/ Server Status
2026-05-30 16:11:40 AWST
⚠ Safe handoff files only. Passwords and secrets are redacted.

Service Status

systemctl status
● nginx.service - A high performance web server and a reverse proxy server
     Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; preset: enabled)
     Active: active (running) since Fri 2026-05-29 08:49:25 AWST; 1 day 7h ago
       Docs: man:nginx(8)
    Process: 1706 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
    Process: 1712 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
    Process: 24820 ExecReload=/usr/sbin/nginx -g daemon on; master_process on; -s reload (code=exited, status=0/SUCCESS)
   Main PID: 1717 (nginx)
      Tasks: 17 (limit: 19117)
     Memory: 22.9M (peak: 43.1M)
        CPU: 1.400s
     CGroup: /system.slice/nginx.service
             ├─ 1717 "nginx: master process /usr/sbin/nginx -g daemon on; master_process on;"
             ├─24826 "nginx: worker process"
             ├─24827 "nginx: worker process"
             ├─24829 "nginx: worker process"
             ├─24830 "nginx: worker process"
             ├─24831 "nginx: worker process"
             ├─24832 "nginx: worker process"
             ├─24833 "nginx: worker process"
             ├─24835 "nginx: worker process"
             ├─24836 "nginx: worker process"
             ├─24837 "nginx: worker process"
             ├─24838 "nginx: worker process"
             ├─24840 "nginx: worker process"
             ├─24841 "nginx: worker process"
             ├─24843 "nginx: worker process"
             ├─24844 "nginx: worker process"
             └─24845 "nginx: worker process"

May 30 09:58:37 jfmsrv01 systemd[1]: Reloaded nginx.service - A high performance web server and a reverse proxy server.
May 30 14:31:37 jfmsrv01 systemd[1]: Reloading nginx.service - A high performance web server and a reverse proxy server...
May 30 14:31:37 jfmsrv01 nginx[16630]: 2026/05/30 14:31:37 [notice] 16630#16630: signal process started
May 30 14:31:37 jfmsrv01 systemd[1]: Reloaded nginx.service - A high performance web server and a reverse proxy server.
May 30 14:31:47 jfmsrv01 systemd[1]: Reloading nginx.service - A high performance web server and a reverse proxy server...
May 30 14:31:47 jfmsrv01 nginx[16657]: 2026/05/30 14:31:47 [notice] 16657#16657: signal process started
May 30 14:31:47 jfmsrv01 systemd[1]: Reloaded nginx.service - A high performance web server and a reverse proxy server.
May 30 16:03:57 jfmsrv01 systemd[1]: Reloading nginx.service - A high performance web server and a reverse proxy server...
May 30 16:03:57 jfmsrv01 nginx[24820]: 2026/05/30 16:03:57 [notice] 24820#24820: signal process started
May 30 16:03:57 jfmsrv01 systemd[1]: Reloaded nginx.service - A high performance web server and a reverse proxy server.

● postgresql.service - PostgreSQL RDBMS
     Loaded: loaded (/usr/lib/systemd/system/postgresql.service; enabled; preset: enabled)
     Active: active (exited) since Fri 2026-05-29 08:49:24 AWST; 1 day 7h ago
    Process: 1696 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
   Main PID: 1696 (code=exited, status=0/SUCCESS)
        CPU: 2ms

May 29 08:49:24 jfmsrv01 systemd[1]: Starting postgresql.service - PostgreSQL RDBMS...
May 29 08:49:24 jfmsrv01 systemd[1]: Finished postgresql.service - PostgreSQL RDBMS.

● redis-server.service - Advanced key-value store
     Loaded: loaded (/usr/lib/systemd/system/redis-server.service; enabled; preset: enabled)
     Active: active (running) since Fri 2026-05-29 08:49:22 AWST; 1 day 7h ago
       Docs: http://redis.io/documentation,
             man:redis-server(1)
   Main PID: 1575 (redis-server)
     Status: "Ready to accept connections"
      Tasks: 6 (limit: 19117)
     Memory: 7.6M (peak: 8.9M)
        CPU: 2min 26.855s
     CGroup: /system.slice/redis-server.service
             └─1575 "/usr/bin/redis-server 127.0.0.1:6379"

May 29 08:49:22 jfmsrv01 systemd[1]: Starting redis-server.service - Advanced key-value store...
May 29 08:49:22 jfmsrv01 systemd[1]: Started redis-server.service - Advanced key-value store.

● clamav-daemon.service - Clam AntiVirus userspace daemon
     Loaded: loaded (/usr/lib/systemd/system/clamav-daemon.service; enabled; preset: enabled)
    Drop-In: /etc/systemd/system/clamav-daemon.service.d
             └─extend.conf
     Active: active (running) since Fri 2026-05-29 08:49:21 AWST; 1 day 7h ago
TriggeredBy: ● clamav-daemon.socket
       Docs: man:clamd(8)
             man:clamd.conf(5)
             https://docs.clamav.net/
    Process: 1297 ExecStartPre=/bin/mkdir -p /run/clamav (code=exited, status=0/SUCCESS)
    Process: 1421 ExecStartPre=/bin/chown clamav /run/clamav (code=exited, status=0/SUCCESS)
   Main PID: 1443 (clamd)
      Tasks: 2 (limit: 19117)
     Memory: 1.0G (peak: 1.9G)
        CPU: 36.193s
     CGroup: /system.slice/clamav-daemon.service
             └─1443 /usr/sbin/clamd --foreground=true

May 30 09:49:46 jfmsrv01 clamd[1443]: Sat May 30 09:49:46 2026 -> SelfCheck: Database status OK.
May 30 10:49:46 jfmsrv01 clamd[1443]: Sat May 30 10:49:46 2026 -> SelfCheck: Database status OK.
May 30 11:49:46 jfmsrv01 clamd[1443]: Sat May 30 11:49:46 2026 -> SelfCheck: Database status OK.
May 30 12:49:46 jfmsrv01 clamd[1443]: Sat May 30 12:49:46 2026 -> SelfCheck: Database status OK.
May 30 13:49:46 jfmsrv01 clamd[1443]: Sat May 30 13:49:46 2026 -> SelfCheck: Database status OK.
May 30 14:49:38 jfmsrv01 clamd[1443]: Sat May 30 14:49:38 2026 -> Reading databases from /var/lib/clamav
May 30 14:49:49 jfmsrv01 clamd[1443]: Sat May 30 14:49:49 2026 -> Database correctly reloaded (3627865 signatures)
May 30 14:49:49 jfmsrv01 clamd[1443]: Sat May 30 14:49:49 2026 -> SelfCheck: Database status OK.
May 30 14:49:49 jfmsrv01 clamd[1443]: Sat May 30 14:49:49 2026 -> Activating the newly loaded database...
May 30 15:49:50 jfmsrv01 clamd[1443]: Sat May 30 15:49:50 2026 -> SelfCheck: Database status OK.

● supervisor.service - Supervisor process control system for UNIX
     Loaded: loaded (/usr/lib/systemd/system/supervisor.service; enabled; preset: enabled)
     Active: active (running) since Fri 2026-05-29 08:49:22 AWST; 1 day 7h ago
       Docs: http://supervisord.org
   Main PID: 1578 (supervisord)
      Tasks: 1 (limit: 19117)
     Memory: 23.1M (peak: 23.3M)
        CPU: 13.657s
     CGroup: /system.slice/supervisor.service
             └─1578 /usr/bin/python3 /usr/bin/supervisord -n -c /etc/supervisor/supervisord.conf

May 29 08:49:22 jfmsrv01 systemd[1]: Started supervisor.service - Supervisor process control system for UNIX.
May 29 08:49:22 jfmsrv01 supervisord[1578]: 2026-05-29 08:49:22,348 CRIT Supervisor is running as root.  Privileges were not dropped because no user is specified in the config file.  If you intend to run as root, you can set user=root in the config file to avoid this message.
May 29 08:49:22 jfmsrv01 supervisord[1578]: 2026-05-29 08:49:22,348 WARN No file matches via include "/etc/supervisor/conf.d/*.conf"
May 29 08:49:22 jfmsrv01 supervisord[1578]: 2026-05-29 08:49:22,353 INFO RPC interface 'supervisor' initialized
May 29 08:49:22 jfmsrv01 supervisord[1578]: 2026-05-29 08:49:22,353 CRIT Server 'unix_http_server' running without any HTTP authentication checking
May 29 08:49:22 jfmsrv01 supervisord[1578]: 2026-05-29 08:49:22,353 INFO supervisord started with pid 1578

● php8.3-fpm.service - The PHP 8.3 FastCGI Process Manager
     Loaded: loaded (/usr/lib/systemd/system/php8.3-fpm.service; enabled; preset: enabled)
     Active: active (running) since Fri 2026-05-29 08:49:22 AWST; 1 day 7h ago
       Docs: man:php-fpm8.3(8)
    Process: 1653 ExecStartPost=/usr/lib/php/php-fpm-socket-helper install /run/php/php-fpm.sock /etc/php/8.3/fpm/pool.d/www.conf 83 (code=exited, status=0/SUCCESS)
   Main PID: 1553 (php-fpm8.3)
     Status: "Processes active: 0, idle: 2, Requests: 350, slow: 0, Traffic: 0.00req/sec"
      Tasks: 3 (limit: 19117)
     Memory: 156.5M (peak: 161.9M)
        CPU: 26.302s
     CGroup: /system.slice/php8.3-fpm.service
             ├─1553 "php-fpm: master process (/etc/php/8.3/fpm/php-fpm.conf)"
             ├─1650 "php-fpm: pool www"
             └─1651 "php-fpm: pool www"

May 29 08:49:22 jfmsrv01 systemd[1]: Starting php8.3-fpm.service - The PHP 8.3 FastCGI Process Manager...
May 29 08:49:22 jfmsrv01 systemd[1]: Started php8.3-fpm.service - The PHP 8.3 FastCGI Process Manager.

Firewall Rules

ufw status verbose
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), disabled (routed)
New profiles: skip

To                         Action      From
--                         ------      ----
80/tcp                     ALLOW IN    Anywhere                   # HTTP - Let Encrypt and redirect
443/tcp                    ALLOW IN    Anywhere                   # HTTPS - Web portal
22/tcp                     ALLOW IN    Anywhere                   # SSH management
5432/tcp                   DENY IN     Anywhere                   # Block PostgreSQL externally
6379/tcp                   DENY IN     Anywhere                   # Block Redis externally
445/tcp                    DENY IN     Anywhere                   # Block SMB externally
139/tcp                    DENY IN     Anywhere                   # Block SMB/NetBIOS externally
8080                       ALLOW IN    192.168.0.0/16             # Filament admin internal
9002                       ALLOW IN    192.168.0.0/16             # Handoff portal internal
9002/tcp                   ALLOW IN    Anywhere                   # Handoff portal - filtered by Untangle
Anywhere on ens192         ALLOW IN    10.133.133.2               # Ollama responses from aiepyc01
8090/tcp                   ALLOW IN    Anywhere                   # GoSeek AI Workbench - filtered by Untangle
80/tcp (v6)                ALLOW IN    Anywhere (v6)              # HTTP - Let Encrypt and redirect
443/tcp (v6)               ALLOW IN    Anywhere (v6)              # HTTPS - Web portal
5432/tcp (v6)              DENY IN     Anywhere (v6)              # Block PostgreSQL externally
6379/tcp (v6)              DENY IN     Anywhere (v6)              # Block Redis externally
445/tcp (v6)               DENY IN     Anywhere (v6)              # Block SMB externally
139/tcp (v6)               DENY IN     Anywhere (v6)              # Block SMB/NetBIOS externally
9002/tcp (v6)              ALLOW IN    Anywhere (v6)              # Handoff portal - filtered by Untangle
8090/tcp (v6)              ALLOW IN    Anywhere (v6)              # GoSeek AI Workbench - filtered by Untangle

Cron Jobs

/etc/cron.d/
total 24
drwxr-xr-x   2 root root 4096 May 28 10:44 .
drwxr-xr-x 119 root root 4096 May 29 06:12 ..
-rw-r--r--   1 root root  802 Apr 16  2023 certbot
-rw-r--r--   1 root root  201 Apr  8  2024 e2scrub_all
-rw-r--r--   1 root root  712 Nov 24  2025 php
-rw-r--r--   1 root root  396 Jan 10  2024 sysstat
cron.d contents
none yet

Open Ports

ss -tlnp
State  Recv-Q Send-Q Local Address:Port Peer Address:PortProcess                                                                                                                                                                                                                                                                                                                                                                                                                                                          
LISTEN 0      511          0.0.0.0:8090      0.0.0.0:*    users:(("nginx",pid=24845,fd=16),("nginx",pid=24844,fd=16),("nginx",pid=24843,fd=16),("nginx",pid=24841,fd=16),("nginx",pid=24840,fd=16),("nginx",pid=24838,fd=16),("nginx",pid=24837,fd=16),("nginx",pid=24836,fd=16),("nginx",pid=24835,fd=16),("nginx",pid=24833,fd=16),("nginx",pid=24832,fd=16),("nginx",pid=24831,fd=16),("nginx",pid=24830,fd=16),("nginx",pid=24829,fd=16),("nginx",pid=24827,fd=16),("nginx",pid=24826,fd=16),("nginx",pid=1717,fd=16))
LISTEN 0      511          0.0.0.0:8080      0.0.0.0:*    users:(("nginx",pid=24845,fd=15),("nginx",pid=24844,fd=15),("nginx",pid=24843,fd=15),("nginx",pid=24841,fd=15),("nginx",pid=24840,fd=15),("nginx",pid=24838,fd=15),("nginx",pid=24837,fd=15),("nginx",pid=24836,fd=15),("nginx",pid=24835,fd=15),("nginx",pid=24833,fd=15),("nginx",pid=24832,fd=15),("nginx",pid=24831,fd=15),("nginx",pid=24830,fd=15),("nginx",pid=24829,fd=15),("nginx",pid=24827,fd=15),("nginx",pid=24826,fd=15),("nginx",pid=1717,fd=15))
LISTEN 0      200        127.0.0.1:5432      0.0.0.0:*    users:(("postgres",pid=1654,fd=6))                                                                                                                                                                                                                                                                                                                                                                                                                              
LISTEN 0      511        127.0.0.1:6379      0.0.0.0:*    users:(("redis-server",pid=1575,fd=6))                                                                                                                                                                                                                                                                                                                                                                                                                          
LISTEN 0      4096   127.0.0.53%lo:53        0.0.0.0:*    users:(("systemd-resolve",pid=1160,fd=15))                                                                                                                                                                                                                                                                                                                                                                                                                      
LISTEN 0      4096      127.0.0.54:53        0.0.0.0:*    users:(("systemd-resolve",pid=1160,fd=17))                                                                                                                                                                                                                                                                                                                                                                                                                      
LISTEN 0      511          0.0.0.0:9002      0.0.0.0:*    users:(("nginx",pid=24845,fd=17),("nginx",pid=24844,fd=17),("nginx",pid=24843,fd=17),("nginx",pid=24841,fd=17),("nginx",pid=24840,fd=17),("nginx",pid=24838,fd=17),("nginx",pid=24837,fd=17),("nginx",pid=24836,fd=17),("nginx",pid=24835,fd=17),("nginx",pid=24833,fd=17),("nginx",pid=24832,fd=17),("nginx",pid=24831,fd=17),("nginx",pid=24830,fd=17),("nginx",pid=24829,fd=17),("nginx",pid=24827,fd=17),("nginx",pid=24826,fd=17),("nginx",pid=1717,fd=17))
LISTEN 0      511          0.0.0.0:443       0.0.0.0:*    users:(("nginx",pid=24845,fd=20),("nginx",pid=24844,fd=20),("nginx",pid=24843,fd=20),("nginx",pid=24841,fd=20),("nginx",pid=24840,fd=20),("nginx",pid=24838,fd=20),("nginx",pid=24837,fd=20),("nginx",pid=24836,fd=20),("nginx",pid=24835,fd=20),("nginx",pid=24833,fd=20),("nginx",pid=24832,fd=20),("nginx",pid=24831,fd=20),("nginx",pid=24830,fd=20),("nginx",pid=24829,fd=20),("nginx",pid=24827,fd=20),("nginx",pid=24826,fd=20),("nginx",pid=1717,fd=20))
LISTEN 0      4096         0.0.0.0:22        0.0.0.0:*    users:(("sshd",pid=1750,fd=3),("systemd",pid=1,fd=97))                                                                                                                                                                                                                                                                                                                                                                                                          
LISTEN 0      511          0.0.0.0:80        0.0.0.0:*    users:(("nginx",pid=24845,fd=18),("nginx",pid=24844,fd=18),("nginx",pid=24843,fd=18),("nginx",pid=24841,fd=18),("nginx",pid=24840,fd=18),("nginx",pid=24838,fd=18),("nginx",pid=24837,fd=18),("nginx",pid=24836,fd=18),("nginx",pid=24835,fd=18),("nginx",pid=24833,fd=18),("nginx",pid=24832,fd=18),("nginx",pid=24831,fd=18),("nginx",pid=24830,fd=18),("nginx",pid=24829,fd=18),("nginx",pid=24827,fd=18),("nginx",pid=24826,fd=18),("nginx",pid=1717,fd=18))
LISTEN 0      511             [::]:443          [::]:*    users:(("nginx",pid=24845,fd=21),("nginx",pid=24844,fd=21),("nginx",pid=24843,fd=21),("nginx",pid=24841,fd=21),("nginx",pid=24840,fd=21),("nginx",pid=24838,fd=21),("nginx",pid=24837,fd=21),("nginx",pid=24836,fd=21),("nginx",pid=24835,fd=21),("nginx",pid=24833,fd=21),("nginx",pid=24832,fd=21),("nginx",pid=24831,fd=21),("nginx",pid=24830,fd=21),("nginx",pid=24829,fd=21),("nginx",pid=24827,fd=21),("nginx",pid=24826,fd=21),("nginx",pid=1717,fd=21))
LISTEN 0      4096            [::]:22           [::]:*    users:(("sshd",pid=1750,fd=4),("systemd",pid=1,fd=98))                                                                                                                                                                                                                                                                                                                                                                                                          
LISTEN 0      511             [::]:80           [::]:*    users:(("nginx",pid=24845,fd=19),("nginx",pid=24844,fd=19),("nginx",pid=24843,fd=19),("nginx",pid=24841,fd=19),("nginx",pid=24840,fd=19),("nginx",pid=24838,fd=19),("nginx",pid=24837,fd=19),("nginx",pid=24836,fd=19),("nginx",pid=24835,fd=19),("nginx",pid=24833,fd=19),("nginx",pid=24832,fd=19),("nginx",pid=24831,fd=19),("nginx",pid=24830,fd=19),("nginx",pid=24829,fd=19),("nginx",pid=24827,fd=19),("nginx",pid=24826,fd=19),("nginx",pid=1717,fd=19))
Auto-generated by publish_handoff.sh | 20260530_161140