.0.1:8080	210µs
OK	edgeproxy-https.service	active (running)
OK	edgeproxy-https listener	127.0.0.1:443	230µs
OK	edgeproxy-https API /health	ok	edgeproxy 0.2.0
OK	edgeproxy-https → backend	127.0.0.1:8443	140µs
OK	caddy.service	active (running)
OK	Caddy admin API	200	3303 bytes de config

routing.db (0)

instância	id	região	backend	healthy	peso

OK Site: nixos.bassi.engineer

OK	diag.service	active (running)
OK	upstream	127.0.0.1:9100	2.45ms
OK	HTTPS público	200	/healthz em 74ms
OK	certificado	90 dias	emissor YE1, vence 2027-01-18
OK	descrição	diagnóstico técnico da VPS

OK Site: runner.codes

OK	caddy.service	active (running)
OK	upstream	estático (Caddy file_server)
OK	HTTPS público	200	/ em 35ms
OK	certificado	90 dias	emissor YE1, vence 2027-01-18
OK	descrição	runner.codes: hello world estático (Nix + Caddy file_server)