{
  "host": "vmi3680972",
  "generated_at": "2026-10-20T04:48:47.006252801Z",
  "duration_ms": 6145,
  "overall": "crit",
  "sections": [
    {
      "id": "system",
      "title": "Sistema",
      "checks": [
        {
          "name": "os",
          "status": "ok",
          "value": "NixOS 26.05 (Yarara)"
        },
        {
          "name": "kernel",
          "status": "ok",
          "value": "6.18.57"
        },
        {
          "name": "hardware",
          "status": "ok",
          "value": "Standard PC (i440FX + PIIX, 1996)"
        },
        {
          "name": "uptime",
          "status": "ok",
          "value": "2h 49m"
        },
        {
          "name": "virtualização",
          "status": "ok",
          "value": "kvm"
        },
        {
          "name": "geração NixOS",
          "status": "ok",
          "value": "11"
        },
        {
          "name": "relógio (NTP)",
          "status": "ok",
          "value": "sincronizado=yes",
          "detail": "fuso UTC"
        }
      ]
    },
    {
      "id": "cpu",
      "title": "CPU e carga",
      "checks": [
        {
          "name": "modelo",
          "status": "ok",
          "value": "AMD EPYC Processor (with IBPB) × 4"
        },
        {
          "name": "load 1/5/15",
          "status": "ok",
          "value": "0.04 0.02 0.00",
          "detail": "0.01 por núcleo"
        },
        {
          "name": "uso de CPU",
          "status": "ok",
          "value": "51.1%",
          "detail": "amostra de 250ms"
        }
      ]
    },
    {
      "id": "memory",
      "title": "Memória",
      "checks": [
        {
          "name": "RAM disponível",
          "status": "ok",
          "value": "7.2 GiB de 7.8 GiB (93%)"
        },
        {
          "name": "swap usada",
          "status": "ok",
          "value": "0 B de 4.0 GiB (0%)"
        }
      ]
    },
    {
      "id": "disk",
      "title": "Disco",
      "checks": [
        {
          "name": "espaço em /",
          "status": "ok",
          "value": "9.4 GiB de 97.9 GiB (10.2%)"
        },
        {
          "name": "inodes em /",
          "status": "ok",
          "value": "223840 de 6553600 (3.4%)"
        }
      ]
    },
    {
      "id": "network",
      "title": "Rede",
      "checks": [
        {
          "name": "interface ens18",
          "status": "ok",
          "value": "UP",
          "detail": "109.205.178.218/32 2a02:c207:2368:972::1/64 fe80::250:56ff:fe68:96f3/64"
        },
        {
          "name": "rota default IPv4",
          "status": "ok",
          "value": "via 109.205.176.1"
        },
        {
          "name": "rota default IPv6",
          "status": "ok",
          "value": "via fe80::1"
        },
        {
          "name": "tráfego desde o boot",
          "status": "ok",
          "value": "↓ 1.5 GiB  ↑ 69.2 MiB"
        },
        {
          "name": "saída IPv4 (TCP 1.1.1.1:443)",
          "status": "ok",
          "value": "15.9ms"
        },
        {
          "name": "saída IPv6 (TCP [2606:4700:4700::1111]:443)",
          "status": "warn",
          "value": "falhou",
          "detail": "dial tcp [2606:4700:4700::1111]:443: i/o timeout"
        },
        {
          "name": "DNS (cache.nixos.org)",
          "status": "crit",
          "value": "falhou",
          "detail": "lookup cache.nixos.org: i/o timeout"
        }
      ],
      "tables": [
        {
          "title": "interfaces",
          "header": [
            "interface",
            "estado",
            "endereços"
          ],
          "rows": [
            [
              "lo",
              "UNKNOWN",
              "127.0.0.1/8  ::1/128"
            ],
            [
              "ens18",
              "UP",
              "109.205.178.218/32  2a02:c207:2368:972::1/64  fe80::250:56ff:fe68:96f3/64"
            ]
          ]
        },
        {
          "title": "rotas",
          "header": [
            "família",
            "destino",
            "gateway",
            "dev",
            "proto",
            "flags"
          ],
          "rows": [
            [
              "IPv4",
              "default",
              "109.205.176.1",
              "ens18",
              "static",
              "onlink"
            ],
            [
              "IPv6",
              "2a02:c207:2368:972::/64",
              "",
              "ens18",
              "kernel",
              ""
            ],
            [
              "IPv6",
              "fe80::/64",
              "",
              "ens18",
              "kernel",
              ""
            ],
            [
              "IPv6",
              "default",
              "fe80::1",
              "ens18",
              "static",
              ""
            ]
          ]
        }
      ]
    },
    {
      "id": "security",
      "title": "Segurança",
      "checks": [
        {
          "name": "sshd PasswordAuthentication",
          "status": "ok",
          "value": "no"
        },
        {
          "name": "sshd PermitRootLogin",
          "status": "ok",
          "value": "prohibit-password"
        },
        {
          "name": "sshd KbdInteractiveAuthentication",
          "status": "ok",
          "value": "no"
        },
        {
          "name": "firewall: portas abertas",
          "status": "ok",
          "value": "tcp/22 tcp/443 tcp/80",
          "detail": "esperado: tcp/22 tcp/443 tcp/80"
        },
        {
          "name": "SSH recusado em 24 h",
          "status": "ok",
          "value": "220",
          "detail": "tentativas barradas (só chave é aceita)"
        },
        {
          "name": "portas públicas em escuta",
          "status": "ok",
          "value": "tcp/22 tcp/443 tcp/80",
          "detail": "o firewall ainda filtra o que não estiver liberado"
        }
      ],
      "tables": [
        {
          "title": "sockets TCP em escuta",
          "header": [
            "endereço",
            "processo",
            "exposição"
          ],
          "rows": [
            [
              "127.0.0.1:2019",
              "?",
              "loopback"
            ],
            [
              "127.0.0.54:53",
              "?",
              "loopback"
            ],
            [
              "127.0.0.1:8443",
              "?",
              "loopback"
            ],
            [
              "127.0.0.1:9100",
              "diag",
              "loopback"
            ],
            [
              "127.0.0.1:8082",
              "?",
              "loopback"
            ],
            [
              "127.0.0.1:8080",
              "?",
              "loopback"
            ],
            [
              "127.0.0.1:8081",
              "?",
              "loopback"
            ],
            [
              "127.0.0.53%lo:53",
              "?",
              "loopback"
            ],
            [
              "0.0.0.0:22",
              "?",
              "pública"
            ],
            [
              "*:443",
              "?",
              "pública"
            ],
            [
              "*:80",
              "?",
              "pública"
            ],
            [
              "[::]:22",
              "?",
              "pública"
            ]
          ]
        }
      ]
    },
    {
      "id": "systemd",
      "title": "systemd",
      "checks": [
        {
          "name": "unidades com falha",
          "status": "ok",
          "value": "0"
        },
        {
          "name": "sshd.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "systemd-networkd.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "systemd-resolved.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "systemd-timesyncd.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "edgeproxy-http.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "edgeproxy-https.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "caddy.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "nix-gc.timer",
          "status": "ok",
          "value": "active (waiting)"
        }
      ]
    },
    {
      "id": "nix",
      "title": "Nix",
      "checks": [
        {
          "name": "versão",
          "status": "ok",
          "value": "nix (Nix) 2.34.9"
        },
        {
          "name": "closure do sistema",
          "status": "ok",
          "value": "1.4 GiB"
        },
        {
          "name": "gerações guardadas",
          "status": "ok",
          "value": "11"
        }
      ]
    },
    {
      "id": "edge",
      "title": "Borda: edgeproxy → Caddy",
      "checks": [
        {
          "name": "edgeproxy-http.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "edgeproxy-http listener",
          "status": "ok",
          "value": "127.0.0.1:80",
          "detail": "310µs"
        },
        {
          "name": "edgeproxy-http API /health",
          "status": "ok",
          "value": "ok",
          "detail": "edgeproxy 0.2.0"
        },
        {
          "name": "edgeproxy-http → backend",
          "status": "ok",
          "value": "127.0.0.1:8080",
          "detail": "280µs"
        },
        {
          "name": "edgeproxy-https.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "edgeproxy-https listener",
          "status": "ok",
          "value": "127.0.0.1:443",
          "detail": "140µs"
        },
        {
          "name": "edgeproxy-https API /health",
          "status": "ok",
          "value": "ok",
          "detail": "edgeproxy 0.2.0"
        },
        {
          "name": "edgeproxy-https → backend",
          "status": "ok",
          "value": "127.0.0.1:8443",
          "detail": "160µs"
        },
        {
          "name": "caddy.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "Caddy admin API",
          "status": "ok",
          "value": "200",
          "detail": "3303 bytes de config"
        }
      ],
      "tables": [
        {
          "title": "routing.db",
          "header": [
            "instância",
            "id",
            "região",
            "backend",
            "healthy",
            "peso"
          ],
          "rows": null
        }
      ]
    },
    {
      "id": "site-diag",
      "title": "Site: nixos.bassi.engineer",
      "checks": [
        {
          "name": "diag.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "upstream",
          "status": "ok",
          "value": "127.0.0.1:9100",
          "detail": "250µs"
        },
        {
          "name": "HTTPS público",
          "status": "crit",
          "value": "falhou",
          "detail": "Get \"https://nixos.bassi.engineer/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)"
        },
        {
          "name": "certificado",
          "status": "ok",
          "value": "90 dias",
          "detail": "emissor YE1, vence 2027-01-18"
        },
        {
          "name": "descrição",
          "status": "ok",
          "value": "diagnóstico técnico da VPS"
        }
      ]
    },
    {
      "id": "site-runner-codes",
      "title": "Site: runner.codes",
      "checks": [
        {
          "name": "caddy.service",
          "status": "ok",
          "value": "active (running)"
        },
        {
          "name": "upstream",
          "status": "ok",
          "value": "estático (Caddy file_server)"
        },
        {
          "name": "HTTPS público",
          "status": "crit",
          "value": "falhou",
          "detail": "Get \"https://runner.codes/\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)"
        },
        {
          "name": "certificado",
          "status": "ok",
          "value": "90 dias",
          "detail": "emissor YE1, vence 2027-01-18"
        },
        {
          "name": "descrição",
          "status": "ok",
          "value": "runner.codes: hello world estático (Nix + Caddy file_server)"
        }
      ]
    }
  ]
}