# Daily Proxy Audit

- Started: 2026-11-15T04:02:50+08:00
- Log: /opt/vps-maintenance/logs/daily-proxy-audit-20261115-040250.log

## SG Gateway
- OK: SG service active: caddy
- OK: SG service active: privoxy
- OK: SG service active: mmr-codex-la-socks.service
- OK: SG Codex proxy egress is 173.242.125.224
- OK: Main IPv6 subscription URL returned HTTP 200
- OK: IPv4 subscription URL returned HTTP 200
- OK: Cloudflare raw/base64 subscription URL returned HTTP 200
- OK: Main IPv6 base64 subscription decoded line count 12
- FAIL: IPv4 base64 subscription decoded line count 4, expected 3
- OK: Cloudflare base64 subscription decoded line count 1
- FAIL: Full Mihomo subscription YAML parse/count failed
- OK: Cloudflare-only Mihomo subscription YAML proxy count 1
- OK: No stale blocked/old IP found in active subscription files

## LA Initial - primary application host
- OK: la-initial service active: xray
- OK: la-initial service active: hysteria-server
- OK: la-initial service active: netfilter-persistent
- OK: la-initial service active: vertex-la-direct.service
- OK: la-initial service active: vertex-anti-stream.service
- OK: la-initial service active: vertex-la2-direct.service
- OK: SG service active: vertex-la1-tunnel.service
- OK: SG service active: vertex-anti-la1-tunnel.service
- OK: SG service active: vertex-la2-tunnel.service
- OK: LA1 standalone Vertex tunnel reachable from SG: 127.0.0.1:2162
- OK: LA1 anti-truncation Vertex tunnel reachable from SG: 172.19.0.1:2164
- OK: LA2-compatible Vertex restored on LA1 reachable from SG: 127.0.0.1:2163
- OK: Initial LA IPv4 high-port Reality/HY2 reachable from SG: 173.242.125.224:31888
- OK: Initial LA Kiro upstream reachable from SG: 173.242.125.224:7865
- FAIL: Initial LA CLI proxy upstream not reachable from SG: 173.242.125.224:8317
- OK: Initial LA IPv4 443 is not reachable from SG
- OK: Initial LA Xray protocol/port config matches expected Reality layout

## LA Second - network nodes and pending vertex-new source
- OK: la-second service active: xray
- OK: la-second service active: cloudflared-la2.service
- OK: la-second service active: vertex-new.service
- OK: Second LA Vertex upstream reachable from SG: 67.230.166.186:2156
- OK: Second LA Cloudflare WS local Xray inbound matches expected layout
- OK: Cloudflare tunnel reaches second LA VLESS WS endpoint (HTTP 400 for non-WS probe is expected)

## Version Watch
- UPDATE: Xray initial LA current 26.3.27, latest v26.11.9
- UPDATE: Xray second LA current 26.3.27, latest v26.11.9
- UPDATE: cloudflared second LA current 2026.6.1, latest 2026.11.0
- UPDATE: Caddy SG current unknown, latest v2.11.9
- UPDATE: Codex CLI current 0.144.3, npm latest 0.169.0

## Summary

- Failures: 3
- Warnings: 0
- Updates available: 5
- Finished: 2026-11-15T04:03:57+08:00