myPKA audit viewer — last 21 events

Source: /mnt/audit/events.jsonl · No filters
reset
tsactorhostactiontarget summarysession_idbackup_pathrollback
2026-05-27T11:14:09Zmack.135pingtest:phase1-prepaudit-emit reachable from automation pipemack-authentik-phase1-20260527——
2026-05-27T10:34:16Zmack.135createdocker:audit-vieweraudit-viewer container live + Traefik file-provider route + Cloudflare Tunnel ingress for audit.bjnoela.com; backfill 19 events; Phase 1 completeaudit-trail-phase1-deploy-2026-05-27/mnt/nas/docker/docker-compose.yml.bak-mack-auditviewer-20260527T103038Z
rollback
cd /mnt/nas/docker && sudo docker compose down audit-viewer && sudo cp docker-compose.yml.bak-mack-auditviewer-20260527T103038Z docker-compose.yml && sudo rm /var/lib/container-data/traefik/config/audit-viewer.yaml
2026-05-27T06:20:00Zmack.135config-editDeliverables/2026-05-26-vaultwarden_mariadb_dump.shWired vaultwarden dump script to call audit_emit.sh on every successful dumpaudit-trail-phase1-2026-05-27Deliverables/2026-05-26-vaultwarden_mariadb_dump.sh.bak-mack-audit-20260527
rollback
cp Deliverables/2026-05-26-vaultwarden_mariadb_dump.sh.bak-mack-audit-20260527 Deliverables/2026-05-26-vaultwarden_mariadb_dump.sh
2026-05-27T06:15:00Zmack.135config-edit.claude/agents/{mack,sentry,hue}.mdUpdated 3 agent shims with mandatory audit-emit section (Phase 1 contract)audit-trail-phase1-2026-05-27.claude/agents/{mack,sentry,hue}.md.bak-mack-audit-20260527
rollback
for f in mack sentry hue; do cp .claude/agents/$f.md.bak-mack-audit-20260527 .claude/agents/$f.md; done
2026-05-27T06:10:00Zmack.135createprojects/audit-viewer/Mack created FastAPI audit-viewer staging (deploy target /mnt/nas/docker/audit-viewer/)audit-trail-phase1-2026-05-27—
rollback
rm -rf /mnt/nas/docker/audit-viewer && dcdown audit-viewer
2026-05-27T06:05:00Zmack.135createscripts/audit_emit.pyMack created Python sibling audit_emit.pyaudit-trail-phase1-2026-05-27—
rollback
git revert <audit-emit-py-commit>
2026-05-27T06:00:00Zmack.135createscripts/audit_emit.shMack created audit_emit.sh helper (Phase 1 §6.1 deliverable)audit-trail-phase1-2026-05-27—
rollback
git revert <audit-emit-commit>
2026-05-27T05:00:00Zpax.135createDeliverables/2026-05-27-authentik-sso-integration-roadmap.mdPax authored Authentik SSO integration roadmapauthentik-roadmap-2026-05-27——
2026-05-27T04:00:00Zpax.135createDeliverables/2026-05-27-wave-5-cutover-plan-pax.mdPax authored Wave 5 cutover plan + scriptwave-5-plan-2026-05-27——
2026-05-27T03:00:00Zmack.135createdocker:dockhand-env-sweepDockhand env sweep complete (per dockhand-env-sweep-complete.md)dockhand-sweep-2026-05-27——
2026-05-27T02:30:00Zpax.135createDeliverables/2026-05-27-homelab-audit-and-rollback-design.mdPax authored Phase 1 audit-trail design brief (this work's predecessor)pax-audit-design-2026-05-27—
rollback
git revert <design-doc-commit>
2026-05-27T02:00:00Zmack.135migratedocker:wave-3-slot-setWave 3 cutover (silent vikunja failure surfaced; >30s healthcheck gate added)wave-3-2026-05-27—
rollback
# per wave-3 cutover script in artifacts/
2026-05-27T01:30:00Zsentrypfsenseconfig-editpfsense:unbound:host_entriesUnbound host_entries snapshot pre-renumber (see pfsense-pre-unbound-host_entries.conf)unbound-pre-renumber-2026-05-27Deliverables/2026-05-27-pfsense-pre-unbound-host_entries.conf
rollback
cp Deliverables/2026-05-27-pfsense-pre-unbound-host_entries.conf /var/unbound/host_entries.conf && pfSsh.php playback reload_unbound
2026-05-27T01:00:00Zsentrypfsenseconfig-editpfsense:wan:port-forwardsClosed WAN port-forwards (now superseded by Cloudflare Tunnel) — see pfsense-pre-dns-step1-and-wan-close.xmlwan-close-2026-05-27Deliverables/2026-05-27-pfsense-pre-dns-step1-and-wan-close.xml
rollback
cp Deliverables/2026-05-27-pfsense-pre-dns-step1-and-wan-close.xml /cf/conf/config.xml && pfSsh.php playback restart_all
2026-05-27T00:30:00Zmack.135createcloudflare:tunnel:bjnoela-tunnelCreated Cloudflare Tunnel + ingress for bjnoela.com (replaces WAN-exposed ports)cf-tunnel-2026-05-27—
rollback
cloudflared tunnel delete bjnoela-tunnel
2026-05-26T23:00:00Zmackcloudflaredeletecloudflare:bjnoela.com:meshcentralDeleted stale CF DNS record meshcentral.bjnoela.com (3 records, Bryan-authorized, WAN ports closing)cf-cleanup-2026-05-26cloudflare-record-id:a9d7969d-...-archived-in-MEMORY.md
rollback
# Recreate via Cloudflare API; rollback IDs in Team Knowledge/MEMORY.md
2026-05-26T22:00:00Zsentrypfsenseconfig-editpfsense:sudoers:sentrysudoers grant on pfSense for sentry-user (limited cmd set, per preflight)pfsense-sudoers-2026-05-26Deliverables/2026-05-27-pfsense-pre-task1-fresh-084359.xml
rollback
cp Deliverables/2026-05-27-pfsense-pre-task1-fresh-084359.xml /cf/conf/config.xml && pfSsh.php playback restart_all
2026-05-26T21:15:00Zsentrynas1restartnas1:rebootNAS1 reboot to clear hung NFS exports (Bryan-authorized)nas1-reboot-2026-05-26——
2026-05-26T20:30:00Zmack.135restartdocker:daemonDocker daemon recovery + Traefik restart (sibling-Mack task)docker-recovery-2026-05-26—
rollback
systemctl restart docker && dcup traefik
2026-05-26T19:45:00Zmack.135migratedocker:wave-2-slot-setWave 2 cutover: per wave-2-cutover-plan-mack.md (with 3 retries — see wave-2-retry{,2,3}.sh)wave-2-2026-05-26Deliverables/2026-05-26-wave-2-retry3.sh
rollback
bash Deliverables/2026-05-26-wave-2-retry3.sh --rollback
2026-05-26T18:30:00Zmack.135migratedocker:wave-1-slot-setWave 1 cutover: migrated containers per wave-1-cutover-plan-mack.md (Traefik + adjacent stack)wave-1-2026-05-26Team Knowledge/session-logs/2026/05/artifacts/traefik-docker-compose.post-W1-20260526.yml
rollback
cp Team\ Knowledge/session-logs/2026/05/artifacts/traefik-docker-compose.post-W1-20260526.yml /var/lib/container-data/traefik/docker-compose.yml && dcup traefik